Privacy Policy
Superlite is a desktop application with optional web and native mobile remotes. This policy explains what data we collect, how we use it, and what we do not do with it.
1. What we collect
Account information
When you sign in to the Superlite web remote or mobile companion, we use Google Sign-In via Firebase Authentication. We receive your Google account email address and display name. We do not receive or store your Google password.
Device and connection data
When your desktop app is online, we store the following in Firebase Realtime Database under your account:
- Your device name and a last-seen timestamp
- Temporary WebRTC signaling data (SDP offers, answers, and ICE candidates) used to establish a peer-to-peer connection between your devices
Signaling data is ephemeral. Once a connection is established or abandoned, it is no longer needed and is removed by the desktop app.
Subscription data
If you subscribe to Superlite Pro, checkout and subscription management are provided by Polar, which uses payment processors such as Stripe. We do not store your credit card number or full payment details. We receive and store confirmation of your subscription status.
Analytics and optional spoken replies
We use Google Analytics to understand aggregate website visits and conversion events such as downloads and checkout starts. If you enable spoken replies in the native mobile app, the completed reply text is sent to ElevenLabs to generate audio. Spoken replies are optional.
What we do not collect
We do not see or store the content of your agent sessions. Except when you explicitly enable an optional third-party feature such as spoken replies, conversations between your remote and your desktop are transmitted peer-to-peer via WebRTC and are never routed through our servers. We have no access to your prompts, agent responses, tool call output, or any other session content.
2. How we use your data
- To authenticate you and associate your devices with your account
- To facilitate the WebRTC signaling handshake between your devices
- To manage your Pro subscription status
- To contact you about your account if necessary
We do not sell your data. We do not use your data to train AI models. We do not share your data with third parties except as described in section 3.
3. Third-party services
We use the following third-party services:
- Google Firebase (Authentication and Realtime Database) — subject to Google's Privacy Policy
- Polar and Stripe (checkout, subscriptions, and payment processing) — subject to their respective privacy policies
- Google Analytics (website usage analytics) — subject to Google's Privacy Policy
- ElevenLabs (optional text-to-speech in the native mobile app) — subject to ElevenLabs' Privacy Policy
- Cloudflare (web hosting and CDN) — subject to Cloudflare's Privacy Policy
4. Data retention
Your account data (email, device names) is retained as long as your account is active. Signaling data is transient and removed after each connection attempt. If you delete your account, we will remove your data from our systems within 30 days.
5. Security
WebRTC connections between your devices are encrypted end-to-end by the WebRTC standard. Firebase data is protected by Firebase Security Rules, which restrict access to your own data only. We use industry-standard practices to protect your account.
6. Children's privacy
Superlite is not directed at children under 13. We do not knowingly collect personal information from children under 13.
7. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.
8. Contact
Questions about this policy can be sent to [email protected].