Privacy Policy

1. Scope and key principles

Super Able Inc. ("Super Able," "we," "our," or "us") operates LOT across its mobile applications, web application, websites, and related services (the "Service").

• We do not sell personal information for monetary compensation.
• We do not use private notes or Companion memory for cross-context behavioral advertising.
• Private notes are encrypted before cloud storage.
• AI reflection may be on by default for new users and can be turned off in LOT settings.
• Companion does not provide a permanent cloud chat history; supported iPhone versions keep a temporary on-device copy to resume an unfinished chat.
• Private thoughts enter matching only through an excerpt you review and approve.
• Anonymous to other users does not mean anonymous to Super Able for safety and legal purposes.

2. Information we collect

Account and profile information

• Email address and authentication identifiers from Apple, Google, or other sign-in methods
• Username, display name, avatar, bio, profile settings, language, and preferences
• Records showing acceptance of our terms, privacy policy, or safety rules

Content you create

• Private notes, public or friend-shared thoughts, replies, and profile content
• Anonymous matching excerpts you approve
• Messages in anonymous match conversations and Circles
• Related-thought participation choices, approved contributions, Circle themes, memberships, aliases, and reactions
• Companion messages during an active session and writing you choose to save
• Reports, support requests, feedback, block actions, and moderation appeals

Social and activity information

• Friend relationships and requests
• Replies, Felt actions, conversation participation, and notification activity
• Legacy group or community information where an older supported client still exposes that feature

Technical and usage information

• Device, browser, operating-system, app-version, and platform information
• Push-notification tokens, IP address, approximate IP-derived region, and timestamps
• Crash reports, diagnostics, security logs, rate-limit events, and product analytics

AI-derived information

• Reflections, summaries, themes, emotional direction, tensions, needs, and unresolved questions
• Embeddings, similarity signals, support patterns, match-quality signals, and safety classifications
• Companion portrait summaries, approved episodic memories, and Plus insight questions and outputs
• Feedback signals such as "That gave me a new angle" or "Not quite"

3. Subscriptions, purchases, and usage records

Apple processes payments for App Store subscriptions. We receive purchase and verification information needed to recognize access, including the product, transaction and original transaction identifiers, account-binding information, purchase and expiration dates, renewal status, and refund or revocation events. We also process signed verification data, the purchase environment, and your LOT account identifier. We do not receive your full payment-card details from Apple.

We keep entitlement, allowance, request, and session records to grant benefits, measure usage, prevent duplicate charges against an allowance, restore access, and investigate fraud or billing disputes. Subscription status may be synchronized to supported LOT clients. Purchasing Plus does not itself change your AI-processing or sharing choices.

Operational AI cost samples record model, token usage, request category, plan tier, and timestamps without note or chat text or your account identifier in those samples. They are scheduled to expire after 90 days; expiry processing may not be immediate. Separate account-linked usage and purchase records may remain as needed to provide the service, resolve disputes, prevent fraud, and meet legal obligations.

4. How we use information

We use information to:

• Provide, authenticate, synchronize, maintain, and improve LOT
• Display content according to the visibility you select
• Provide Companion, reflection, translation, matching, feed, friend, profile, and notification features
• Prepare concise AI reflections for new notes when reflection is enabled
• Generate and maintain encrypted Companion summaries when you choose to use memory
• Find strong thought matches and operate mutually accepted anonymous conversations
• Provide Plus insights, verify subscriptions, and apply the usage limits shown in the app
• Produce related-thought aggregates and operate optional Circles
• Measure reliability and understand whether features are useful
• Detect fraud, spam, objectionable content, harassment, unsafe behavior, and security threats
• Investigate reports, enforce our Terms, and comply with legal obligations

We may use de-identified or aggregated operational and AI-derived information to improve quality, safety, matching, and system performance. We do not intend such information to identify individual users.

5. Private notes, encryption, and visibility

Private notes are encrypted on your device before they are stored in our cloud database. Depending on your encryption mode, we may store ciphertext, encrypted key envelopes, source identifiers, timestamps, and settings needed to synchronize encrypted notes across your devices.

We do not store your raw note passphrase. If you lose the credentials or key material required to decrypt your notes, we may not be able to restore them.

Content you mark public, share with friends, place in an anonymous matching excerpt, or send in an anonymous conversation or Circle is not encrypted in the same way as a private note because our systems must process and deliver it to the intended audience.

If AI reflection is enabled, LOT may process the text of your own notes transiently to generate private reflections, Companion context, safety signals, and related summaries. This processing is used to provide LOT's reflection features and is not used to publish your private notes or place raw private text into Discovery.

Anonymous posts and match conversations do not expose your profile or account identifier to the other participant. Super Able retains internal identifiers to prevent abuse, honor blocks, investigate reports, operate the Service, and comply with law.

6. Companion, personal understanding, and memory

Companion can process the message or note you are discussing, recent session turns, the latest note context when you open Companion from LOT, relevant derived note summaries, recurring patterns, and encrypted memory summaries you have approved. LOT sends only compact context selected for the active request rather than your complete note history.

LOT does not intentionally store raw Companion transcripts as a permanent cloud chat history. Supported iPhone versions save an unfinished conversation on the device so you can resume it. This copy uses device file protection and is excluded from device backups. It expires 24 hours after its last save and is removed when LOT next checks it; finishing the conversation or signing out also clears it. Requests and responses still pass through our systems and AI providers to deliver the conversation.

If you choose "Remember," LOT saves a short encrypted summary, not the conversation transcript. LOT may also maintain an encrypted personal understanding built from concise derived summaries of your own authored thoughts and approved memories. You can inspect, correct, delete, or clear this information in Settings.

If you use "Write This as Me" or a similar feature, the generated first-person draft is not saved until you review and explicitly save it as a note.

7. Ask your past, Then and now, and Deep Portrait

When you request a Plus insight, LOT selects relevant notes on your device and sends your question, dated excerpts, and relevant approved context to our backend and AI providers. Selection limits the amount sent, but a short note can fit entirely within an excerpt. Source references help connect an answer to your notes; they do not anonymize names or sensitive details inside your writing.

Our insight function does not intentionally save the submitted excerpts or generated answers as a server-side insight history. Provider processing and retention are separate, as explained below. Ask your past answers are held in the current view; supported iPhone versions can keep Then and now and Deep Portrait results locally in protected files excluded from backups. These caches are cleared on sign-out and invalidated when their source notes change or are deleted. Other offline devices may need to reconnect before changes take effect.

Insight results are private to your use of the feature and are not automatically published, shared with a Circle, or added to your public profile. They can contain sensitive inferences and may be mistaken.

8. Anonymous thought matching

Eligible public thoughts may be prepared for matching automatically. Private and friend-shared thoughts enter matching only after LOT generates an anonymous excerpt and you review and approve it.

For matching, we may process and store:

• The approved anonymous excerpt
• Broad subject, emotional direction, internal conflict, underlying need, and unresolved question
• A semantic embedding and match-quality or safety signals
• Candidate, proposal, consent, block, report, and conversation-status records

Raw private-note text may be processed transiently to create the excerpt and derived matching context, but it is not intended to be stored in the matching corpus. Automated anonymization can make mistakes, so the review screen is an important privacy control.

A connection opens only after both people accept. Anonymous-conversation messages are stored so the conversation can continue across sessions. If either person leaves, the conversation closes for both, access is removed immediately, and messages are scheduled for deletion after 30 days unless they must be retained for an unresolved report, safety investigation, legal obligation, or system-integrity reason.

9. Related-thought counts and Circles

On your mind counts use contributions from distinct people who chose to participate: eligible public posts when the author enabled aggregate participation, and separately approved contributions drawn from private matching excerpts. They do not scan every person's private notes for a public count. We process contribution identifiers, account identifiers, themes, consent records, and timestamps to deduplicate and group participation.

Public counts are rounded and subject to minimum thresholds. The displayed period may be the past 24 hours or this week; sparse results may not appear. Turning off participation or withdrawing a contribution excludes it from future eligible counts, but cannot recall aggregates others already saw. Withdrawing a contribution does not itself delete an original public post.

Joining a Circle is a separate choice. We use the theme you confirm, language, membership, and timing to organize a small conversation. Members see aliases rather than internal account identifiers. Our systems retain account-linked membership, messages, reactions, reports, and moderation records. Messages are stored in readable form for delivery and safety, rather than with private-note encryption. Authorized moderators can review reported messages and relevant conversation content.

