Privacy policy

Last updated: 8 Oct 2026

1. What we collect

Account information: your name, email address and password hash.
Quiz results: your score, the week played and your streak.
Membership status, trial and subscription information.
Basis conversations, learning progress, and cases, letters or evidence you save to your account.
Descriptions and recording audio submitted for encounter analysis are processed to generate a response.
Basic technical data needed to serve the site securely.

Basis questions and encounter descriptions are sent to AI processors to generate answers. Saved conversations are held in your account.
For recording analysis, audio is sent for transcription and the transcript is analysed. WhatBasis processes the uploaded audio in memory and does not save the recording file.
If you choose a follow-up action that saves a case, the analysis and transcript or written description are saved to your account. The recording itself is not saved.
Only submit recordings you are entitled to share. Avoid unnecessary sensitive information about yourself or other people.
We do not publish your submitted material as public content.

To create and secure your account.
To save your scores, streak and leaderboard position.
To take payment and give you what you paid for.
To answer messages you send us.
To generate requested answers and analyses and keep the records you choose to save. Processing needed to provide your account and tools is carried out to deliver the service; security processing is based on legitimate interests. Optional promotional emails require your consent, which you can withdraw.

Lovable Cloud provides hosting, database and account services.
Stripe processes card payments and subscriptions. We do not see your full card details.
Google processes sign-in if you choose Google OAuth.
Lovable's AI gateway and the AI providers it routes requests to process questions, descriptions and audio needed for transcription and analysis.
Each processor handles data under its own agreement with us.

Account data, including an unconfirmed signup record, is held to provide and secure your account. Email verification is required before a new email signup can sign in.
Quiz scores are kept so leaderboards and streaks work.
Payment records are kept as long as tax law requires.
You can request account and saved-record deletion. Records required by law may need to be retained; contact us for details.

You can ask for a copy of the data we hold about you.
You can ask us to correct anything that is wrong.
You can ask us to delete your account and data.
You can object to processing or ask us to restrict it.
You can complain to the Information Commissioner's Office.
You can unsubscribe from any email we send using the link in that email, or by emailing us.