SAMMURAI
Privacy Policy
Last updated: 2 November 2026
This Privacy Policy explains what personal information Sammurai collects, how it is used, when it is shared, how long it is kept, how you can delete it, and what rights and choices you have. It should be read with our Terms of Service, AI Policy and Cookie Policy.
1. Who We Are
Sammurai, Corp. ("Sammurai", "we", "our" or "us"), 10 Maple Street, Port Washington, NY 11050, United States, makes Sammy, an AI companion you talk with in a recorded video conversation called a Sit Down. Sammy is available in our iPhone app, our Android app, our web app at app.sammurai.ai, and through our website at sammurai.ai.
For privacy questions, data requests, support, security and legal matters, write to info@sammurai.ai.
2. Who Can Use Sammurai
Sammurai is intended only for adults aged 18 and over. We ask for your date of birth when you create an account, and we do not create an account for anyone under 18. Sammurai is not directed to children, and we do not knowingly collect personal information from anyone under 18.
Sammurai is currently offered only to people in the United States. We use the IP address your device connects from to limit access to the United States.
3. What Sammurai Does
Sit Downs: recorded video conversations with Sammy.
Moments: clips you choose from a Sit Down.
Groups and sharing: you choose who can see each Sit Down: only you (Private), a group you belong to, or Public (anyone signed in to Sammurai). You can share a Sit Down with a group, or share a link to it, which makes it Public. People who can see a Sit Down can also watch it live while it is happening.
Your check-in: the line Sammy opens with.
Notifications in the app, on your phone and, if you choose, by email.
Sammy Plus: a paid monthly subscription.
4. Information We Collect
4.1 Information you give us
Account details: your name and email address (from your sign-in provider), your date of birth, a profile picture if you upload one on the website, and your settings and choices, including your answers on our consent screens.
What you create: your Sit Downs (Section 4.5), their titles and thumbnails (including a thumbnail image you upload on the website), the Moments you choose, and the groups you create or join.
The email address of anyone you invite to a group who is not yet on Sammurai. We use it to send them the invitation, which names you (by first name) and the group.
Reports you make, with any details you add, and the people you block.
Emails you send us.
We collect your date of birth to confirm that you are 18 or over. Section 8 explains its other uses.
4.2 Information from Google or Apple sign-in
Sammurai lets you create and access your account with Google Sign-In or Sign in with Apple. Depending on the permissions you give, we may receive basic account information such as your name, email address (with Sign in with Apple this may be a private relay address), the account identifier, and, from Google, profile information made available by Google. We never receive your Google or Apple password.
If you separately choose to connect Google Calendar, we may also access calendar information as described in Section 5.
4.3 Information collected automatically
Your IP address and browser or app details (user agent), recorded with your sign-in sessions, with each consent you give, in our security log of account changes, and in our server, firewall and load-balancer logs. We use them for security, to keep a record of your consents, and to limit access to the United States.
Device and app information: platform (iPhone, Android or web), app version, and, if you allow notifications, a push-notification token together with your device's name (on iPhone this can be the name you gave your phone).
A record of actions you take in the service, such as starting a Sit Down (Section 10).
On the Android app, usage information sent to Google Analytics for Firebase (Section 10).
4.4 Information from other people
Other people on Sammurai may invite you to a group (including by your email address), share a Sit Down with you, block you, or report you or something you shared.
4.5 Sit Down recordings
When you have a Sit Down, Sammurai records your camera and microphone for the whole conversation, together with a written transcript of what is said. There is no unrecorded kind of Sit Down. On the website, we ask for your agreement on screen before your first Sit Down. In the iPhone app, the permission prompt for your camera says: "Sammurai uses your camera for a Sit Down, so the conversation is recorded as you having it." In the Android app, Android's own prompt asks for permission to use your camera and microphone. By starting a Sit Down, on the website or in the app, you agree to it being recorded. You choose who can see each Sit Down; it is private unless you choose otherwise. You can watch it back and choose clips from it.
A recording is kept while your account exists, until you delete that Sit Down or your account. When you delete a Sit Down, its recording, transcript and clips are deleted within 30 days. When you delete your account, your Sit Downs, their transcripts and clips are removed at once, and their video files are deleted from storage straight afterwards. Copies in our database backups expire within 35 days. A Sit Down that ends under our crisis protocol is deleted sooner (Section 7).
4.6 Your face and camera
Sammurai uses your camera only to record a Sit Down, with your agreement, so your face appears in that video recording as it would in any video call. Sammurai does not collect face data: it does not use Face ID, face geometry, facial landmarks, depth or face-recognition technology, and it does not analyse your face or your expressions in the video. The video is never sent to Amazon Bedrock or any other AI service, and it is not shared with any third party.
