Privacy Policy — Baseline
Effective date: 2026-06-11 · Provided by Pyroclast Systems, LLC · Contact sys_admin@pyroclastsystems.com
Baseline (“the app”, “we”, “us”) measures how your behavior compares to your own patterns across voice, face, and language. This policy explains what we collect, how it is used, and your choices. Baseline is not a lie detector and produces a signal, not a verdict.
The short version
The four things worth knowing, up front
Recordings never leave your device
Audio and video are processed on-device and the audio file is deleted right after processing. We never upload or store the recording itself.
We store only derived results
On our servers: anonymized numeric feature values, voice metrics, your session scores, the text transcript of what you said, and any profile/player names you type.
No signup required
The app creates an anonymous account automatically — no email, phone, name, or password. Signing in on the web or syncing is optional, via a one-time email link (no password). Your email is used only to sign you in.
AI check is opt-in, transcript-only
An optional AI content check (and the Bluffline party game) send the transcript text to a third-party AI service. In the solo app this is off by default and only happens if you turn it on per session.
What we collect and store
Only these fields ever reach our backend
When you record a session, the app extracts features on your device and uploads only the following to our backend (Supabase):
| Data | Example | Why |
|---|---|---|
| Account ID | a random identifier | To keep your data separate from other users’ |
| Email address (optional) | you@email.com | Only if you choose to create an account — to send your sign-in link and sign you in on the app and web |
| Behavioral feature values | gaze, head pose, expression, pitch, loudness, voice-quality and language metrics — as numbers | To compute your baseline and deviation scores |
| Session scores & metadata | behavioral signal, calibration, timestamps, duration, prompt title | To show and store your results and history |
| Transcript text | the words you spoke, as text | Shown back to you; used for language analysis |
| Profile / player names | labels you type (e.g. “Alex”) | To organize baselines and Bluffline games |
| Bluffline game data | round verdicts, votes, points, outcomes | To keep game history and the leaderboard |
We do not collect or store: raw audio or video recordings, camera images, your real name (unless you type one as a profile/player label), phone number, location, contacts, or device advertising identifiers. We collect your email only if you choose to create an account(see above) — it is never required to use the app.
Face data
Specifically how Baseline handles face data
What is collected.While you are recording a session, the app uses Google MediaPipe’s face-landmark model entirely on your device to locate facial points in each camera frame. Those points exist only in memory, for the instant it takes to convert them into a small set of numeric behavioral measurements: gaze direction, head yaw/pitch/roll, eye openness, mouth openness, brow height and furrow, smile intensity, lip press, mouth asymmetry, face scale, and hand-to-face proximity. The facial points themselves are discarded immediately after that conversion — they are never written to storage and never leave your device.
What is stored. Only the derived numeric measurements above, as a time-series of numbers, together with the resulting session scores. These numbers describe movement and expression over time. They are not a faceprint or face template, they cannot be used to reconstruct your face or any image of you, and they are never used to identify, authenticate, or recognize any person.
What is never collected. Baseline never records, saves, or uploads video, photographs, or any camera imagery. No image file of you is created at any point, on the device or on our servers.
Sharing. The derived measurements are stored in our backend database (Supabase), which acts solely as our data processor. Face data is not shared with any other third party. In particular, it is never sent to Anthropic — the optional AI content check sends transcript text only, never face data. We do not sell face data, use it for advertising, or use it for identification.
Storage location and retention.The derived measurements are stored on Supabase’s cloud infrastructure in the United States, under your account identifier. They are retained until you delete them, which you can do at any time and without contacting us via Settings → Privacy & data → “Delete all my data” in the app. That action permanently erases the derived measurements, scores, transcripts, and your account itself from our servers. There is no other retention period: we do not keep face-derived data after you delete it, and it is not archived or backed up for any separate purpose.
How your data is processed and shared
Three processors — nothing else, and nothing is sold
- Supabase (database, authentication, hosting) acts as our data processor and stores the data listed above on our behalf, including handling the optional email sign-in link.
- Anthropic (Claude AI) — only when the AI content check runs — receives the transcript text of an answer to estimate how plausible the literal content is. In the solo app this is opt-in and off by default; you choose it per session. In the Bluffline party game it runs automatically each round, and the game’s setup screen states this. No other data is sent to Anthropic.
- Hugging Face— on first use the app downloads the speech-to-text model from Hugging Face. This is a one-way download; no personal data is sent.
We do not sell your data, use it for advertising, or share it with any other third parties.
Permissions
What the app asks for, and why
- Camera & Microphone— required to record a session. Used only while you are recording; the recording is processed on-device and the audio file is deleted.
- Internet — to sync your derived results and scores to your account.
Your choices and rights
Delete everything yourself, any time — no email required
- Delete everything: In the app, open Settings → Privacy & data → “Delete all my data.”This permanently erases all of your profiles, sessions, transcripts, and Bluffline history from your device and our servers, and deletes your account — including your email, if you created one.
- Skip the AI check: Leave the solo AI content check off (its default) so no transcript is ever sent off-device in the solo flow.
- Depending on where you live, you may have rights to access, correct, or delete your data (e.g. GDPR, CCPA/CPRA). The in-app “Delete all my data” is the primary way to exercise deletion. For other requests, contact us at sys_admin@pyroclastsystems.com.
Children
Not directed to children under 13
Baseline is not directed to children under 13 and we do not knowingly collect their data. Some regions (e.g. parts of the EU/UK) set a higher digital-consent age of 16; where that applies, the same applies under that age.
Data retention
Kept until you delete it
Your data is retained until you delete it via “Delete all my data” or stop using the app. Inactive accounts may be removed periodically.
Changes
How policy updates are communicated
We may update this policy; the “Effective date” above will change and material updates will be noted in the app or here.
Contact
Questions about this policy or your data
Pyroclast Systems, LLC
sys_admin@pyroclastsystems.com