Privacy Policy
Last updated: July 20, 2026
ScrappyLabs — a d/b/a (assumed business name) of Loser.com LLC ("we", "us", "our") — operates mobile applications, web services, and APIs across scrappylabs.ai, loser.com, brainjack.ai, and undervoice.ai. This policy describes what data we collect, how we use it, and your choices.
SMS & Mobile Messaging
ScrappyLabs (Loser.com LLC) operates an SMS text-messaging program for its clients. This section describes that program and how we handle mobile information. Full standalone terms are at scrappylabs.ai/sms.
How you opt in
We send text messages only to people who have opted in — verbally during an onboarding phone call, or by agreeing to receive service notifications when they engage ScrappyLabs and provide their mobile number. We never use purchased or third-party lists.
What we send
Transactional service and account notifications you requested — for example project and deployment status updates, build-ready alerts, appointment or callback confirmations, and account notices. We do not send marketing or promotional texts. Message frequency varies. Message and data rates may apply.
Opting out & help
Reply STOP to any message to unsubscribe, START to opt back in, or HELP for assistance. You can also email [email protected].
We do not share or sell your mobile information
Never sharedNo mobile information is shared with or sold to third parties or affiliates for their marketing or promotional purposes. Text-messaging originator opt-in data and consent are not shared with any third parties.
What We Collect
Account Information
CollectedWhen you sign in via Google OAuth or create a ScrappyLabs account, we store your email address and basic profile information. We use Google OAuth for authentication — we receive your name, email, and profile picture from Google. We do not receive or store your Google password.
Google Workspace Data
CollectedIf you authorize access to Google Workspace services (Gmail, Calendar, Drive, etc.), we access only the data required to perform the actions you request. We do not store copies of your emails, calendar events, or documents on our servers. Data is processed in real-time and not retained.
Voice Recordings
CollectedWhen you use voice features (voice cloning, speech-to-text), we process your audio recording on our servers. Recordings are stored only as long as needed for processing. You can delete your cloned voices at any time.
Usage Data
CollectedWe track usage counts to manage service allocations. This data is associated with your account or device identifier. We do not track the content of your generations or queries.
Text Content
CollectedText you submit for processing (speech generation, AI queries) is sent to our servers or your configured third-party provider. We do not permanently store the content of your submissions. Text is processed in real-time and discarded.
What We Don't Collect
None of the following
Not Collected- Location data
- Contacts or address book (unless you explicitly authorize Google Contacts access)
- Photos or camera data
- Browsing or search history
- Financial or payment information (payments handled by Apple or Stripe)
- Health or fitness data
- Advertising identifiers or tracking data
Google OAuth & API Scopes
When you sign in with Google, we request only the permissions needed for the features you use. You can review and revoke access at any time from your Google Account permissions page. We comply with the Google API Services User Data Policy, including the Limited Use requirements.
Device Permissions
- Bluetooth — Required for compatible hardware devices (AI toys, HID bridges). Used only for device communication.
- Microphone — Used for voice input and voice cloning. Audio is only captured when you actively initiate recording.
- Local Network — Used when you configure self-hosted services on your local network.
Third-Party Services
Depending on your configuration, data may be processed by:
- Google — policies.google.com/privacy
- OpenAI — openai.com/privacy
- Anthropic — anthropic.com/privacy
- Supabase — supabase.com/privacy
When using ScrappyLabs-hosted services, your data is processed on our own infrastructure and is not shared with third parties except as described above.
Data Storage & Security
- Account data is stored in Supabase (hosted in the US).
- API keys and tokens are stored securely (iOS Keychain on mobile, encrypted at rest on servers).
- OAuth tokens are stored server-side with encryption and used only to fulfill your requests.
- All network communication uses HTTPS/TLS encryption.
Children's Privacy
Our services are intended for users 13 and older. We do not knowingly collect personal information from children under 13.
Your Rights
- Delete your account — Contact us to delete your ScrappyLabs account and all associated data.
- Revoke Google access — Remove our access from your Google Account settings at any time.
- Delete cloned voices — Remove any voice clones from your account at any time.
- Export your data — Contact us to request a copy of your data.
Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact
Questions about this privacy policy? Contact us at: