Your visit stays yours.

Data we handle

BastCare handles the minimum information needed to provide an account, create a visit summary, deliver a share you request, and show whether those actions worked.

• Account: your Bast identity, sign-in state, and device/account identifiers.
• On your iPhone: temporary audio, the original transcript, your saved summary, available information about how the summary was made, sharing choices, and encryption keys.
• AI processing: a separate copy of transcript text sent securely through Bast to the selected AI provider when you create or regenerate a summary, with configured names masked. Translation also sends text for processing with configured names masked.
• Sharing: an encrypted copy of a summary only after you choose a CareTeam.
• Technical records: content-free times, status, app version, delivery, consent, security, token-count, and deletion results.

How we protect your information

Audio stays on your iPhone until your summary is saved, then BastCare deletes it. If processing is unfinished, audio is kept for a 72-hour retry window and deleted when the app reopens after that window.

Bast’s servers do not save or log the transcript text used for this processing. Your saved transcript, summary, and available information about how the summary was made stay on your phone.

If you share a summary, Bast stores a locked copy so your chosen care team can receive it. This protection is called encryption. Your encryption keys stay on your device. Bast does not have the keys needed to unlock the stored sharing copy.

We also keep account information and technical records, such as whether a request succeeded.

Why we use data

We use information to provide features you request, secure accounts, create or regenerate summaries, deliver patient-directed shares, prevent abuse, diagnose content-free failures, and prove deletion. We do not sell your data. We do not use visit content for advertising. We do not train models on what you do in the app.

Sharing and your choices

Sharing nothing is always valid. Your saved transcript and summary stay on your iPhone. Separate copies are sent for AI processing as described above. You choose whether to export your transcript or share your summary. Before sharing, you can review the summary and select a CareTeam. After regeneration, share again if you want your CareTeam to receive the new summary. You can stop sharing later from My Visits.

• Decline recording or cloud processing.
• Keep every summary private.
• Share with one CareTeam, change sharing, or revoke it.
• View or download the original transcript.
• Regenerate a summary, review the preview, and choose Use this summary only when you want to replace the current one.
• Delete a visit or delete app data.

A transcript copy you download or send outside BastCare is controlled by the app, service, or person you choose. BastCare cannot recall that copy.

Retention and deletion

After a summary is saved successfully, BastCare deletes the visit audio. The original transcript and current summary stay protected on your iPhone until you delete the visit. Deleting a visit removes its transcript and summary; any exported copies remain outside BastCare’s control. Shared encrypted content remains available only while the share is active or until account deletion.

From Settings, you can remove BastCare data from one iPhone or delete your Bast account. Account deletion removes your Bast identity, active sessions, account-linked encrypted shares, CareTeam access, and the account’s local app data. Bast may retain only de-identified aggregate model token counts, a minimal content-free deletion event, and records required by law.

Read the account-deletion details

Security and service providers

BastCare uses authenticated HTTPS, account isolation, encrypted relay content, device-held keys, and least-privilege access. No internet service can promise perfect security. Bast has never had a data breach. If one ever affects you, we will tell you directly and quickly.

Apple provides device speech and Sign in with Apple. Bast also uses named infrastructure, database, identity, and model-processing providers only for the purposes described here.

BastCare can use Anthropic or OpenAI. We select the model for the task and may change that selection as quality, reliability, speed, or resource needs change. Each request goes only to the provider selected for that request.

See the current BastCare service-provider and processor disclosure

Children, regional rights, changes, and contact

Kids are welcome to use BastCare with an adult. A child’s doctor visit should include an adult.

Depending on where you live, you may have rights to access, correct, export, restrict, object to, appeal, or delete personal information. Email us to make a privacy request. We may need to verify that the request concerns your account.

Material changes to vendors, purposes, retention, or visit-data flows require a new policy version and, where appropriate, a new choice in the app.

If Bast is acquired or closes, your visits stay private. No one, including any new owner, can open your summaries without your key.

BastCare is not a medical device or medical advice. It does not diagnose, treat, monitor, predict, or recommend care. Do not use it for emergencies.

Contact: community@bast.ai