Your visit stays yours.

Data we handle

BastCare handles the minimum information needed to provide an account, create a visit summary, deliver a share you request, and show whether those actions worked.

• Account: your Bast identity, sign-in state, and device/account identifiers.
• On your iPhone: temporary audio and transcript text, your saved summary, notes, sharing choices, and encryption keys.
• Temporary processing: masked transcript text sent over authenticated HTTPS to create the summary you requested.
• Sharing: an encrypted copy of a summary and note only after you choose a CareTeam.
• Technical records: content-free times, status, app version, delivery, consent, security, token-count, and deletion results.

What Bast does not keep in server logs or storage

Audio stays on your iPhone until the summary is created. Then the audio and full transcript are deleted from your iPhone. Bast does not save or log transcript text on its servers.

Why we use data

We use information to provide features you request, secure accounts, create summaries, deliver patient-directed shares, prevent abuse, diagnose content-free failures, and prove deletion. Bast does not sell health information or use visit content for advertising.

Sharing and your choices

Sharing nothing is always valid. A summary stays on your iPhone unless you explicitly choose to share it. Before sharing, you can review the summary, add a note, and select a CareTeam. You can stop sharing later from My Visits.

• Decline recording or cloud processing.
• Keep every summary private.
• Share with one CareTeam, change sharing, or revoke it.
• Export a copy or delete app data.

Retention and deletion

After a summary is saved, BastCare deletes temporary audio and transcript text from the iPhone. Shared encrypted content remains available only while the share is active or until account deletion.

The current build can delete BastCare data from the iPhone. Full account deletion across Bast identity, active sessions, account-linked relay data, and CareTeam access is being completed and tested before App Store submission. Bast plans to retain only de-identified aggregate model token counts, a minimal content-free deletion event, and records required by law.

Read the account-deletion details

Security and service providers

BastCare uses authenticated HTTPS, account isolation, encrypted relay content, device-held keys, and least-privilege access. No internet service can promise perfect security.

Apple provides device speech and Sign in with Apple. Bast also uses infrastructure, database, and model-processing providers only for the purposes described here.

Children, regional rights, changes, and contact

Depending on where you live, you may have rights to access, correct, export, restrict, object to, appeal, or delete personal information. Email us to make a privacy request. We may need to verify that the request concerns your account.

Material changes to vendors, purposes, retention, or visit-data flows require a new policy version and, where appropriate, a new choice in the app.

BastCare is not a medical device or medical advice. It does not diagnose, treat, monitor, predict, or recommend care. Do not use it for emergencies.

Contact: hello@bast.ai