Privacy Policy for Basinly

Last updated: August 20, 2026
Effective date: August 20, 2026

Basinly ("Basinly", the "App", "we", "us", or "our") is operated by Pristn Technologies LLC, a limited liability company organized in the State of Nebraska, United States. This Privacy Policy explains what information we collect when you use the Basinly mobile application and related services (together, the "Service"), how we use and share it, and the choices and rights you have.

This Policy applies to users in the United States, Canada, Brazil, and other countries in Latin America where the App is available. By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Quick summary

This summary is for convenience only. Please read the full Policy for details.

• What Basinly is. A personal pool and hot tub water-care tracker. You log your pools and hot tubs ("water bodies"), water-test readings, target ranges, chemical doses, maintenance tasks and reminders, chemical stock, seasonal checklists, and photo notes; Basinly computes a stability score and dosing guidance from what you enter. Basinly is a single-user app: your data is yours and syncs across your own devices.
• What we collect. Account details (your email and a display name), the pool and spa data you enter (water bodies, readings, doses, tasks, stock, checklists, notes, and any photos you add), limited device information, and subscription status. We collect this to provide and sync the Service.
• What we do NOT do. We do not sell your personal information. We do not use it for advertising. We do not include advertising, analytics, tracking, or crash-reporting SDKs in the App. We do not collect your location, contacts, or calendar.
• Payments. Subscriptions are handled by the Apple App Store and Google Play. We never see or store your full card number or banking details.
• Your control. You can export your data as CSV, manage your signed-in devices, and delete your account and associated data from within the App at any time.
• Age. Basinly is intended for people who are at least 13 years old.

2. Who is responsible for your data

The controller of your personal information is:

Pristn Technologies LLC
Omaha, Nebraska 68127, United States
Privacy contact: info@pristntechnologies.com
Support: contact@pristntechnologies.com

For users in Brazil, our data protection officer ("encarregado") can be reached at info@pristntechnologies.com.

3. Information we collect

3.1 Information you provide

• Account and profile. Your email address and a display name. If you sign in with Apple or Google, we receive your name and email from that provider and create an account for you. You may also set preferences such as theme and measurement units (temperature and volume). Your language choice is stored only on your device.
• Authentication credentials. If you register with email and password, we receive your password to create your account and to log you in. We never store your password in readable form; we store only a securely hashed version. We also generate short-lived codes and tokens for email verification and password reset.
• Content you create ("Your Content"). The pool and spa data you enter, including: water bodies (name, type — chlorine pool, saltwater pool, or hot tub — surface, indoor or outdoor location, and water volume); water-test readings (the parameter, the value and unit you entered, when it was measured, and any note or photo you attach), including any custom parameters you define; your target ranges and the stability-score history derived from your readings; the chemical doses and treatments you log; maintenance tasks and reminders, their schedules, and a log of what you completed; your chemical stock items; seasonal opening and closing checklists and their progress; and photo notes (an image plus an optional caption).
• Communications. If you contact us for support, we receive the information in your message and your contact details.

3.2 Information we collect automatically

• Device and session information. When you use the Service we collect a per-installation identifier (a random value we generate), your device name, platform (iOS or Android), and app version. These let you see and manage your active sessions on the devices screen in the App and help us keep your account secure and route notifications.
• Push token. If you enable notifications, we collect a push token so we can deliver reminders and alerts to your device.
• Usage and activity within the Service. Records needed to sync your data and run the Service, such as session timestamps, when a device was last active, per-device sync markers, and the stability-score snapshots our server computes from the readings you enter.
• Technical data. When your device connects to our servers, your IP address is used briefly in memory to protect the Service against abuse (rate limiting). We do not store your IP address in our application database. Standard server logs maintained by our hosting and network providers may record connection metadata such as IP addresses.

We do not collect your precise or background location, your contacts, or your device calendar. The charts and stability score in the App are simply derived from the readings you enter, and seasonal defaults are derived from your device's time zone setting, not from your location.

3.3 Information from third parties

• Sign in with Apple / Google. If you choose social sign-in, the provider sends us a verified identifier and basic profile details (such as name and email) so we can create or access your account. For Sign in with Apple, we also securely store a token that lets us revoke the connection with Apple when you delete your account, as Apple requires.
• App stores and RevenueCat. When you purchase or restore a subscription, we receive purchase and entitlement information (such as the plan, transaction identifiers, store, and renewal dates) from the Apple App Store or Google Play through our subscription provider, RevenueCat. We do not receive your full payment card or bank details.

4. Device permissions we request

The App asks for the following permissions, only when needed for a feature you use:

• Camera. To take photos of your pool, spa, or equipment to attach as photo notes in the App.
• Photo library. To let you choose an existing image to attach. On modern iOS and Android versions this typically uses the system photo picker, which does not require granting access to your whole library.
• Notifications. To send you the reminders and alerts you turn on. You can decline or turn these off at any time in your device settings.

You can manage or revoke these permissions at any time in your device settings. Some features will not work if a required permission is denied.

5. How we use your information

We use the information described above to:

• Create and maintain your account and authenticate you.
• Provide the core features: water bodies, readings, target ranges, the stability score and charts, dosing guidance, maintenance tasks and reminders, chemical stock, seasonal checklists, photo notes, and CSV export.
• Sync your data across your own devices and let you manage active sessions.
• Process and manage your Basinly Pro subscription.
• Send you transactional messages such as email verification, password reset, and account-deletion confirmation.
• Send you occasional news about Basinly and other Pristn Technologies products. You can unsubscribe from these messages at any time.
• Send the reminders and alerts you have enabled, and respect your notification preferences.
• Protect the Service, prevent abuse and fraud, enforce our Terms of Use, and maintain security (for example, rate limiting and account-enumeration protection).
• Comply with legal obligations and respond to lawful requests.

We do not use your personal information to build advertising profiles, and we do not sell it.

6. Legal bases for processing

Where the law requires us to identify a legal basis (for example, under Brazil's LGPD or similar frameworks), we rely on the following:

• Performance of a contract: to provide the Service you request, including your account, your data sync, and your subscription.
• Consent: for optional features that ask for it, such as push notifications and device permissions. You may withdraw consent at any time.
• Legitimate interests: to keep the Service secure, prevent abuse, and improve reliability, balanced against your rights.
• Legal obligation: to comply with applicable laws and lawful requests.

7. How we share information

We share information only as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Basinly is a single-user app: your pool and spa data is not shared with other users. We share information only as follows:

• With service providers (sub-processors). We use trusted providers to operate the Service. They may process your information only on our instructions and for the purposes we set. See Section 8 for the list.
• For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Pristn Technologies LLC, our users, or the public.
• In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

8. Service providers and sub-processors

We rely on the following third parties to provide the Service. Each receives only the information needed for its function.

Note: Google's involvement above is limited to Sign in with Google and Android push delivery. We do not use Google Analytics, Firebase Analytics, Crashlytics, or any other analytics, advertising, or crash-reporting service in the App.

9. Push notifications

If you enable notifications, we send reminders and alerts about your water bodies (for example, when a maintenance task is due, when it has been a while since you tested a parameter, and stability-score alerts — when your score starts falling and again when it recovers). To deliver them, the notification content passes through the push services listed above. You can turn notifications off at any time in your device settings, or adjust your per-category notification preferences in the App.

10. Children's privacy

Basinly is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and the age of majority in your country, you may use the Service only with the involvement and consent of a parent or legal guardian, to the extent your local law requires it. In Brazil and some other Latin American countries, the processing of data relating to minors may require specific parental consent; where that applies, a parent or guardian must provide consent and supervise the minor's use.

If you believe a child has provided us with personal information without the required consent, please contact us at info@pristntechnologies.com and we will take steps to delete it.

11. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service, and afterward only as needed for the purposes described in this Policy or as required by law.

General retention practices:

• Account information is retained while your account exists.
• Your Content (water bodies, readings, doses, tasks, stock, checklists, notes, and media) is retained while your account exists so it stays synced across your devices. When you delete an individual item in the App, it is marked as deleted and removed from your devices on the next sync; a deletion record — which may include the item's data — is retained on our servers to keep your devices in sync, and is permanently removed when you delete your account. Photos you delete are removed from our cloud storage promptly. If you move from Basinly Pro to the free tier, your Content is preserved and your existing water bodies remain fully usable; the free tier limits creating additional water bodies and limits chart history to 7 and 30 days, but nothing is deleted.
• Authentication tokens and verification codes are short-lived and expire automatically.
• Backups maintained for disaster recovery may persist for a limited period before being overwritten, even after data is deleted from the live Service.

When you delete your account (Section 12), we delete your data as described there.

