Privacy policy

Effective October 4, 2026

Lazy Susan is a family calendar for a kitchen TV, with a phone app for adding things to it. It is run by Kara Burkhalter, an individual in Wisconsin. In this policy "we" and "us" mean Kara Burkhalter, and "Lazy Susan" means the phone app, the TV app and the website at lazysusan.app.

Lazy Susan is in a private beta. It is offered only to people in the United States who are 18 or older.

Questions about anything here: support@lazysusan.app.

What we collect

Your account:

• Your email address and your name.
• How you sign in: Google, Amazon, or an email address and password.
• If you sign in with Google or Amazon, they tell us your name and email address and nothing else. We don't ask Amazon for your postal code.
• If you sign in with a password, it is held by our sign-in provider, Amazon Web Services. It never reaches our own code or database, and we can't see it.

Your household:

• The household's name and time zone.
• The names of the adults in it.
• The first names of any kids you add, and a color for each. We don't ask for a child's birthdate, email address or photo, and kids don't have accounts.
• The email address of anyone you invite, which we use only to send that invite.

What you put in the app:

• Activities, meals, to-dos and shopping lists.
• Recipes you save, including the address of the page a recipe came from and one photo copied from that page.
• Photos you upload for the TV. Your phone shrinks each photo and removes its location data before it is uploaded.
• Your theme choices.

Your devices:

• For each TV you add: the name you give it, the date it was added and the date it was last used.
• A sign-in token stored in your phone's browser so you stay signed in, and a token on each TV that ties it to your household.

Records we keep to run the service:

• A list of changes that affect who can reach a household: who was invited, joined, left or was removed, which TV was added or removed, and when data was downloaded or deleted. Each entry has a name and a date. It has no IP address and no location.
• Technical logs that record that a request was made and whether it worked. They don't include what you typed, your email address or your sign-in tokens.

As with any website, our servers see your device's IP address when it connects. We don't save it to your account or to the list of changes above.

What we don't do

• We don't sell personal information.
• We don't share it for advertising.
• We don't show ads.
• We don't use analytics or tracking tools, and we don't set advertising or tracking cookies. The sign-in page uses only the cookies it needs to sign you in.
• We don't send marketing email.

Who can see your information

• Every adult in your household can see and change everything the household shares: the calendar, lists, recipes, photos, and the names of adults and kids.
• A TV you add shows the household's calendar, lists, recipes and photos to anyone who can see the screen.
• The household's owner can see the list of changes described above and can remove adults. Any adult in the household can add or remove a TV.
• No one outside your household can see your household's information through the app.
• We can reach the stored information in order to run the service. We look at a household's information only when we need to: to answer a support request from that household, to fix a problem, to keep the service secure, or to comply with the law.

Companies that handle information for us

• Amazon Web Services hosts the app, stores its data in the United States, runs sign-in and sends our email.
• Google and Amazon take part only if you choose to sign in with them. Their own privacy policies cover what they do.
• DreamHost hosts the support mailbox. Email you send to support@lazysusan.app is stored there.

When you save a recipe from a link, our server fetches that page. The recipe's website sees a request from our server and not from your device.

We give information to others only as described here, or when the law requires it.

Email we send

• Codes to confirm your email address.
• Password reset messages.
• Invitations, sent to the address an adult in a household typed.

Those are the only kinds, apart from a notice if a security problem affects your information. Replies go to support@lazysusan.app.

How long we keep it

• Your account and your household's information stay until you delete them.
• An invitation that isn't accepted expires after 7 days.
• The list of changes keeps each entry for 90 days.
• A file made by "Download my data" is deleted after 24 hours.
• Technical logs are kept for 30 days.
• Backups of the database are kept for up to 35 days. Information you delete can remain in a backup until that backup expires.

Your choices

In the phone app, under Settings and then Your data:

• Download my data gives you a copy of your household's information and photos.
• Delete household data removes the calendar, lists, recipes and photos and keeps the household itself.
• Delete account removes your login. If you are the household's owner and its only login, it removes the household and everything in it.

Deletion happens right away and can't be undone, apart from the backups and logs described above.

If you no longer have the app, go to app.lazysusan.app/#delete-account, or write to support@lazysusan.app from the email address on your account.

Children

Lazy Susan is for adults. Accounts are for people 18 and older, and the service is not directed to children. A parent or guardian may add a child's first name and a color so that the household's calendar can show who an activity is for. We collect nothing from children directly. If you believe a child has given us personal information, write to support@lazysusan.app and we will delete it.

Security

• Everything travels over an encrypted connection.
• Sign-in is handled by Amazon Web Services, and passwords never reach our code.
• Every request is checked to confirm it comes from a member of the household it asks about, or from a TV that household added.
• Photos are stored privately and shown through links that expire.
• The codes and tokens that grant access are stored in scrambled form.

No service can promise perfect security. If we learn of a breach that affects your information, we will tell you.

Where information is processed

Lazy Susan is offered in the United States, and its information is stored and processed there.

Changes to this policy

If this policy changes, we will post the new version on this page with a new effective date and show a notice in the app. For a change that affects how your information is used, the notice will appear before the change takes effect.

Contact

Kara Burkhalter
support@lazysusan.app