Privacy Policy

Last updated: June 2026

1. Introduction

BMAT Japan K.K. ("we", "us", "our") operates the Base Level mobile application. This policy describes how we collect, use, and protect your personal and health data.

2. Data We Collect

  • Health data: Sleep metrics, heart rate, SpO2, respiratory rate, and activity data read from Apple HealthKit.
  • Smart ring data: If you connect an optional smart ring (Colmi R02/R09) over Bluetooth, its battery level, daily activity, and heart-rate readings are processed on your device and are not uploaded.
  • Account data: Email address used for authentication (passkey or email sign-in link; no passwords stored).
  • Usage data: Anonymous analytics to improve the app experience.

3. How We Use Your Data

  • Generate personalized health analytics.
  • Sync data across your devices (Pro tier, coming soon).
  • Improve our algorithms and app experience.

4. Data Storage & Security

Your health data stays on your device unless you create an optional account and a cloud-enabled tier syncs it; without an account, nothing is uploaded. When cloud sync is enabled (the Pro tier, or drink-log sync for cloud-enabled accounts), that data, such as drink entries and their optional location tags, is encrypted and stored on Cloudflare's global network with encryption at rest and in transit. You can remove it at any time via Settings → Delete Account.

5. Data Sharing

We do not sell your personal or health data. We do not share your data with third parties except as required by law.

6. Your Rights

You can delete all your data at any time from within the app. Account deletion permanently removes all associated data from our servers.

7. Contact

For privacy-related questions, contact us at privacy@baselevel.app.