BumbleB Acorn

Ask BumbleB Crunch about your data from VS Code or VSCodium.

Requires a BumbleB Crunch account. Sign in with the account you use at bumbleb.co; Acorn works with your Crunch workspace and the plan it is on.

• Sign in with Acorn: Sign in.
• Open the Acorn view in the activity bar and ask in plain language.

Your data, on your computer

Connect a Postgres database, MongoDB collections, or CSV and Parquet files under Your data. They stay where they are:

• Postgres is read live, read-only. Use a database role that can only read; Acorn also refuses anything but reads.
• MongoDB collections are brought onto this computer and laid out as tables (nested fields as field__child, each array as its own table). The list shows when they were last brought over; refresh to bring them again.
• Passwords and connection strings are kept in the editor's secret storage and never leave this computer.

Write a query in any SQL tab and run it (⌘/Ctrl+Enter). Name tables as connection.table. Every query run on your data, by you or by Crunch, appears under Queries. To decide on each query Crunch wants to run, turn on Acorn: Approve Each Query in settings.

Result tables a conversation keeps are stored on this computer, under Kept on this computer, until you delete them.

Trust model

Acorn is built so that you can see and control everything Crunch does with the data on your computer.

What stays on your computer

• Your connections: hosts, passwords and connection strings. They are kept in the editor's secret storage and are never sent to Crunch.
• Your tables. Acorn never copies a table to Crunch or into your Crunch workspace. Crunch works only through the queries it asks Acorn to run.
• Results a conversation keeps. They are stored on this computer and deleted after 30 days unused, or when you delete them.
• The query log, under Queries.

What Crunch receives

• The tables you pick for a conversation: their names, columns and size.
• The rows each of its queries returns, as many as it needs to answer you. Crunch's analyst reads them to work out the answer.
• Your questions. Crunch's answers quote figures from what it read, and the conversation is saved to your Crunch account so you can reopen it.

All of it is handled under the Privacy Policy.

What Crunch can run

• Only reads. Acorn checks each query before it runs: one statement, and it must be a read. Anything that writes, changes settings, installs extensions or reaches outside the attached tables (other files, the network, stored secrets) is refused.
• Postgres is attached read-only, and the engine on your computer cannot read files or change its own settings. A query that got past the check still could not write anything or read anything else.
• Crunch writes its queries over the tables you picked for the conversation. Acorn itself can reach whatever your connections can, so connect with a database role that sees only the data you want analysed.

What you control

• Which tables a conversation can read: tick them under Your data, or untick them all with one click.
• Every query, yours or Crunch's, is listed under Queries with its SQL, how many rows it returned and how long it took.
• With Acorn: Approve Each Query on, Crunch's queries wait for you: run once, always run on that connection, or refuse. "Always run" holds until you remove the connection.
• A running question can be stopped with Stop. Anything it was running on your computer stops with it.
• Signing out removes your Crunch sign-in from this computer.

Data in your Crunch workspace (cloud datasets) is read in the cloud, as on bumbleb.co.

Terms

Acorn is provided under the BumbleB legal terms, including the Terms of Service and the Privacy Policy. Using it requires a BumbleB Crunch account.