Health Disclaimer, Privacy Policy & Terms of Use

Health Disclaimer

Baseline provides health and wellness information, cycle tracking, health reports, personalised insights and AI assisted analyses for informational and health management purposes. Baseline is not a medical device and does not diagnose, treat, cure or prevent any medical condition.

The information and reports provided by this service are for informational purposes only and are not a substitute for professional medical advice, diagnosis or treatment. Information generated by Baseline, including AI generated analyses, cycle predictions, symptom patterns, biomarker interpretations and personalised reports, may be incomplete or inaccurate and should not be used as the sole basis for medical decisions.

Always consult a qualified healthcare professional before making decisions about diagnosis, treatment, medication, fertility care, pregnancy, contraception or management of a medical condition. Do not stop, start or change any prescribed medication based only on information provided by Baseline.

Cycle and fertility predictions are estimates and must not be relied upon as a method of contraception, or as confirmation of fertility, infertility, ovulation or pregnancy.

Baseline is not an emergency service. If you believe you are experiencing a medical emergency, contact your local emergency services or seek urgent medical attention immediately.

Using Baseline's informational or AI features does not by itself create a clinician and patient relationship. Where you separately book and receive a consultation with a healthcare professional through Baseline or one of our clinical partners, that clinical interaction may be subject to the healthcare professional's separate professional responsibilities and terms.

Privacy Policy

This Privacy Policy explains how Baseline collects, uses, stores, shares and protects personal data when you use the Baseline website, the Baseline mobile applications for iOS and Android, and related Baseline services. For the purposes of applicable data protection law, Baseline is responsible for the personal data described in this policy.

Baseline holds real personal and sensitive health information about you. This policy sets out what we collect, what we do with it, how long we keep it, how you can have it deleted, and the choices and rights available to you.

We do not sell your personal data. We do not share your health information with advertisers, and we do not use your health information for advertising or behavioural marketing.

Your consent to health data processing

Health information is sensitive personal data. When you choose to provide health information to Baseline, you expressly consent to Baseline collecting and processing that information for the purposes described in this Privacy Policy, including providing cycle tracking, personalised reports, AI assisted analyses, clinician services and other features you request.

You may stop providing optional information at any time. You may also withdraw consent where applicable by contacting us or deleting your account. Withdrawal of consent does not affect processing that has already occurred, and does not require us to delete information we are legally required to retain.

Information we collect

• Account details. Your name, email address, phone number, authentication information and, if you choose to provide one, profile picture.
• Health profile. Your age, menstrual and reproductive health information, typical cycle length, cycle regularity, symptoms, health concerns, medical history and information provided through Baseline intake forms.
• Cycle and daily logs. Period dates, symptoms, mood, intimacy information, medication information and other health or wellbeing entries that you choose to record.
• Clinical records. Blood test results, biomarker information, prescriptions, consultation information, clinician notes and health related documents that you or an authorised healthcare professional upload to the service.
• Reports and analyses. Reports, health analyses, cycle analyses, personalised insights and other outputs generated through Baseline.
• Subscription and purchase information. Information needed to manage your subscription, such as the subscription product, entitlement, purchase status, renewal status and transaction information received through the app stores and our subscription management provider. Baseline does not receive your full payment card details. Apple and Google process purchases according to their own terms and privacy policies.
• Technical and security information. Information generated when you use the service, such as server logs, authentication events, device or application information, IP address and diagnostic information, where necessary to operate, secure and troubleshoot the service.

Reminder notifications in the mobile app are generated on your own device, so their content is not sent to Baseline.

How we collect information

Most information is provided directly by you when you create an account, complete an intake, record symptoms or cycle information, upload documents, enter laboratory results, communicate with us or use Baseline features.

Information may also be generated by the service itself, provided by a healthcare professional involved in your care with appropriate authority, or received from the app stores and our subscription management provider in connection with subscriptions and purchases.

How we use your information

• To provide and operate Baseline, including showing you your health history, cycle information, predictions, personalised insights and reports.
• To enable authorised healthcare professionals involved in your care to review the information needed for a consultation.
• To generate written analyses and personalised insights, using information such as your health profile, cycle logs, symptoms, laboratory results and previous reports.
• To send requested reports, account communications, security notices, appointment information and other service related messages.
• To determine your access to paid features and manage subscription status.
• To maintain the service, investigate faults, protect accounts, prevent abuse and improve security.

We do not use your personal health information for advertising, targeted advertising or the creation of advertising profiles.

