How BoochBot handles your data.

What we collect

We only collect what you choose to send us through the forms and tools on this site:

• Waitlist form: your email address and your consent to be contacted.
• BoochVision photo check: when you analyze a photo, we collect the image, basic file details, optional notes about what prompted the check, model results, and related research metadata. By using BoochVision you agree that analyzed photos may be stored and used to improve BoochBot's models (see Terms). Please photograph the brew surface only — do not include faces, labels, addresses, or other private details. Your browser resizes the image before upload, which also removes embedded metadata such as GPS location. Photos are analyzed by BoochBot's own models on our infrastructure.
• External BoochVision API: authenticated API uploads are retained together with sanitized request metadata (including request time, source IP, user agent, file facts, and content hash), complete model outputs, and the final API response. We do not retain the caller's Authorization header or plaintext API password.
• BoochVision accounts (optional): if you create an account we store your email/authentication identifiers, product-setup answers (including whether you brew now or brewed in the past), and any brew batches, notes, measurements, and photos you choose to save. Setup telemetry is kept separate from validation evidence and excluded by default. You can optionally consent to research use of those setup answers; your account works either way. Saving a photo to your account is always your choice.
• Brewer survey (multiple choice): whether you brew kombucha (now, in the past, or never), your brewing habits and history, how you currently judge readiness, past batches you were disappointed by, what you've spent on brewing, your reaction to a possible readiness sensor or kit, your willingness to pay, and what next step (if any) you'd take.
• Brewer survey (open text): the survey includes free-text boxes — for example "what happened to your last batch that didn't turn out" and optional "other" fields — where you can type freely. Please do not include sensitive personal information you would not want us to store.
• An optional email address, plus whether you opted into a 15-minute interview about your brewing. If you opt in, that choice is recorded together with your email so we can follow up.
• A small technical "source" tag (for example, which form the response came from) so we can understand where responses originate.

Companion conversation logs

We retain companion conversations privately in Cloudflare R2, including your messages, assistant replies, timestamps, a conversation reference and limited service-status information. We use these records for support, troubleshooting and service improvement. Chat logs do not contain the uploaded image itself, but may note that an image was attached. Please avoid sharing sensitive personal information. Ask us for access or deletion using the contact below; include your conversation reference when available. We retain logs only while needed for these purposes. General chat messages are processed by NVIDIA's hosted instruct service when enabled; image checks continue to use BoochVision's separate advisory model. To prevent abuse, Cloudflare also keeps temporary usage counters keyed by a one-way, secret-keyed identifier of your IP address or IPv6 network. These counters contain no chat text or raw IP address and expire within 24 hours.

Why we collect it

The sole purpose is customer-validation research and product improvement: to learn whether the readiness problem is real, whether a sensor or kit is worth developing, and how to improve BoochVision's appearance-only guidance. We do not use this data for advertising.

Where it is stored and who processes it

Submissions are stored with Supabase, a third-party database and auth provider that hosts our PostgreSQL database and authentication on our behalf. Account sign-in uses Supabase Auth (email and Google when configured; Apple may be added later for mobile). Data is written server-side using a secret key that is never exposed to your browser; the browser may hold a publishable key only for authentication. Only the research team can read these responses through our application. When photo storage is available, submitted images are retained privately with Supabase or Cloudflare R2, not made publicly accessible. If saving fails, an analysis may still complete; the result indicates that the photo was not saved. BoochVision's vision and companion services use private hosted infrastructure, including Hugging Face and AWS, to process the image. Our website is hosted on Vercel and Cloudflare, which — like any web host — processes basic request metadata such as your IP address and browser user-agent in order to serve the site. We also use Vercel Web Analytics and Vercel Speed Insights: cookieless, first-party services for aggregated audience and performance measurement. Neither uses advertising trackers.

How long we keep it

We keep responses only as long as they are useful for this validation research, and no longer than needed. We keep submitted photos while they are useful for improving BoochBot's model, unless you ask us to delete them. Account brew records remain until you delete them or ask us to. When the research phase ends, or on your request, we delete personal identifiers such as your email address and remove submitted photos.

We do not sell your data

We do not sell, rent, or trade your email, survey responses, photos, or brew records. We do not share them with third parties for marketing. Aggregated, de-identified findings may inform internal research decisions and academic work.

Your choices and how to request deletion

Providing any information is voluntary, except that using BoochVision means you accept the research-use Terms below. You can ask us to show you what we hold about you, or to delete it, at any time. To request access or deletion, email us at the address below with the email you used and we will remove your data.

legal@boochbot.com

Not directed to children

This site and survey are intended for adults. BoochBot does not knowingly collect information from children. If you believe a child has submitted information, email us and we will delete it.

Cookies, analytics, performance, and third-party services

BoochBot does not use advertising or cross-site tracking. Account sessions may use browser storage managed by Supabase Auth. We use two cookieless, first-party Vercel services on this site: Web Analytics and Speed Insights. Neither collects the contents of forms you submit. The boochbot.com homepage additionally offers optional Google Analytics: it is off by default and runs only if you choose “Allow analytics” in the privacy banner there. If you allow it, Google Analytics sets cookies (names beginning with _ga) and collects usage information such as pages viewed, approximate region, and device details, which Google processes on our behalf for aggregated audience measurement — never for advertising. You can change or withdraw that choice at any time via the “Privacy choices” control at the bottom of the homepage; withdrawing is as easy as allowing. Pages also load web fonts from Google Fonts; when they load, Google may receive your IP address as part of that request. BoochVision may load the Supabase JavaScript client from a CDN for sign-in only.

Terms of use

BoochVision and related BoochBot tools provide appearance-only, advisory research guidance. They are not a diagnosis, lab test, or food-safety clearance, and they do not certify that a batch is ready or fit to consume. You remain responsible for hygienic brewing practice and your own judgment. By submitting a photo to BoochVision, you agree to these Terms and confirm that you own the image or have all necessary rights and permissions to upload it and authorize the uses described here. You keep ownership of your image. You grant BoochBot a non-exclusive, royalty-free permission to store, copy, analyze and review the image, and use it to develop, improve and train BoochVision models. Our hosting and model-service providers may process it on our behalf for these purposes. This permission does not authorize public publication or sale of your image. Contact us below to withdraw permission for future use and request deletion of retained images; deletion does not reverse training already completed. Saving a photo to a personal brew account is separate from this research storage. Do not upload images that contain faces, personal documents, or others' private information. We may update these Terms and this Privacy policy; the date above reflects the latest version. Continued use after an update means you accept the revised terms. If you do not agree, do not use BoochVision.

Contact

Questions or concerns about this policy, the Terms, or your data? Email us at the address below. Because we are an early-stage project, this policy may change; the date above reflects the latest version.

legal@boochbot.com