SuperLazy

Privacy Policy

Last updated: 23 August 2026

SuperLazy ("the app", "we", "us") is operated by Gaurav Sarkar. This policy explains what data the app handles and how. Questions: [email protected].

1. Information we handle

• Account information: your email address and name, used to create and manage your account (via our authentication provider, Supabase).
• Content you add ("dumps"): links, text, images, PDFs, and voice notes, including transcripts generated from voice notes.
• Contacts (optional): on the phone app, if you grant permission, contact names are read on your device to help file notes that mention people. On the web app, if you connect Google Contacts, names, phone numbers, and emails are read in this browser so SuperLazy can put a number on a WhatsApp draft you start. We do not upload your address book to SuperLazy servers.
• Device permissions you may grant: microphone (voice notes), camera and photos/media (capturing and importing content), calendar (adding time-sensitive items you choose), and contacts (as above).

2. How your data is used

• To organize, categorize, transcribe, and let you search and ask questions about the content you save.
• Content you add is transmitted over a secure connection to our backend and to our AI processing provider solely to analyze, transcribe, embed, and answer questions about your content.
• Your saved items are stored locally on your device. Your account information is stored with Supabase.
• Calendar events are created only when you choose to add them.

3. Service providers

We use the following processors strictly to operate the app:

• Supabase — account authentication and storage.
• Render — backend hosting.
• Our AI provider — AI processing of your content.

We do not sell your data or use it for advertising.

4. Data retention and deletion

• You can delete individual items in the app, or use "Reset brain" (Me tab) to permanently remove all saved data from your device, without deleting your account.
• To delete your account and associated server-side data, email [email protected] with the subject "Delete my account", or see Delete account.
• Requests are processed within 30 days.

5. Security

Data is encrypted in transit (HTTPS). No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

6. Children

SuperLazy is not directed to children under 13 and is intended for users 18 and over.

7. Changes

We may update this policy; the "Last updated" date will change accordingly.

8. Contact

Gaurav Sarkar — [email protected]

9. Chrome / Edge browser extension

The SuperLazy extension dumps the current tab URL or an open Gmail thread into the SuperLazy web app in this browser. It does not store your notes. Notes live in IndexedDB on www.superlazy.in after you sign in.

• The extension can read the active tab (and Gmail, if you dump an email) only when you dump.
• It does not read other tabs in the background and does not upload your browsing history.
• Optional Google Calendar connect in the extension popup uses a token stored on this device. SuperLazy servers never receive that token.

10. Google APIs (web app and Chrome extension)

Connecting Google is optional. SuperLazy uses Google OAuth so you can grant Calendar, Contacts, Drive, or Tasks access in this browser. Access tokens stay in this browser (IndexedDB) or, for the extension, on this device. SuperLazy servers never receive those tokens.

• Google Calendar: we read upcoming events to help Plan my day, and we create an event only when you ask SuperLazy to put a reminder on your calendar.
• Google Contacts (read-only): we look up a name so a WhatsApp or SMS draft can include a phone number. The address book is cached in this browser and is not uploaded to SuperLazy servers.
• Google Drive: we only access files you pick (Google Picker). If you dump a Drive file, its contents are processed like any other dump — including by our AI provider — solely to file and search that dump for you.
• Google Tasks: we can list open tasks and copy a SuperLazy to-do into Google Tasks when you choose. SuperLazy remains the source of truth.

You can disconnect any Google service in Me. That revokes the token in this browser. SuperLazy's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI models.