Terms of Use and Privacy Policy

1. Terms of Use

1.1 Acceptance

By using the BaristAi application, you agree to the terms described herein. If you do not agree, we recommend not using the service.

1.2 About the Application

BaristAi is a digital barista powered by artificial intelligence, offering personalized recommendations for specialty coffees, food pairings, educational content, and access to coffee tourism experiences. To provide these features, BaristAi uses third-party artificial intelligence services, as described in the Privacy Policy.

1.3 Registration and Access

To use certain features, users must register and provide information such as name, email, date of birth, phone number, and consumption preferences.

1.4 User Responsibilities

Use the application ethically and in accordance with applicable law (LGPD)
Do not share offensive, false, or illegal content
Keep your login credentials confidential

1.5 Intellectual Property

All content on BaristAi belongs to iTrois Tecnologia e Inovação and may not be reproduced without authorization.

1.6 Updates

iTrois reserves the right to update the terms of use and app features at any time.

2. Privacy Policy

2.1 Data Collection

We collect the following categories of data:

Registration data: name, email, date of birth, and phone number
Preferences and sensory profile: coffee preferences, flavors, aromas, and consumption occasions provided by the user
Usage data: history of interactions with the virtual barista, searches performed, and content accessed
Location: collected optionally, only with express consent
Messages and queries: text entered by the user when interacting with the virtual barista
Voice data: audio recordings captured by the device's microphone when the user uses the voice input feature. Voice data is processed exclusively on the device itself or on dedicated speech-to-text servers, being converted to text before any further processing. The original audio is not transmitted to the third-party artificial intelligence service; only the text resulting from conversion is sent to generate virtual barista responses.
Image and photo data: images, photographs, and documents captured or sent by the user to interact with the virtual barista (e.g., photos of coffee labels, packaging, or recipes). Images are processed exclusively on the device itself or on dedicated optical character recognition (OCR) servers, being converted to text before any further processing. The original image is not transmitted to the third-party artificial intelligence service; only the text resulting from OCR conversion is sent to generate virtual barista responses.

2.2 Use of Data

We use the collected data for the following purposes:

Personalizing specialty coffee recommendations, preparation methods, and food pairings based on the user's profile
Processing your queries — submitted by text, voice, or image — and generating virtual barista responses through artificial intelligence services
Converting voice inputs to text to enable natural interaction with the virtual barista, without storing the original audio beyond the time strictly necessary for conversion
Processing images and photos sent by the user using OCR technology to extract text (such as information from labels, packaging, or recipes), without storing the original images beyond the time strictly necessary for processing
Continuously improving services and the app experience
Integrating with e-commerce and coffee tourism partners, upon consent
Complying with applicable legal and regulatory obligations

2.3 Use of Third-Party Artificial Intelligence

To provide virtual barista features, personalized recommendations, and intelligent food pairings, BaristAi uses the Claude Sonnet language model, developed by Anthropic, PBC, accessed through the Amazon Bedrock platform, operated by Amazon Web Services, Inc. (AWS).

What data is sent to the AI service:

When you interact with the virtual barista — whether by text, voice, or image —, the following information may be transmitted for processing by the AI model:

Messages and questions typed by the user
Text resulting from voice input conversion (the original audio is never transmitted to the AI service)
Text resulting from OCR processing of images (the original image is never transmitted to the AI service)
Flavor, aroma, and sensory profile preferences previously registered
Query context (e.g., type of dish, occasion, price range provided)

Purpose of data transmission:

Data is transmitted exclusively to generate personalized virtual barista responses. No data is used for advertising, third-party profiling, or any purpose other than providing the service to the user.

Data protection by the provider:

Amazon Web Services confirms that:

Input and output data processed by Amazon Bedrock is not stored after processing
Data is not shared with Anthropic or any other model provider
Data is not used to train or improve AI models
The service is certified with ISO 27001, SOC 2, and is compliant with LGPD and GDPR

Consent:

Use of BaristAi's AI features is subject to your express consent, requested upon first access to the app. You may revoke this consent at any time in the app's settings. After revocation, AI-based virtual barista features will be unavailable, but other app features will remain accessible.