AI processing

Some Baseline features use artificial intelligence to generate personalised analyses and written health information. When you request one of these features, information relevant to generating the analysis is securely transmitted to our AI processing provider. Depending on the feature, this may include symptoms, cycle information, health profile information, laboratory results, biomarker information, health history and information from previous Baseline reports. We limit what is transmitted to what is reasonably necessary for the requested feature.

That provider acts as a service provider to Baseline. Baseline does not authorise it to use your health information for advertising, and does not opt in to using your health information to train its general purpose models. The provider may process and retain limited information for security, abuse prevention and service operation, in accordance with the data controls applicable to the service Baseline uses. We will confirm who this provider is on request, at baselinemalaysia@gmail.com.

AI generated information may contain errors and is reviewed according to the safeguards applicable to the relevant Baseline feature. It must not be treated as a medical diagnosis or used as the sole basis for a medical decision.

Who can access or receive your information

You can access information associated with your account, and no one signed in as another user can reach your records. Authorised members of the Baseline team may access information where necessary to provide the service, support your account, maintain security or deliver clinical services. Access is limited according to role and operational need.

Where you receive clinical care through Baseline, healthcare professionals involved in that care may access relevant health information as necessary for the consultation or service you requested.

A limited number of service providers process information on Baseline's behalf so that we can operate the service:

• Cloud database, authentication and file storage providers — secure storage of your account and health information.
• Application hosting and content delivery providers — hosting and delivery of Baseline's web and application services.
• Our AI processing provider — generation of AI assisted analyses and reports, as described under AI processing above.
• Transactional email provider — delivery of service related email, such as your reports and account notices.
• Subscription management provider — the subscription and entitlement information required to manage mobile subscriptions.
• Apple and Google — mobile application purchases, subscription transactions and certain platform related information, under their respective terms and privacy policies.

We can tell you which providers we currently use for each of these purposes. Write to baselinemalaysia@gmail.com and we will confirm them.

Where a provider acts on Baseline's behalf, it is required to protect information in accordance with applicable contractual and data protection obligations, and is not permitted to keep it for its own purposes. Providers may retain limited information where required for security, legal compliance, fraud prevention or the operation of their services.

We may also disclose information where required by applicable law, regulation, court order or lawful request from an authorised public authority. If Baseline undergoes a corporate restructuring, merger, acquisition or transfer of business, personal data may be transferred as part of that transaction, subject to appropriate confidentiality, security and legal protections.

International processing

Some of the technology providers that support Baseline operate infrastructure outside Malaysia, so personal data may be processed or stored in countries other than Malaysia. Where personal data is transferred outside Malaysia, Baseline takes reasonable steps to ensure the transfer is permitted under applicable data protection law and that appropriate safeguards are used to protect the information.

Data retention

Baseline is designed to provide a longitudinal record of your health. We therefore retain the information associated with your account while your account remains active, so that you can view your history and trends over time — nothing is deleted on a timer. We keep it until you ask us to delete it, or until you delete your account, and we retain personal data only for as long as reasonably necessary for the purposes described in this policy or for another period required by applicable law.

• When you delete your account. We delete or de-identify the personal data associated with your account from Baseline's active systems — your profile, health profile, cycle and symptom logs, blood work and laboratory information, prescriptions, consultations, uploaded documents, reports, analyses and login credentials — except where specific information must be retained for a legitimate legal, clinical, accounting, security, fraud prevention or regulatory obligation. Anything retained for that reason is restricted to the purpose requiring it and deleted when that requirement expires.
• Backups. Residual copies may remain in encrypted backups for no more than 30 days after deletion, and are not used for anything else.
• Anonymous and aggregated information. If you give a reason when you delete your account, we keep that reason indefinitely to understand why people leave. It is stored with no name, email or account identifier, so it cannot be traced back to you. We may also retain statistical, aggregated or properly de-identified information that cannot reasonably be used to identify you. Information that remains identifiable continues to be treated as personal data under this policy.
• Communications with us. Messages you send to our support or contact addresses are retained only for as long as reasonably necessary to respond to you, maintain an appropriate record of the interaction, resolve disputes, maintain security or comply with legal obligations. Ask us and we will delete them.
• Intake forms without an account. If you submit an intake or enquiry without creating an account, we retain the information only for as long as reasonably necessary to provide the requested follow up or service, so that a clinician can respond. You may request its deletion at any time unless retention is required by law.
• Technical logs. Technical and security logs record events rather than your health data. They are retained for a limited period appropriate to security, fraud prevention, troubleshooting and legal requirements, and are then deleted, anonymised or aggregated.

Where the law requires us to keep a particular record for longer — for example certain payment, tax, clinical or legal records — we retain only the information required, and only for the required period.

How to delete your account and data

You can request deletion of your account and the personal data attached to it at any time, through any of the following routes:

• In the mobile app: open Profile → Privacy & data → Delete my account, then follow the confirmation instructions.
• On the website: sign in, open your Profile, choose Delete My Account and type DELETE to confirm.
• On our public deletion page: this page is reachable without signing in, at baseline.website/data-deletion, so you can find these instructions even if the mobile app is no longer installed.
• By email: if you cannot sign in, write to baselinemalaysia@gmail.com from the email address associated with your account, using “Delete my account” as the subject. We may take reasonable steps to verify that the request is being made by the account holder.

We process verified deletion requests without unnecessary delay, and in any event within 30 days — usually much sooner. Deletion through the app or website takes effect immediately.

Account deletion is intended to be permanent. Once completed, information deleted from the active account cannot normally be restored. The only information that remains is the anonymous reason described above, anything retained under a legal or regulatory obligation, and copies inside encrypted backups until those roll over within 30 days.

Deleting your Baseline account does not automatically cancel a paid subscription purchased through the App Store or Google Play. Mobile subscriptions are managed by Apple or Google and should be cancelled through the subscription settings associated with your Apple or Google account.

Your rights and choices

• Access. You may ask whether Baseline processes personal data about you and request access to it, subject to applicable law.
• Correction. You may correct information available for editing within the app, or ask us to correct inaccurate personal data.
• Deletion. You may request deletion of your account and associated personal data as described above.
• Withdrawal of consent. Where processing is based on your consent, you may withdraw that consent, subject to applicable legal requirements.
• Direct marketing. You may opt out of marketing communications. Service messages required to operate your account may still be sent.
• Data copy and portability. You may request a copy of the personal data we hold about you in a readable format and, where applicable law provides a right to portability and the request is technically feasible, request its transfer in accordance with that law.

Questions about exercising these rights can be sent to baselinemalaysia@gmail.com.

Security

Baseline uses technical and organisational safeguards designed to protect personal data against unauthorised access, alteration, disclosure or loss. Information is encrypted in transit and at rest.

Baseline uses access controls designed to prevent one account from reaching another account's records. Staff access is restricted according to role and legitimate operational or clinical need.

No method of electronic transmission or storage can be guaranteed to be completely secure. If Baseline becomes aware of a personal data breach, we will respond and provide notifications where required by applicable law.

Age requirements

Baseline is intended for adults aged 18 years and above. The service is not intended for children or persons under 18, and we do not knowingly collect personal or health information from anyone under 18.

If we become aware that information from a person under 18 has been collected contrary to this policy, we will take appropriate steps to delete it, subject to applicable law. If you believe that a person under 18 has provided information to Baseline, contact us at baselinemalaysia@gmail.com.

Changes to this Privacy Policy

We may update this Privacy Policy as Baseline's services, technology or legal requirements change. The “Last updated” date identifies the most recent revision. Where a change materially affects how we use sensitive personal data, we will provide appropriate notice through the app, website or email before the change takes effect, where required.

Contact us

For questions, privacy requests or complaints concerning personal data or this Privacy Policy, contact Baseline, operated by Sante Solutions, Malaysia, at baselinemalaysia@gmail.com.

Terms of Use

Acceptance of these Terms

These Terms of Use apply to your use of the Baseline website, mobile applications and related services. By creating an account or using Baseline, you agree to these Terms and acknowledge the Privacy Policy and Health Disclaimer above. If you do not agree with these Terms, do not use Baseline. We may update these Terms from time to time; continued use after changes take effect constitutes acceptance of the updated Terms.

Eligibility

You must be at least 18 years old to create a Baseline account or use Baseline's health services. You are responsible for providing accurate information when creating and using your account.

What Baseline provides

Baseline provides digital health and wellness tools including cycle tracking, symptom logging, storage and display of health information, laboratory information, personalised reports, AI assisted health analyses, educational information, subscription features and access to certain healthcare or wellness services. Features may change as Baseline develops. We may add, modify or discontinue features where reasonably necessary.

