Notice

Privacy Policy

Effective from · Last updated: 1 August 2026

1. Introduction

GetBolla is a Bluetooth sensor for kombucha fermentation, paired with an app for Android and iOS. This notice explains what data the app collects, why it does so, how we protect it and what rights you have over its processing.

We believe in collecting only what is strictly necessary to run the service. We do not collect your name, email or phone number, we do not use advertising trackers and we do not sell your data.

2. Data controller

The data controller is Marco Boffo, owner of the GetBolla project.

For any request regarding your personal data you can contact us at chat@getbolla.com.

3. Data we collect

When you use the app, the following data is sent to our backend at https://api.getbolla.com, always over an encrypted connection (HTTPS/TLS):

Device and installation identifiers

  • A device identifier generated locally on the app.
  • A token and a secret used for authentication.
  • A recovery code.

These identifiers let the app communicate securely with the sensor and the backend. They are not your name, email or phone number and do not identify you as a person.

Fermentation and sensor data

  • pH and temperature values measured by the sensor.
  • Date and time (timestamp) of the readings.
  • Sensor firmware status and version.

Batch metadata you enter

  • Batch name.
  • Type of tea used.
  • Amount of sugar.
  • Free-text notes.
  • Second-fermentation bottle data (flavours, aromas and notes).

This is the data you enter voluntarily to keep track of your fermentations.

Data we do NOT collect

For clarity, the app does not collect:

  • Name, email or phone number.
  • Your address book or contacts.
  • Photos or videos.
  • Your GPS or precise location.
  • Advertising identifiers.

On some older Android versions the app may request the location permission: this is an operating-system requirement solely to enable Bluetooth scanning. Your location is not read, collected or transmitted.

4. How we use the data

We use the collected data only to run the service, that is to:

  • connect and authenticate the app with your sensor and the backend;
  • track the fermentation and show you the status of your batches;
  • notify you when your kombucha is ready to bottle;
  • keep the history of your fermentations.

5. Legal basis (GDPR)

We process your data on the legal basis of performance of the service you requested, under Article 6(1)(b) of the General Data Protection Regulation (GDPR — EU Reg. 2016/679): the processing is necessary to provide you with the features of the GetBolla app.

There is no user account with a password: authentication happens via a secret generated for each device.

6. Data sharing

Your data is shared only with the GetBolla backend (https://api.getbolla.com), the minimum necessary to run the app.

We do not use third-party SDKs in the app: no analytics tools, no crash reporting, no advertising, no trackers. Your data is not sold and is not shared with third parties for marketing or advertising purposes.

7. Security

  • All communication with the backend happens over an encrypted connection (HTTPS/TLS).
  • Credentials stored on your device are encrypted at rest with AES-256-GCM, protected via the Android Keystore.

8. Retention and deletion

You can unpair the sensor from the app at any time: this deletes the credentials stored locally on your device.

To request deletion of the data stored on our servers you can write to us at chat@getbolla.com.

9. Your rights (GDPR)

As a data subject, under the GDPR you have the right to exercise the following rights:

  • Access to your personal data.
  • Rectification of inaccurate or incomplete data.
  • Erasure of your data (the "right to be forgotten").
  • Portability of the data in a structured, readable format.
  • Objection to processing.
  • Restriction of processing.

To exercise any of these rights, write to us at chat@getbolla.com. You also have the right to lodge a complaint with the competent supervisory authority (in Italy, the Garante per la protezione dei dati personali).

10. Minors

GetBolla is about preparing fermented drinks and is intended for an adult audience. The app is not intended for minors and we do not knowingly collect data relating to minors.

11. Changes to this notice

We may update this notice from time to time. If we make changes, we will update the "Last updated" date shown at the top of this page.

12. Website cookies and analytics

This section concerns the website getbolla.com (not the app, which as described above uses no trackers).

On the website we use Google Analytics 4 to understand, in aggregate form, how many people visit the pages and how they get there. Google Analytics sets cookies and collects browsing data with the IP address anonymised.

We also use Microsoft Clarity for anonymous session recordings and heatmaps, which show us how people interact with the pages (clicks, scrolling, mouse movement). Clarity does not collect free-text form fields or data suitable for directly identifying a person.

Both measurements are active from the first page load, without a prior consent request. You can disable Google Analytics at any time through your browser's cookie settings or by installing Google's Analytics opt-out add-on; for Microsoft Clarity you can block the clarity.ms domain via an ad-blocker or your browser's privacy settings. More information on how Microsoft Clarity processes data is available in Microsoft's official documentation.

13. Contact

For any question about this notice or the processing of your data, write to us at chat@getbolla.com.