12. Deleting your account and data

You can delete your account at any time from within the App, in your account settings. When you delete your account:

• We permanently delete your account and your associated data from our live systems, including your water bodies, readings, doses, tasks, reminders, chemical stock, checklists, photo notes, preferences, notification settings, saved devices, and subscription record.
• Your uploaded photos are deleted from our cloud storage.
• We revoke your active sessions and sign you out on all devices.
• If you signed in with Apple, we revoke the connection with Apple on your behalf.
• We send a confirmation ("receipt") email to the address on your account.

Please note:

• If your subscription is set to auto-renew, you must turn off auto-renewal in the App Store or Google Play before you can delete your account, so that you are not charged again; the App will tell you when this applies.
• Residual copies may persist briefly in backups before being overwritten.

Deletion is permanent and cannot be undone. If you want to keep a copy of your data, use the CSV export first (Section 15). We do not sell your personal information, and we do not retain your identifying account data after deletion beyond what is described here and what applicable law requires.

If you need help deleting your account or data, contact us at info@pristntechnologies.com.

13. Security

We take reasonable technical and organizational measures to protect your information, including:

• Passwords are stored only as salted hashes (bcrypt), never in readable form.
• Password-reset tokens and session refresh tokens are stored only as cryptographic hashes.
• Sessions use signed tokens, and requests to our servers require authentication.
• Uploads to and downloads from our storage provider use short-lived, single-purpose links.
• We apply rate limiting and protections against account-enumeration and abuse.
• Data in transit is protected using industry-standard encryption (HTTPS/TLS).

The photos you add are stored on our servers and cloud storage so they can sync across your devices; they are not end-to-end encrypted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please also do your part: use a strong, unique password and keep your device secure.

14. International data transfers

We are based in the United States, and we process and store your information in the United States. Our application servers and database are hosted in Phoenix, Arizona, United States. The photos you upload are stored with Cloudflare R2 in its Eastern North America region (United States). The other service providers listed in Section 8 may also process limited information in the United States or in other countries where they operate. If you use the Service from Canada, Brazil, or elsewhere in Latin America, your information will be transferred to and processed in the United States. These countries may have data protection laws that differ from those in your country.

By using the Service, you understand and consent to this transfer. Where required, we rely on appropriate safeguards and legal mechanisms for international transfers, and on your consent and the necessity of the transfer to provide the Service you request.

15. Your privacy rights

Subject to your local laws and to verification of your identity, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Portability, where applicable, of the information you provided.
• Lodge a complaint with your local data protection authority.

You can exercise many of these rights directly in the App: you can edit your profile, export your readings, water bodies, doses, maintenance log, chemical stock, and season checklists as CSV files at any time, and delete your account. For any other request, contact us at info@pristntechnologies.com. We will respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

15.1 United States (including California)

We do not sell your personal information and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws. California residents and residents of other U.S. states with comparable laws may request to know, access, correct, and delete their personal information, and may designate an authorized agent to act on their behalf. To make a request, contact us at info@pristntechnologies.com. We will not discriminate against you for exercising these rights.

15.2 Canada (PIPEDA and provincial laws)

If you are in Canada, you may request access to and correction of your personal information, and you may withdraw your consent to our processing, subject to legal and contractual restrictions and reasonable notice. We handle personal information in line with applicable Canadian privacy laws. To make a request or raise a concern, contact us at info@pristntechnologies.com. You may also contact the Office of the Privacy Commissioner of Canada.

15.3 Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the rights to confirmation of processing, access, correction, anonymization or deletion of unnecessary data, portability, information about with whom we share your data, and to withdraw consent. You may also petition the national data protection authority (ANPD). To exercise these rights, contact our data protection officer (encarregado) at info@pristntechnologies.com.

15.4 Other Latin American countries

Many countries in Latin America (for example, Mexico, Argentina, Colombia, Chile, and others) provide rights similar to those above under their own data protection laws. If you reside in one of these countries, you may exercise the rights granted by your local law by contacting us at info@pristntechnologies.com.

16. Do Not Track and no sale of data

We do not respond to "Do Not Track" signals because there is no common industry standard for them. Regardless, we do not track you across third-party websites or apps, and we do not sell your personal information.

17. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide a more prominent notice (such as an in-app message or email). Your continued use of the Service after the changes take effect means you accept the updated Policy.

18. Contact us

If you have any questions, requests, or complaints about this Privacy Policy or your information, contact us:

Pristn Technologies LLC
Privacy: info@pristntechnologies.com
Support: contact@pristntechnologies.com
Mailing address: Omaha, Nebraska 68127, United States
Website: https://pristntechnologies.com/

We will do our best to resolve your concern. You also have the right to contact your local data protection authority.