Medical and AI limitations

Baseline is not a medical device and does not diagnose, treat, cure or prevent medical conditions. AI generated information may contain errors, omissions or unexpected results. It is provided to assist understanding and health management, and must not replace assessment by a qualified healthcare professional.

You should not rely on Baseline for emergency care, diagnosis, medication decisions, contraception, confirmation of ovulation, confirmation of fertility or infertility, or other decisions where inaccurate information could cause harm. Always seek appropriate professional medical advice when making decisions about your health.

Clinical consultations

Where Baseline allows you to book or access a consultation with a healthcare professional, the professional remains responsible for their own clinical judgement and professional obligations. Use of Baseline's informational features alone does not establish a clinician and patient relationship. A clinical relationship may arise separately when a healthcare professional accepts and provides a consultation or clinical service.

Your account

You are responsible for maintaining the confidentiality of your login credentials and for activity performed through your account. You must notify Baseline if you believe your account has been accessed without authorisation.

You must not impersonate another person, access another person's health information without authority, interfere with Baseline's systems, attempt to bypass security controls, upload malicious content, or use the service for unlawful purposes.

Information you provide

You retain ownership of the health records, documents and other content you provide to Baseline. You grant Baseline permission to store, process, reproduce and transmit that information only as reasonably necessary to provide the services you request, operate Baseline and fulfil the purposes described in the Privacy Policy. You are responsible for ensuring that you have the right to upload any information or document you submit.

Subscriptions and purchases

Some Baseline features may require a paid subscription. The applicable price, subscription duration and included features will be displayed before purchase. Subscriptions purchased through the App Store or Google Play are processed by the relevant platform and may automatically renew unless cancelled according to that platform's subscription terms. The price charged at purchase and renewal is the price shown through the relevant store, subject to applicable taxes, currency and store policies.

You can manage or cancel a mobile subscription through your Apple or Google subscription settings. Deleting your Baseline account does not automatically cancel a subscription purchased through Apple or Google. Where supported, Baseline will provide a method to restore eligible purchases associated with your store account. Refunds for purchases processed by Apple or Google are generally governed by the refund rules of the relevant platform.

Intellectual property

Baseline's software, branding, interface, design, reports, educational materials, algorithms and other content created by Baseline are owned by or licensed to Baseline and are protected by applicable intellectual property laws.

You may use Baseline for personal use in accordance with these Terms, including viewing your reports and downloading or printing them for your own records or to share with a licensed healthcare provider. You may not copy, scrape, bulk export, reverse engineer, redistribute, sell or commercially exploit Baseline's software, content, designs, workflows or proprietary materials, except where permitted by law or with written permission from Baseline.

Third party services

Baseline relies on third party technology and platform providers, and their availability may affect certain Baseline features. Apple, Google and other third party services may also have their own terms and privacy policies that apply to your use of their services.

Availability of the service

We aim to keep Baseline available and functioning reliably, but we do not guarantee uninterrupted or error free availability. Maintenance, technical failures, internet availability, third party service interruptions or other circumstances may temporarily affect access.

Suspension or termination

We may restrict or suspend access where reasonably necessary to protect users, investigate security issues, prevent unlawful use, enforce these Terms or comply with legal obligations. You may stop using Baseline at any time, and may delete your account using the methods described in the Privacy Policy.

Disclaimer of warranties

To the maximum extent permitted by applicable law, Baseline is provided on an “as available” basis. We do not guarantee that every prediction, report, analysis or AI generated output will be complete, accurate or suitable for a particular medical decision. Nothing in these Terms excludes any guarantee, right or remedy that cannot lawfully be excluded under applicable consumer law.

Limitation of liability

To the maximum extent permitted by applicable law, Baseline is not responsible for losses arising solely from reliance on informational or AI generated content contrary to the Health Disclaimer or these Terms. Nothing in these Terms limits liability where limitation would be prohibited by applicable law, including liability that cannot legally be excluded or limited.

Governing law

These Terms are governed by the laws of Malaysia, subject to any mandatory consumer protection rights that apply to you in another jurisdiction.

Changes to these Terms

We may update these Terms when Baseline's services, legal obligations or business arrangements change. Material changes will be communicated through the service or another appropriate method. Continued use after updated Terms take effect constitutes acceptance where permitted by applicable law. If you do not agree with revised Terms, you should stop using Baseline and may delete your account.

Contact

Questions about these Terms can be sent to Baseline, operated by Sante Solutions, Malaysia, at baselinemalaysia@gmail.com.