Privacy Policy

Personal Information: When you sign up for Hey, Basil, we collect:

• Your first name
• Phone number (required for SMS service)
• Timezone (auto-detected from your device)

Preferences & Usage Data:

• Family details (kids, partner, other adults you share the household with — names, ages, relationships)
• Dietary preferences (allergies, diets, dislikes)
• Cooking preferences and pantry inventory
• Budget settings
• Recipe ratings and feedback
• SMS / iMessage conversation history
• Menu, grocery list, and action item history
• Photos you send Basil (school flyers, paperwork, mail) — stored to extract action items, never used for advertising

Optional integrations (only with your explicit OAuth consent):

• Google Calendar: Basil reads upcoming events to surface schedule context and writes events you ask it to add. Tokens are stored encrypted; you can disconnect anytime.
• Gmail: Basil reads new inbox messages every 15 minutes to surface what's actionable (school forms, doctor reminders, party invites, bills). We classify and store snippets + key fields; we don't share email content with any third party. You can disconnect anytime.

We use your information to:

• Generate personalized weekly meal plans
• Send SMS notifications (meal reminders, weekly planning, alerts)
• Create grocery lists and Amazon Fresh links
• Learn your preferences to improve recipe suggestions
• Track budget compliance and spending
• Provide cooking guidance and support
• Improve our service through usage analytics

By providing your phone number and opting in, you consent to receive automated text messages from Hey, Basil.

• Message Frequency: Varies (typically 1-5 messages per day)
• Message Types: Weekly planning prompts, daily reminders, grocery lists, recipe swaps, alerts
• Rates: Message and data rates may apply from your carrier
• Opt-Out: Reply STOP to unsubscribe at any time
• Opt-In: Reply START to re-subscribe
• Help: Reply HELP for assistance

We use the following third-party services:

• Supabase: Database and authentication
• Anthropic (Claude): Conversational AI, intent parsing, content extraction
• SendBlue: iMessage / SMS delivery
• Google (Calendar, Gmail): OAuth-only, optional integrations
• Voyage AI: Embedding generation for memory search
• Deepgram: Voice-memo transcription
• Stripe: Subscription billing
• Instacart: Grocery ordering links (you're redirected to Instacart)

Basil never sends messages to third parties on your behalf. When Basil drafts a message (to a partner, teacher, sitter, doctor's office), you're the one who copies and sends it from your own thread. Basil has read access via OAuth; it does not have send access.

Each service has their own privacy policy. We share only the necessary data to provide our service.

• SMS delivery logs: 7 days
• Conversation history: 30 days
• Recipe feedback: Indefinite (used for learning)
• Pantry & preferences: Until you delete your account
• Menu history: 90 days

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data
• Opt out of SMS at any time (text STOP)
• Update your preferences

To exercise these rights, contact us at privacy@heybasil.io

We take reasonable measures to protect your information:

• Phone numbers are encrypted in our database
• All data transmitted over HTTPS
• Access to data is limited to necessary personnel
• Regular security audits and updates