Recordings, and the still frames used to choose a thumbnail, are stored encrypted in Sammurai's own private storage on Amazon Web Services in the United States, and are shown only to you and the people you choose to share them with. They are kept and deleted as described in Section 4.5. A profile picture you choose is shown to other users with your name and is deleted when you delete your account.
4.7 What Sammy learns about you
Sammy keeps what she learns about you from your Sit Downs only while learning for your own Sammy is turned on for your account. It is off unless you turn it on. While it is off, Sammy's memory keeps nothing from your Sit Downs that can be linked to you.
When it is on, what she keeps can include what you tell her in your own words, the people and parts of your life you mention, her read of how you think and feel (including the feeling she noticed in what you said), and your age. It is kept on Sammurai's own servers, linked to your account, and used only for your own conversations with her. Her individual memories are deleted after 360 days at most. Her running summary of you is deleted 360 days after it was last updated, and your personal LASM model and your age are kept until you delete your account. When you delete a Sit Down, the memories she kept from it are deleted. When you delete your account, everything she learned about you is deleted.
4.8 Payments
If you buy Sammy Plus in the iPhone or iPad app, Apple handles the payment and we receive a record of the transaction, not your card details. If you buy it on the website, Stripe handles the payment on its own page; we give Stripe your email address and an account reference, and we receive a customer and subscription record and invoices, not your card number. Sammy Plus cannot be bought in the Android app.
5. Google Account and Google Calendar
Sammurai uses your Google Account for sign-in if you choose Google. Separately, you can choose to connect Google Calendar so that your check-in fits your day.
5.1 The connection is optional and separate from sign-in
Calendar access is never requested when you sign in. It is requested only if you choose to connect Google Calendar, from your check-in or Settings, and you can use Sammurai without it.
5.2 What we read
We ask Google for read-only access to your calendar (the calendar.readonly permission). We use it only to call Google's free/busy service for your primary calendar, for today and tomorrow. That service returns only the start and end times of busy periods, never event titles, descriptions, attendees or locations.
5.3 What we use it for
Only for your check-in. From the busy periods we work out how many things are on your calendar today and how long they take in total, so that the line Sammy opens your check-in with fits your day. That count, described in words with the time of day, is sent to Amazon Bedrock as Section 5.8 describes, and only after you have allowed AI on the consent screen.
5.4 What we store
For each day, a count of busy periods and their total length, deleted after seven days. The count also stays with that day's check-in line while your account exists. Your calendar itself is never stored. The authorization token Google gives us is stored encrypted.
5.5 How to disconnect
You can disconnect Google Calendar in Settings. We then stop reading your calendar and delete the stored busy counts at once. The encrypted token stays stored, marked as disconnected, until you delete your account; disconnecting in Sammurai does not revoke our access on Google's side. To remove Sammurai's access at Google, use your Google Account permissions page at https://myaccount.google.com/permissions.
5.6 Effect of account deletion
When you delete your account, we delete the calendar connection, including the stored token, and the busy counts from our database. This does not revoke our access on Google's side; you can do that on the Google page above.
5.7 Limited Use commitment
Sammurai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy and the Google Workspace User Data and Developer Policy, including the applicable Limited Use requirements.
Google API data is not sold, used for advertising, transferred to data brokers or information resellers, used for credit or lending decisions, or used to create, train, or improve generalized artificial intelligence or machine-learning models. Human access is limited to circumstances permitted by Google policies, such as with your affirmative permission, for security and abuse investigation, to comply with law, or for appropriately aggregated internal operations.
5.8 How Sammy's AI works
Sammy runs on S.A.M., Sammurai's own AI. S.A.M. is Sammy's brain: it runs on Sammurai's own servers, reads the feeling in what you say, decides what she asks, and keeps what she learns about you there. It includes AEON, which reads the emotional tone of a conversation and coordinates the other parts, and LASM, a personal model that belongs to your account alone and learns how to talk with you over time. Your LASM is never shared with or used for anyone else.
Speech recognition and Sammy's voice also run on our own servers, using open-source models we operate ourselves. Your audio is never sent to a speech, voice or AI provider.
To put Sammy's replies into words, and to help understand what you say (for example, to notice if you might need help), S.A.M. sends some text to Amazon Bedrock, an AI service run by Amazon Web Services (AWS), using Amazon's Nova model. It is called from Sammurai's own AWS account in the United States. What is sent:
what you say in a Sit Down, as text;
your first name;
what Sammy has learned about you from earlier Sit Downs;
for your check-in, the time of day and how many events are on your calendar — never what they are.
