Privacy Policy
Last updated: March 3, 2026
ScrappyLabs ("we", "us", "our") operates mobile applications, web services, and APIs across scrappylabs.ai, loser.com, and brainjack.ai. This policy describes what data we collect, how we use it, and your choices.
What We Collect
Account Information
CollectedWhen you sign in via Google OAuth or create a ScrappyLabs account, we store your email address and basic profile information. We use Google OAuth for authentication — we receive your name, email, and profile picture from Google. We do not receive or store your Google password.
Google Workspace Data
CollectedIf you authorize access to Google Workspace services (Gmail, Calendar, Drive, etc.), we access only the data required to perform the actions you request. We do not store copies of your emails, calendar events, or documents on our servers. Data is processed in real-time and not retained.
Voice Recordings
CollectedWhen you use voice features (voice cloning, speech-to-text), we process your audio recording on our servers. Recordings are stored only as long as needed for processing. You can delete your cloned voices at any time.
Usage Data
CollectedWe track usage counts to manage service allocations. This data is associated with your account or device identifier. We do not track the content of your generations or queries.
Text Content
CollectedText you submit for processing (speech generation, AI queries) is sent to our servers or your configured third-party provider. We do not permanently store the content of your submissions. Text is processed in real-time and discarded.
What We Don't Collect
None of the following
Not Collected- Location data
- Contacts or address book (unless you explicitly authorize Google Contacts access)
- Photos or camera data
- Browsing or search history
- Financial or payment information (payments handled by Apple or Stripe)
- Health or fitness data
- Advertising identifiers or tracking data
Google OAuth & API Scopes
When you sign in with Google, we request only the permissions needed for the features you use. You can review and revoke access at any time from your Google Account permissions page. We comply with the Google API Services User Data Policy, including the Limited Use requirements.
Device Permissions
- Bluetooth — Required for compatible hardware devices (AI toys, HID bridges). Used only for device communication.
- Microphone — Used for voice input and voice cloning. Audio is only captured when you actively initiate recording.
- Local Network — Used when you configure self-hosted services on your local network.
Third-Party Services
Depending on your configuration, data may be processed by:
- Google — policies.google.com/privacy
- OpenAI — openai.com/privacy
- Anthropic — anthropic.com/privacy
- Supabase — supabase.com/privacy
When using ScrappyLabs-hosted services, your data is processed on our own infrastructure and is not shared with third parties except as described above.
Data Storage & Security
- Account data is stored in Supabase (hosted in the US).
- API keys and tokens are stored securely (iOS Keychain on mobile, encrypted at rest on servers).
- OAuth tokens are stored server-side with encryption and used only to fulfill your requests.
- All network communication uses HTTPS/TLS encryption.
Children's Privacy
Our services are intended for users 13 and older. We do not knowingly collect personal information from children under 13.
Your Rights
- Delete your account — Contact us to delete your ScrappyLabs account and all associated data.
- Revoke Google access — Remove our access from your Google Account settings at any time.
- Delete cloned voices — Remove any voice clones from your account at any time.
- Export your data — Contact us to request a copy of your data.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Contact us at: