Kohler Facing Toilet Bowl Camera Privacy Claims

In 2025, Kohler introduced Dekoda, a toilet-mounted smart camera marketed as a consumer health device that analyzes images to provide feedback on gut health. Because the product captures intimate biological information inside the home, privacy representations became central to its market acceptance, writes Lorenzo Franceschi-Bicchierai in TechCrunch.

Public scrutiny quickly focused on how the company described data security and user control, turning a product launch into a discussion about accuracy in technical claims and consumer understanding of digital privacy protections.

Initial concern arose from Kohler’s use of the phrase “end-to-end encryption” on its website. Security researcher Simon Fondrie-Teitler noted that the description did not match the commonly accepted meaning of that term, and might lead users to believe Kohler cannot see the pictures that the camera takes.

Kohler’s privacy policy instead described transport-layer security, which protects data while it moves across networks, similar to standard HTTPS connections. Unlike true end-to-end encryption used in messaging services, this approach allows the service provider to access data on its own systems.

Further exchanges between the researcher and company representatives clarified Kohler’s data practices. The company stated that information is encrypted when stored on devices and servers, and decrypted for processing once received. Kohler also acknowledged that, with user consent, it may de-identify information to train the artificial intelligence supporting the product. It emphasized that consent is optional and not preselected.

After the TechCrunch article was published, Kohler revised its product page to remove references to end-to-end encryption and replaced them with more precise language.

The episode is a good example of legal exposure created by imprecise language in consumer-facing materials. Marketing claims, privacy policies, and consent flows must align with industry definitions to reduce regulatory risk.

Products involving biometric or health-adjacent data face intensified scrutiny in regulated markets. Careful legal team review can help ensure that disclosures align with the system design and cannot be construed in a misleading way. Consent mechanisms must be defensible in practice and legally sustainable.