Privacy Policy
Last updated: July 2026
BASE45 ("we", "us") is operated from British Columbia, Canada. This policy explains what personal information we collect, why, and your rights under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- Account information — your email address, used to sign you in and contact you about your account.
- Training data — the programs you build and the workouts, sets, weights, reps, and session feedback you log.
- Diet and body data — if you enable diet features: food logs, calorie/macro targets, and body-weight history.
- Payment status — your subscription status from our payment processor. We never see or store your card number.
- Technical data — server logs and error reports needed to keep the service working.
Training, diet, and body-weight information is health-adjacent personal information. We treat it accordingly: it is used only to run the features you use, and it is never sold or shared for advertising.
Why we collect it
To provide the service: generating and adjusting your training program, showing your analytics, and (if enabled) tracking your diet. We do not use your data for anything else.
Service providers
We use a small number of providers to run BASE45. Each receives only what it needs:
- Supabase — authentication, database hosting, and sign-in emails.
- Stripe — payment processing. Card details go directly to Stripe and never touch our servers.
- Cloudflare — bot protection (Turnstile) on the sign-in form and network services.
- Sentry — error monitoring, so we can fix problems.
Some providers process data outside Canada (primarily in the United States). Where that happens, your information is subject to the laws of those jurisdictions.
Retention and deletion
We keep your data for as long as you have an account. Email [email protected] to request a copy of your data, a correction, or full deletion of your account and its data — we will action deletion requests within 30 days. Transaction records held by our payment processor are retained as legally required and are not deleted with your account.
Your rights
Under PIPEDA you may access the personal information we hold about you, challenge its accuracy, and withdraw consent (by deleting your account). You may also complain to the Office of the Privacy Commissioner of Canada.
Changes
If this policy changes materially, we will note the new date above and, for significant changes, email account holders.
Contact
Privacy questions: [email protected]