Never sent: your camera video, your voice, your email address or your date of birth.
Nothing is sent until you allow it on the consent screen in the app, and Sammy cannot talk with you without it. You can withdraw it at any time in Settings; Sammy then stops talking with you until you allow it again. Under AWS's terms for Amazon Bedrock, the text is not used to train Amazon's models and is not shared with anyone else. Sammurai does not use any other outside AI service.
5.9 Google user data and AI
Information received from Google APIs, including anything derived from your Google Calendar, is never used to create, train or improve any AI or machine-learning model shared across users. Sammy's shared models are trained only on data we create ourselves, not on anyone's conversations. Information from your Google Calendar is not kept in Sammy's memory or your LASM. Google user data is never sent to any AI provider that trains on it.
6. Sensitive Information
Talking with Sammy can involve your feelings, your relationships, your health and other sensitive parts of your life, and so can the recordings and transcripts of your Sit Downs. S.A.M. reads the emotional tone of what you say, and checks what you say for signs that you might be in danger (Section 7). We use this information only to hold your Sit Downs, to let Sammy talk with you, to remember what matters to you when learning is on, and to keep people safe. We do not sell it or use it for advertising.
Sammy is an AI, not a therapist. Sammurai is not a medical device, a healthcare service or an emergency service, and it is not a substitute for professional mental-health care.
7. Safety and the Crisis Protocol
Everything you say in a Sit Down is checked for signs that you might hurt yourself or that someone is hurting you. If a check finds such a sign, the Sit Down ends, Sammy gives you the 988 number and your screen shows crisis lines; the Sit Down becomes Private, its shared links stop working, and Sammy forgets anything she learned from it. Its recording, transcript, clips and title are permanently deleted, normally within about 75 minutes and in any case within 24 hours. We keep a record, with nothing that was said in it, that the Sit Down took place, when and for how long, and we count how often crisis help is shown, without any name or account. The AI Policy sets out the full protocol.
8. How We Use Information
To run Sit Downs, Moments, groups, sharing, live watching, your check-in and notifications.
To create and secure your account, keep you signed in, and limit access to adults in the United States.
To remember what matters to you, only while learning is on (Section 4.7).
To keep people safe, review reports, and enforce our Terms of Service.
To bill Sammy Plus.
To keep the service working and understand how it is used (Section 10).
To answer your emails and requests.
To comply with law, protect rights and safety, and defend legal claims.
Your date of birth. Besides confirming that you are 18 or over, your date of birth is sent to S.A.M. on our own servers, which works out your age from it. Your age is used to check that you are an adult before Sammy may learn anything about you, and to choose how far back one of Sammy's questions reaches (for example, "five years ago"). When learning is on, your age (not your date of birth) is kept with what Sammy learns, and an age range (for example, 31 to 40) is used to compare how well her questions work. Your date of birth is never sent to Amazon Bedrock. If you enter it in the web app, your browser also remembers it on that device (see the Cookie Policy).
Sammurai makes no decision about you by automated means that has legal or similarly significant effects. The crisis protocol (Section 7) ends and deletes a Sit Down automatically, as the AI Policy explains.
9. Who We Share Information With
We do not sell your personal information and do not share it for cross-context behavioral advertising. We share it only as described here.
Amazon Web Services: hosts and stores everything Sammurai holds, in the United States; receives the text described in Section 5.8 through Amazon Bedrock; and sends our emails through Amazon SES (group invitations, and notification emails if you turn them on).
Google: Google sign-in, if you use it; Google Calendar's free/busy service, if you connect it; Google Analytics for Firebase, from the Android app (Section 10); and delivery of notifications to Android phones and to Chrome browsers.
Apple: Sign in with Apple, if you use it (when you delete your account, we ask Apple to revoke Sammurai's sign-in); App Store purchases; and delivery of notifications to iPhones and to Safari.
Expo: passes our notifications to Apple's and Google's notification services. It receives your push token and the notification's text. That text can include a person's first name, a group's name, a Sit Down's title, or the label of a Moment, which can quote the words of the person who said them.
Your browser's push service: if you allow browser notifications in the web app, they are delivered through the push service of your browser's maker.
Stripe: your email address, an account reference and your subscription, if you buy Sammy Plus on the website.
Our email providers: emails you send to info@sammurai.ai are held in a mailbox run by Microsoft, and reports you make in the app are emailed to our team's mailboxes run by Google.
Other people on Sammurai: your name and profile picture, and the Sit Downs and Moments you choose to share, according to the visibility you choose (Section 3).
