Privacy Policy

At Super, your privacy matters, a lot. We also believe strongly in transparency. This policy explains what we collect, how we use it, who we share it with, how long we keep it, and how you can manage or delete your data.

1. What We Collect and Why

Account Information

Your name, email, avatar, and organization membership (from our identity provider).
Why: For sign-in, showing your profile, determining your active organization, and authorizing API calls.

Content You Create in the App

Spaces, dashboards, zones, alerts: Names, configuration, and content you enter.
Why: To provide core features and enable collaboration.

Chat conversations: Your prompts and assistant responses.
Why: To answer questions, show history, and improve product quality.

3D scans: Photos, camera parameters, and other data captured during a space scan.
Why: To generate your 3D model and support features like zone editing.

Device and App Metadata

Push notification token: Your device token.
Why: To send you any alerts that you have configured.

Usage analytics (PostHog): Event names, app usage details, OS version, device model, and other standard metadata.
Why: To improve your experience. We do not use IDFA or track you across third-party apps or websites.

Puck Devices

On-device processing: Puck cameras process video locally; frames are never sent to Super servers.

Metadata we may receive: Puck identifiers, pose data, and other details needed to configure spaces and keep devices in sync.

Bluetooth Pairing

When provisioning a Puck, the SSID and PSK you enter are sent over encrypted Bluetooth directly to the device.
We do not store your Wi-Fi credentials on Super servers.

2. How We Collect Data

• Directly from you when you sign in, create content, chat, or scan a space.

• From your device when you grant permissions:

  • Camera (for scans and Puck detection)

  • Bluetooth (to discover and provision Pucks)

  • Notifications (if enabled on iOS)

• Automatically through first-party analytics (PostHog).

• Via our APIs when the app syncs or retrieves content (e.g., boards, scans, chat history).

3. How We Use Your Data

• Provide and improve Super’s features, reliability, and support.

• Generate 3D meshes from submitted photos and poses.

• Communicate with you about updates, support, and notifications you opt into.

• Prevent fraud and protect accounts and systems.

• Understand product usage and guide feature development.

• Power AI features: prompts and responses are processed on our servers and may be relayed to model providers on your behalf. We use de-identified, aggregated data to improve model quality and safety.

• We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Data Sharing and Third-Party Processors

We do not sell your personal information.
We share data only with trusted processors who follow equal or stronger privacy protections and use your data solely according to our instructions.

Our key processors include:

• Clerk: Authentication and session management

• PostHog: First-party analytics (no advertising use)

• Amazon Web Services: Storage and compute for scans and app content (uploads use short-lived signed URLs)

• Apple Push Notification service (APNs): Delivery of push notifications

• OpenAI: Processing of prompts. OpenAI does not use your prompt data for training.

These providers may process data in their regions of operation. We require appropriate data protection terms in all contracts.

5. What Stays on Device

• Puck camera footage (processed entirely on-device)

• Wi-Fi credentials used during Puck provisioning

6. Your Choices and Controls

• Permissions: Revoke Bluetooth, Camera, or Notifications access in iOS Settings.

  • Bluetooth access is only required to provision a Puck.

  • Camera access is only required to conduct a 3D Space scan.

  • Notifications access is only required for your alerts.

• Chat: Delete individual conversations in the app.

• 3D Scans: Delete your current scan in the app.

• Analytics: Request to opt out of analytics collection.

• Account information: Request an account deletion.

• Organization information: Request an organization deletion (you must be an admin of your organization).

To make these requests, email contact@addsuper.com from the email associated with your account. We’ll confirm and act promptly.

7. Data Retention

• Account and app content: Kept while your account is active.

• 3D scans: Retained until you delete them.

• Analytics: Retained for a reasonable period to understand trends.

When you request deletion, we delete or de-identify your data unless we must retain it for legal, security, or operational reasons.

8. SMS Messaging (Consent, Use, and Sharing)

If you choose to receive SMS messages from Super (for support, alerts, or service-related updates), we collect and process the following data:

What We Collect

• Phone number you provide.

• Consent records, including the date, time, method, and context in which you opted in to receive SMS messages.

• Message metadata, such as delivery status and timestamps (we do not use SMS content for marketing profiling).

How We Use This Data

• Send you the SMS messages you have opted into, such as support responses, service notifications, or account-related updates.

• Confirm, manage, and document your consent and any opt-out requests.

• Provide customer support and improve reliability of our messaging services.

• Comply with legal and carrier requirements.

Consent and Opt-Out

• SMS messages are sent only after you provide explicit consent.

• You can opt out at any time by replying STOP to any message or by contacting us at contact@addsuper.com.

• After opting out, we may send a final confirmation message to acknowledge your request.

Data Sharing

• We do not sell SMS-related personal data.

• We share phone numbers, consent records, and message metadata only with SMS service providers and carriers (such as messaging gateways and telecom providers, including Intercom) strictly to deliver messages and meet compliance obligations.

• These providers act as our processors and are contractually restricted from using this data for their own purposes.

We retain SMS data only as long as necessary to provide the service, maintain consent records, and meet legal or regulatory requirements.

9. Security

We use industry-standard protections, including encrypted transport (TLS) and platform-secure storage (like Keychain for device tokens). Access is limited to personnel and processors who need it to operate the service.

10. Children’s Privacy

Super is not directed to children under 13, and we do not knowingly collect data from them.

11. Changes to This Policy

We may update this policy as our product evolves. We will post changes here and update the Effective Date. If updates materially affect your rights, we’ll notify you in the app or by email.

12. Contact Us

For questions or requests—including data access, correction, deletion, portability, analytics opt-out, or consent withdrawal—email contact@addsuper.com.