Privacy Policy

Last updated: 13 October 2026

EviBase is a free, early-access service. This page explains, in plain terms, what personal data we collect and what we do with it. We are based in the United Kingdom and follow the UK GDPR and the Data Protection Act 2018.

1. Who we are

EviBase is run by Angus Wayman, trading as EviBase, in the United Kingdom, and is the data controller for the personal data described here. To contact us, email hellobiobuild@gmail.com.

2. What we collect

Early access requests. Details you give us through our sign-up form (hosted by Typeform), such as your name, work email, organisation and role.
Account data. Your email address, name and a unique account ID when you create an account. Passwords are handled by our sign-in provider and we never see them.
Your content. Projects, searches, documents you upload, screening decisions, and the summaries and reports you generate.
Basic technical data. Things like IP address, browser type and error logs, used to keep the service running and secure.
Messages. Anything you send us directly.

We do not sell your personal data.

3. How we use it

We use your data to run the service and your account, reply to you, keep things secure and fix problems, improve EviBase, and send occasional product updates (you can opt out at any time). Our lawful bases are contract (providing the service), legitimate interests (running and securing a small business), consent (where we ask for it, such as non-essential cookies), and legal obligation.

4. Your content and AI

To screen and summarise evidence, EviBase sends the relevant parts of your content to Google (Gemini), which processes it under Google's own terms. We may change AI providers in future and will update this page if we do.

EviBase is built for published literature and study documents. Please do not upload personal data about patients or trial participants.

Only the services that help us run EviBase: Google (Firebase for sign-in, database and security; Gemini for AI), Typeform (sign-up form), CookieYes (cookie banner), and Google Fonts and icon CDNs (which see your IP address when your browser loads them). Some of these process data outside the UK, including in the United States, under recognised safeguards such as the UK-US data bridge or standard contractual clauses. We may also disclose data where the law requires it.

6. How long we keep it

Sign-up requests and messages: up to 24 months after our last contact.
Account data and your content: while your account is open, then deleted within 90 days of closure.
Technical logs: up to 12 months.

7. Cookies and local storage

A cookie banner (CookieYes) lets you accept or reject non-essential cookies. The site also uses a small amount of browser storage that it needs to work: your sign-in session, a local copy of your display name, and your cookie choices. You can change your choices through the banner or by clearing your browser storage.

8. Your rights

You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to give you a copy. You can withdraw consent at any time. Contact us as above and we will reply within one month.

9. Security, children and changes

We use reputable providers and sensible security measures, but no system is completely secure. EviBase is for professional use and is not intended for anyone under 18. If we change this policy we will update the date above and tell account holders about significant changes.

10. Complaints

If you are unhappy with how we handle your data, please tell us first at hellobiobuild@gmail.com so we can put it right. You can also complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.