Privacy

Where your data lives

BASI is self-hosted. Conversations, memories, notes, tasks, reminders, missions, uploaded files and settings are stored in the PostgreSQL database and file storage on the server it runs on — not in a shared cloud.

What is sent to outside services

• AI provider (BrewKeg, which routes to Anthropic Claude): your message, recent conversation turns, and the few memories relevant to that message. Images you attach. Memories marked sensitive are never sent unless you allow it in Settings.
• Voice (Fish Audio), if configured: the text of replies being spoken. Fish Audio's free model may retain requests to improve their service; switch voice to “phone's built-in voice” if you prefer.
• Speech recognition: by default your phone's browser recogniser (on Android Chrome this is processed by Google).
• Web search: search queries go to the configured search provider (DuckDuckGo by default). Pages BASI reads are fetched from your server.
• Notifications: titles and short text pass through your browser's push service, and Telegram if you enable it.

What BASI never does

• Collect browsing history or read other apps.
• Record audio when you haven't started a voice session or turned on the wake word.
• Use your conversations to train models.
• Store passwords, card numbers or API keys as memories — it refuses.

Your controls

• Edit, confirm or permanently forget any memory; see each memory's source and history.
• Turn off automatic memory, or require approval for anything inferred.
• Export everything as JSON, or memory as an Obsidian vault.
• Delete all content or the whole account from Settings → Your data.

Retention

Data stays until you delete it. Cached voice audio expires after the period you set (14 days by default). Short-term working memory expires after 48 hours. Database backups made before a deletion keep old data until those backups are rotated out.