Brewing privacy

Updated 19 October 2026. Burrito’s Labs LLC is responsible for the personal information it handles for Brewing. This notice covers Brewing and its product pages. The website and game analytics notice explains the separate, optional website analytics.

Brewing and its services

Brewing is available as a direct Mac download. Its local tools work offline. Purchases, license actions, requested update checks and voluntary feedback use the online services described below.

Your files stay on your Mac

Core processing, catalog searches, previews and OCR run locally. Brewing requests file and folder access through macOS. Optional Apple on-device suggestions also run on the device. The current app has no analytics SDK, automatic diagnostic upload or cloud file-processing service.

Local records and controls

The app retains up to 100 activity records, including settings, status and file-access bookmarks. It does not save search text or file passwords. Recipes keep their settings. Clear Activity removes activity records and their bookmarks, but not recipes or exported files. Trial timing, a random device identifier, device proof and license receipts use macOS Keychain. Uninstalling the app does not automatically erase these records. Exported files stay in the destinations you chose.

Purchases and licensing

Stripe Managed Payments and Link process checkout, payment, tax and receipt information. Link acts as merchant of record. Their data handling is described in the Stripe privacy policy and Link privacy policy. Burrito’s Labs receives purchase and transaction details needed to issue, recover and support licenses and handle refunds; we do not need your full payment-card details.

Activation sends the activation code, random device identifier and device proof to our license service. Recovery uses the purchase email. User-requested license checks and transfers use activation identifiers and proof. These actions do not include your documents, file contents or searches.

Updates and diagnostics

Update checks contact the release service and expose ordinary connection information, including IP address and app version. Automatic checks are off by default in the current app. You may preview and save a diagnostic report containing app/macOS versions, architecture, language, broad license state and counts of activity states. It excludes file contents, names, paths, bookmarks, searches, device identifiers and license secrets. Saving a report does not send it; you choose whether to share it.

The website and support

Cloudflare hosts these pages and processes network information to deliver and protect the site. Optional website analytics use PostHog’s EU region only after consent, as explained in the analytics notice. Emailing us or using the site’s contact form shares the contact details and message you provide so we can reply. Please do not include sensitive documents unless we have agreed they are needed.

Help and feedback

Only when you choose Send, the app or Brewing product website shares your message and reply email with Burrito’s Labs through Cloudflare. One PNG or JPEG screenshot up to 1 MB is optional. The app also offers optional, previewable basic technical details; these are excluded by default. Check screenshots for private information. No private documents or diagnostics are sent automatically.

Messages awaiting email delivery are encrypted in the service for up to 48 hours and removed from its queue after delivery. Delivery references and retry metadata remain for up to 30 days. Support correspondence remains in our mailbox while needed to handle the request and related disputes. Rate-limit identifiers are hashed and expire within 24 hours.

Removing Brewing

Brewing → Uninstall Brewing moves the app to Trash. You may also remove local settings, history and recipes. Originals and exported results are never removed. Keychain trial and license records remain; use License & trial to release a paid device slot before uninstalling.

Purposes and retention

Where applicable privacy law requires a legal basis, we use purchase and support information to perform or prepare the requested contract, keep legally required transaction records to meet legal obligations, and use necessary security information for our legitimate interest in protecting the service. Optional analytics rely on consent, which you can withdraw with the site’s Privacy control.

Local records remain under your control as described above. Support correspondence is kept while needed to resolve the request and related disputes. License records are kept while needed to honor and recover the license; transaction records may be retained as required by accounting, tax or other legal obligations. The analytics retention period is specified in its separate notice. We do not sell personal information.

Providers and international processing

Service providers may process information outside your country, including in the United States. Where applicable law requires safeguards for international transfers, those safeguards must apply to the relevant service. Stripe and Link are independently responsible for the information they process.

Your choices and rights

Depending on applicable law, you may ask for access, correction, deletion, restriction or portability, object to certain uses, withdraw consent, or complain to your data-protection authority. Contact hello@burritoslabs.com; we may need to verify a request before acting. Deletion may be limited where records are legally required or needed for an ongoing license or dispute. Contact Stripe or Link for requests about information they independently control.

Burrito’s Labs LLC · 30 N Gould St, STE R, Sheridan, WY 82801, USA.
Contact: hello@burritoslabs.com