Circles are intended to accept posts for seven days; this is not a seven-day deletion schedule. Messages can remain available to remaining members after posting closes or another member leaves. Leaving removes your access and membership but does not automatically delete your earlier messages. Account deletion includes your Circle contributions and participation, subject to report, security, backup, and legal exceptions described in this policy. Other participants may have copied or retained content you shared.

10. How we disclose information

At your direction

We disclose content to the audience you choose, such as public users, friends, an accepted anonymous match, members of a Circle you join, recipients of exported content, or visitors to a public profile or web preview.

Service providers

We use providers for authentication, cloud hosting, databases, storage, notifications, analytics, diagnostics, security, content delivery, and AI processing. Current providers may include Apple, Google, Firebase / Google Cloud, DeepSeek, Zhipu, and other model or infrastructure providers. Providers and models may change for quality, safety, availability, or cost reasons.

AI processing and app-event measurement

AI features send readable request content and selected context to providers such as DeepSeek and Zhipu. Private-note encryption at rest does not prevent this processing when you use these features. Derived reflections and embeddings are not necessarily protected in the same way as encrypted source notes. Providers process information under their applicable policies and our service arrangements; this policy does not promise that every provider has zero retention or excludes every use for model improvement. We will update disclosures and request additional permission where required when processing changes.

Where configured, LOT uses Meta app events to measure app activity. Advertiser-ID collection is disabled for that integration. We do not intentionally send private-note text, Companion conversations, or memory content to the app-event SDK. Technical and activity data can still be processed by measurement providers.

Safety, law, and corporate events

We may disclose information when reasonably necessary to comply with law or legal process, protect users or the public, enforce our agreements, investigate abuse or security incidents, or complete a merger, financing, acquisition, reorganization, bankruptcy, or asset transfer.

11. Retention and deletion

Retention depends on the type of information, account status, feature operation, safety needs, and legal requirements. Active account and content records are generally retained while needed to provide LOT.

• Private notes remain until you delete them, subject to backup and legal exceptions.
• Companion memory and personal-understanding records remain until updated, cleared, or deleted.
• Unfinished Companion chats may have a temporary on-device resume copy as described above; Plus insight caches follow the local storage practices described above.
• Closed match-conversation messages are scheduled for deletion after 30 days, subject to report holds.
• Circle messages are not automatically deleted when the seven-day posting period ends.
• Purchase and usage records are retained as needed for access, billing, fraud prevention, and legal requirements.
• Reports, blocks, moderation, fraud-prevention, and security records may be retained longer.

When deletion is requested or initiated, information may remain temporarily in backups, logs, or restricted records where reasonably necessary for security, legal compliance, dispute resolution, or enforcement.

12. Your choices and privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, object, or obtain a copy of personal information.

• Turn AI reflection on or off in LOT settings
• Change thought visibility, matching participation, and related-thought aggregate participation in the app
• Choose whether to join or leave a Circle and report content
• Review or delete Companion memory and personal understanding
• Control notifications through LOT and device settings
• Delete content or request account deletion
• Contact us about access, correction, deletion, portability, or consent withdrawal

California residents may have rights under the CCPA/CPRA, including rights to know, access, delete, and correct certain information, subject to legal exceptions. We do not sell personal information or share it for cross-context behavioral advertising as those terms are currently understood.

Canceling a subscription does not delete your notes or account. Deleting your account does not cancel an Apple subscription; manage billing separately through Apple.

Requests may be sent to info@superable.net. We may verify your identity before completing a request.

13. Safety, children, security, and international processing

LOT provides report, block, hide, leave, and content-removal controls. We use automated and human review to filter and respond to objectionable content and abusive behavior. Safety reports may require us to preserve relevant records while an investigation remains open.

LOT is not intended for children under 13 or any higher minimum age required where they live. Storefronts may impose a higher age rating because LOT includes anonymous user-generated content.

We use technical and organizational safeguards, but no system is completely secure. Information may be processed in the United States and other countries where our providers operate, whose laws may differ from those in your jurisdiction.

14. Changes to this policy

We may update this policy as LOT changes. Material changes may be announced in the Service, on our website, or by email. The effective date above identifies the current version.

15. Contact

Super Able Inc.

Email and privacy requests: info@superable.net

Safety and inappropriate-activity reports: info@superable.net

Website: https://superable.net