Privacy Policy

Overview

Baskd Inc. (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our products and services, including Diya and our websites.

1. Our Privacy Principle

Privacy is a core product feature, not an afterthought. Diya is designed to run entirely on your device. When you use Diya locally:

• Your conversations stay on your device and are never sent to our servers
• We do not log, store, or analyze your prompts or AI responses
• Your AI companion runs without an internet connection after initial setup
• We have no access to your local data, conversations, or generated content

2. Information We Collect

Website Visits (baskd.io, diya.baskd.io)

• IP address — for rate limiting and abuse prevention (not stored long-term)
• Browser type and OS — to serve the correct download for your platform
• Cloudflare analytics — aggregate, privacy-preserving web analytics (no cookies, no tracking)

Trial Experiences (diya.baskd.io/try)

• Session data — temporary session IDs for the duration of your trial (deleted after expiry)
• IP address — for rate limiting per-user session creation
• We do NOT log your prompts or AI responses from trial sessions
• Trial sessions are automatically deleted after expiry (typically 5 minutes)

Purchases (if applicable)

• Payment processing is handled entirely by Stripe
• We do not store credit card numbers, bank details, or full billing addresses
• We receive: email address, purchase amount, and license entitlement from Stripe

Diya (Local Application)

• No telemetry. Diya does not phone home, send analytics, or transmit any data
• Model downloads are fetched from public model repositories (e.g., HuggingFace) directly by your device
• License key validation (if applicable) checks a signature locally — no server call required

3. How We Use Information

• To provide and maintain the Services
• To prevent abuse and enforce rate limits
• To process purchases and deliver license keys
• To improve our products based on aggregate usage patterns (never individual conversations)
• To respond to support requests

4. Information We Do NOT Collect

To be absolutely clear:

• We do not collect or store your conversations with AI
• We do not use your data to train AI models
• We do not sell, rent, or share personal information with third parties for marketing
• We do not use tracking cookies or third-party advertising trackers
• We do not build advertising profiles based on your usage

5. Cookies

Our websites use minimal, functional cookies only (e.g., Cloudflare security cookies). We do not use analytics cookies, advertising cookies, or third-party tracking cookies.

6. Third-Party Services

• Cloudflare — CDN and DDoS protection (see Cloudflare Privacy Policy)
• Stripe — Payment processing (see Stripe Privacy Policy)
• HuggingFace — Model downloads are fetched by your device directly from HuggingFace's servers

7. Data Retention

• Trial session data: deleted automatically after session expiry
• Server logs: retained for up to 30 days for security purposes, then deleted
• Purchase records: retained as required by tax and accounting regulations

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of any marketing communications

To exercise these rights, email us at support@baskd.io.

9. California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information under the California Consumer Privacy Act (CCPA). We do not sell personal information. You may request to know what personal information we have collected and request its deletion by contacting us.

10. International Users (GDPR)

If you are located in the European Economic Area, we process your data based on legitimate interest (providing the Services) and, where applicable, your consent. You have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

Our Services are not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. Our AI trial experiences include age verification. If we learn we have collected information from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. Your continued use of the Services constitutes acceptance of the updated policy.