The short version. We collect what the app needs to help you settle in, and no more. No ad trackers, no third-party analytics, no cookie banner. You can delete your account, and everything in it, in one tap.
1. Who we are
Basera is run by Oakley Ridge Ltd (company number [company number], registered office [registered address]). We are the controller of your personal data under UK GDPR and the Data Protection Act 2018. Contact us at hello@joinbasera.com.
2. What we collect, and why
| What | Why we use it | Lawful basis |
|---|---|---|
| Onboarding answers: visa type, country, India state (if relevant), university, city | To build your checklist and guides. Until you create an account these stay on your own device only. | Contract (providing the app you asked for) |
| Account: email address, and your name if you sign in with Google | To sign you in and save your progress across devices. | Contract |
| Optional details: course dates, visa dates, date of birth. You choose whether to add each one. | Course and visa dates power reminders. Visa dates also power the Graduate Route countdown. Date of birth checks Railcard eligibility. | Consent. Withdraw it any time by removing the field or deleting your account. |
| Your progress: checklist ticks, guides read, quiz passes, badges | To show where you are, give you stamps and keep the app working as you expect. | Contract |
| Referrals: who invited you and who you invited | To show “people you’ve helped land” and run the monthly community leaderboard, and to spot fake sign-ups. | Legitimate interests (running a fair referral feature) |
| Product events and outbound link clicks | To see which tasks help, fix what’s broken, and work out which provider links get used. We record that a link was clicked, not what you did on the provider’s site. | Legitimate interests (improving Basera and funding it through affiliate fees) |
| Messages you send us | To reply to you. | Legitimate interests |
Our analytics are first-party: events are stored in our own database on Cloudflare. We don’t use third-party analytics, advertising or tracking tools, and we don’t sell your data.
3. Cookies
We use one essential cookie to keep you signed in. Because it’s strictly necessary, we don’t need your consent and there’s no cookie banner. The marketing site loads one font (Shantell Sans) from Google Fonts, which means your browser contacts Google to fetch it.
4. Who handles your data
- Cloudflare hosts the site and app, stores our database and sends our emails (such as sign-in emails). It acts on our instructions as our processor.
- Google only if you choose “Sign in with Google”, in which case Google shares your email and name with us.
Some of these providers may process data outside the UK. Where they do, they rely on approved safeguards such as the UK International Data Transfer Addendum. Provider sites you reach through our links (a bank, say) have their own privacy policies.
5. How long we keep it
- Account data and progress: until you delete your account.
- Product events and link clicks: kept for up to 24 months, then deleted or anonymised.
- Emails to hello@joinbasera.com: up to 24 months.
6. Your rights
You can ask to see your data, correct it, delete it, restrict or object to how we use it, take a copy in a portable format, and withdraw consent at any time. Email hello@joinbasera.com and we’ll reply within one month.
Delete everything in one tap. In the app, go to Profile, then Settings, then Delete account. This deletes your account, progress, badges, optional details and referral links, and it can’t be undone.
7. Children
Basera is for people aged 16 and over. If you think a younger child has given us their details, tell us and we’ll delete them.
8. Complaints
Please talk to us first so we can put things right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
9. Changes
If we change this policy in a way that matters, we’ll say so in the app. The date at the top shows the latest version.