BastCare privacy
Bast uses outside services only where they have a defined role in providing BastCare. This page names the current providers and the information involved.
What this list means
Each provider receives only the information needed for its stated job. Ordinary open-source libraries that run inside the app or Bast services are not processors unless they send information to an outside company. We do not sell your data. We do not provide visit content for advertising.
BastCare chooses an AI model to suit the task. We evaluate quality, reliability, speed, and resource use, and may change the model or provider as those needs change. AI providers include Anthropic and OpenAI. A request uses the provider selected for that task; it does not automatically go to both.
Current providers
The exact model version and individual software-library versions may change without changing these purposes or data boundaries.
Anthropic
Information: transcript or translation text with configured names masked, and the resulting model response.
Purpose: create or regenerate summaries, or translate text, as requested by the user when an Anthropic model is selected. Bast’s servers do not save or log the transcript text used for this processing.
OpenAI
Information: transcript or translation text with configured names masked, and the resulting model response.
Purpose: create or regenerate summaries, or translate text, as requested by the user when an OpenAI model is selected. Bast’s servers do not save or log the transcript text used for this processing.
Amazon Web Services
Information: encrypted network traffic, account and operational metadata, and temporary request processing through Bast-hosted services.
Purpose: securely host and operate Bast authentication, summary, and CareTeam relay services.
MongoDB
Information: MongoDB stores account information, records showing whether the service worked, and locked copies of summaries you choose to share.
Purpose: support your account, show whether requests succeeded, and deliver summaries to your chosen care team. Bast does not hold the device keys needed to unlock those shared copies.
Apple
Information: information needed for device speech, Sign in with Apple, app distribution, and content-free notification delivery.
Purpose: provide core iPhone capabilities and account authentication.
Information: the identity and sign-in information the user authorizes through Google.
Purpose: provide the optional Continue with Google account path. Google does not receive visit audio, transcript text, or summaries through this sign-in path.
The content boundary
Open-source and commercial software libraries are tracked for security, licensing, and release management. They belong in Bast’s dependency inventory or acknowledgements. A library belongs on this processor page only when it sends information to an outside service.
Questions about this list can be sent to community@bast.ai. Material changes to providers, purposes, retention, or visit-data flows will update this disclosure and, where appropriate, the choice shown in BastCare.