Privacy Policy

Last updated 20 June 2026

Your health data is yours. This policy explains what Base collects, how we use it, who can see it, and the control you keep over it.

1. Who we are

Base Metabolic (“Base”, “we”, “us”) provides a weight-management health platform — mobile apps for patients and the clinicians who care for them — operated from Kuwait. This policy applies to the Base patient app, the Base clinician app, and the related services (together, the “Service”). For any privacy question, contact privacy@basemetabolic.com.

2. Information we collect

We only collect what we need to run the Service and support your care.

Account information

• Name, email address, and password.
• Date of birth (to confirm eligibility and apply age-appropriate protections).
• If a clinician created your account, an access or connection code that links you to their clinic.

Health and clinical information you provide

• Weight, body measurements, and goals.
• Weekly check-ins, including mood, side effects, and how you are feeling.
• Medications and doses, and lab or body-composition results you enter or upload (including photos of reports).

Health data from Apple Health and connected devices

• With your permission, metrics such as steps, heart rate, resting heart rate, heart-rate variability, and sleep.
• If you separately enable it, menstrual-cycle data, which is treated as sensitive health information.
• If you connect a wearable account (for example WHOOP), the specific data types you authorize.

Usage and device information

• Basic device and app information and diagnostic logs, used to keep the app working and secure.

3. How we use your information

• To provide the Service — track your progress, show insights, send the reminders you turn on.
• To support your care — if you connect a clinician or care-team member, they can view the records you share so they can guide your treatment. You choose whether to connect, and you can disconnect at any time.
• To generate AI-assisted insights — see section 4.
• To improve the Service — using aggregated or de-identified information that does not identify you.
• To keep you safe and meet legal obligations — for security, fraud prevention, and to comply with applicable law.

We rely on your consent and on the provision of healthcare services as the basis for processing your health data. You can withdraw consent at any time in the app or by emailing us.

4. AI-assisted features

Base uses artificial intelligence (provided by Anthropic) to turn your data into plain-language summaries and coaching. Two rules always apply:

• The AI never makes a clinical decision about you. It produces information; any clinical decision is your clinician’s.
• Your direct identifiers are removed first. Your name, date of birth, and contact details are stripped before any data is sent for AI processing.

You can opt out of AI processing in the app under Privacy & data.

5. Apple Health and connected devices

When you connect Apple Health or a wearable, we access only the data types you authorize, and only to provide the features you enable. We never use health or fitness data for advertising or marketing, we never sell it, and we do not store your health data in iCloud. You can disconnect a source at any time, which stops further collection from it.

6. How we share information

We do not sell your personal data, and we do not use your health data for advertising. We share information only as follows:

• Your care team — clinicians, nutritionists, or labs you choose to connect, with your consent.
• Service providers — vendors who help us run the Service (such as secure cloud hosting and the AI provider described above), under contracts that limit them to processing data on our behalf.
• Legal and safety — where required by law, or to protect the rights, safety, and security of users and the public.

7. How we protect your information

We encrypt your data in transit and at rest, restrict access to those who need it, and keep audit records of access to clinical data. No method of storage or transmission is completely secure, but we work to protect your information using safeguards appropriate to its sensitivity.

8. How long we keep it

We keep your information while your account is active and for as long as needed to provide the Service. Some clinical records may be retained for longer where the law requires it (for example, medical-records retention rules). When you delete your account, we delete or de-identify your personal data, except records we are legally required to keep, which we restrict from further use.

9. Your choices and rights

You can, at any time:

• Access and download a copy of your data.
• Correct information that is inaccurate.
• Delete your account and personal data.
• Restrict or object to certain processing, and withdraw consent.

Most of these are available directly in the app under Settings → Privacy & data. You can also exercise them by emailing privacy@basemetabolic.com.

10. International transfers

Base operates from Kuwait. Some of our service providers may process data in other countries, including in the United States and Europe. Where data is transferred across borders, we take steps to protect it consistent with this policy and applicable law.

11. Children

The Service is intended for adults. We collect date of birth at sign-up and do not knowingly create accounts for individuals below the age at which independent consent is permitted in their jurisdiction without the required guardian consent. If you believe a child has provided us information without proper consent, contact us and we will address it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app.

13. Contact us

Questions or requests about your privacy: privacy@basemetabolic.com.