Provider privacy policies:

2.4 Data Sharing

iTrois does not sell users' personal data. Data sharing occurs exclusively in the following situations:

AI service (AWS Bedrock / Claude Sonnet): as described in clause 2.3 of this Policy, query data in text format is transmitted to the AI service to generate virtual barista responses, subject to prior user consent. Voice data in audio format is never transmitted to the AI service. Original images are never transmitted to the AI service.
Speech-to-Text service: when voice-to-text conversion is not performed locally on the device, audio may be transmitted to a dedicated speech recognition service, exclusively for conversion purposes. The audio is discarded immediately after text generation.
Optical Character Recognition (OCR) service: when OCR processing of images is not performed locally on the device, the image may be transmitted to a dedicated OCR service, exclusively for text extraction purposes. The original image is discarded immediately after text generation.
E-commerce and coffee tourism partners: only with express and specific user consent, to enable requested integrations and benefits
Legal obligations: when required by law, court order, or competent authority

Under no circumstances is data shared with third parties for advertising or marketing purposes without explicit consent.

2.5 User Rights

In accordance with the Brazilian General Data Protection Law (LGPD — Law 13.709/2018), you have the following rights regarding your personal data:

Access: request confirmation of the existence and access to processed data
Correction: request correction of incomplete, inaccurate, or outdated data
Deletion: request deletion of data processed based on consent
Consent revocation: revoke consent for third-party AI use or other purposes at any time, without prejudice to the lawfulness of prior processing
Portability: request data portability to another service provider
Information: obtain information about public and private entities with whom we share data

2.6 Security

We adopt technical and administrative measures to protect your data, in compliance with LGPD (Law 13.709/2018). Regarding voice and image data, we apply the following specific safeguards:

Audio and images captured are processed through an encrypted channel (TLS 1.2 or higher)
The original audio file is discarded immediately after conversion to text, not being retained on any server or device
The original image file is discarded immediately after OCR processing, not being retained on any server or device
The text resulting from voice conversion and OCR processing receives the same level of protection applied to other user text messages
Access to the AI service is performed through the Amazon Bedrock platform, which holds ISO 27001 and SOC 2 security certifications, ensuring data protection during processing

2.7 Data Retention

We retain data only as long as necessary for service provision or as required by law. Regarding AI processing, voice, and images:

Voice data (audio): discarded immediately after conversion to text. No audio file is stored by BaristAi or its providers beyond the time strictly necessary for conversion
Image data: discarded immediately after OCR processing. No image file is stored by BaristAi or its providers beyond the time strictly necessary for text extraction
Text generated from voice inputs: treated the same as text messages typed by the user; transmitted to the AI service and discarded after processing, in accordance with AWS Bedrock provider policy
Text generated from OCR processing: treated the same as text messages typed by the user; transmitted to the AI service and discarded after processing, in accordance with AWS Bedrock provider policy
Data transmitted to AWS Bedrock (Claude Sonnet): not stored by the provider after processing. Each query is processed in real time and discarded
Profile and preference data: retained while the user account is active or until a deletion request
Registration data: retained for the minimum period required by applicable law after account closure

2.8 Cookies

We use cookies to enhance navigation and the app experience. You can manage cookie preferences in your device settings.

2.9 Minors

The app is intended for users over 16 years of age. Minors of this age may only use BaristAi under the supervision and consent of a legal guardian, who must accept these terms on behalf of the minor.

2.10 Consent for AI, Voice, and Image Use

Use of BaristAi's artificial intelligence features (virtual barista, personalized recommendations, and food pairings) requires your explicit consent to send data to the third-party AI service (Claude Sonnet via AWS Bedrock).

Use of the voice input feature additionally requires:

Microphone permission: granted by the user in the device's operating system settings
Consent for voice-to-text conversion: requested upon first use of the voice feature in the app

Use of the image submission feature additionally requires:

Camera and/or gallery permission: granted by the user in the device's operating system settings
Consent for OCR processing: requested upon first use of the image feature in the app

All consents may be revoked independently:

Consent for AI use may be revoked in Settings > Privacy > Artificial Intelligence Use within the app
Microphone permission may be revoked in the device's operating system settings
Camera/gallery permission may be revoked in the device's operating system settings

Revocation of any of these consents does not affect the validity of prior processing, nor does it prevent the use of other app features.

2.11 Changes to This Policy

This Privacy Policy may be updated periodically. Relevant changes will be communicated via in-app notification or email, with at least 15 days' advance notice. Continued use of BaristAi after notification of changes implies acceptance of the updated version.

3. Contact and Data Protection Officer

Privacy email: privacidade@baristai.coffee
Support email: suporte@baristai.coffee
Controller: iTrois Tecnologia e Inovação and Beerfunding Brasil
Data Protection Officer (DPO): Klever Pereira
Address: Rua Luiza Grinalda, 665 / Loja A, Sala 02 – Centro, Vila Velha, ES, Brazil

Last updated: March 2026