Legal and safety: authorities or others where the law requires it, to enforce our Terms, or to protect someone's rights or safety.
A successor: a buyer of Sammurai or its assets, in a merger, acquisition or sale, with notice to you.
We give each provider only what it needs to provide its service. We do not use any advertising, crash-reporting or third-party moderation service.
10. Analytics and Usage Records
Our own usage records. Our servers record actions in the service, such as a Sit Down being started, with the time, the platform, the app version and, in the web app, a visit identifier. These records are linked to your account, run for everyone who uses the service, and stay on our own servers. They are kept for 24 months and then reduced to counts that identify no one. When you delete your account, they are separated from it.
Android app. The Android app uses Google Analytics for Firebase, provided by Google, from the time it is first opened, to understand how the app is used: for example which screens are opened, signing in or signing up, and starting a Sit Down, together with device type, app version and approximate location. We never send Google your name, your email address, your account identifier or anything you say, and advertising-identifier collection is turned off. The Android app available today has no switch for this inside the app, and it does not read the analytics choice you can make on the website's Privacy choices screen.
iPhone app. The iPhone app includes Google Analytics for Firebase, but collection is turned off and nothing in the app turns it on, so it sends no usage data to Google Analytics.
Website and web app. Our website and web app do not run Google Analytics or any other third-party analytics.
We do not use analytics for advertising. The Cookie Policy lists the cookies and similar technologies we use.
11. Where Information Is Stored
Sammurai stores your information in the United States, on Amazon Web Services (us-east-1). Members of our team may access it from outside the United States.
12. How Long We Keep Information
Account and profile: while your account exists.
Sit Down recordings, transcripts, clips and thumbnails: while your account exists, until you delete the Sit Down or your account (Section 4.5).
A Sit Down that ended under the crisis protocol: its content is deleted within 24 hours (Section 7).
What Sammy learned (only while learning is on): as Section 4.7 describes.
Calendar busy counts: 7 days.
Your check-in lines: while your account exists.
Sign-in sessions, with IP address and browser or app details: until 7 days after they expire (a session lasts up to 30 days), or at once when you delete your account.
Usage records and records of a deleted Sit Down (such as when it took place and how long it lasted): 24 months, then reduced to counts.
Records of your consents, with IP address and browser or app details: kept, including after you delete your account, as proof of what was agreed.
Invoices: kept, including after you delete your account.
Security log of account changes: while your account exists; its details are blanked 30 days after you delete your account.
The record that a crisis Sit Down took place, with nothing that was said in it: while your account exists. Crisis help counts, which have no name or account: kept.
Database backups: up to 35 days. Sit Down recordings are not backed up.
Server and firewall logs, including IP addresses: 30 days. Load-balancer logs: 90 days.
13. Deleting Your Account
You can delete your account in the app or the web app, from My Account (Delete my account). If you cannot sign in, you can use the deletion page at app.sammurai.ai/delete-account, which is also linked from our Google Play listing, or email info@sammurai.ai from the address on your account. Account deletion is permanent and is not the same as deactivation.
Deleting your account removes your profile and profile picture, date of birth, Sit Downs and their recordings and clips, groups you own and your membership of other groups, notifications and settings, your calendar connection, check-in lines, sign-in sessions and sign-ins, and your web-app notification subscriptions. Sammy's brain is told to forget everything she learned about you, and the request is retried if it does not confirm. A Sammy Plus subscription bought on the website is cancelled at once; one bought through the App Store is not, and must be cancelled with Apple (see the Terms of Service).
What remains after deletion:
one account row with no name, email address, picture, date of birth or way to sign in, so that the security log and other people's group Sit Downs still make sense;
the security log, whose details are blanked 30 days later;
records of your consents, and invoices;
reports you made or that concern you, and blocks between you and other people;
your phone's push token and device name, and records of which shared Sit Downs you opened;
if you joined through a link that carried campaign tags, a record of those tags;
usage records, separated from your account, until they are reduced to counts;
copies in database backups until they expire, within 35 days;
Stripe's own customer record, if you subscribed on the website, which Stripe keeps under its own policies.
14. Your Rights and Choices
You can see and change your profile, choose who sees each Sit Down, delete any Sit Down, turn Sammy's AI permission off in Settings, turn notifications off, disconnect Google Calendar, and delete your account.
Depending on where you live, you may also have the right to ask what personal information we hold about you, to get a copy of it, to have it corrected or deleted, and not to be treated differently for using these rights. Several United States state privacy laws provide rights of this kind. To make a request, email info@sammurai.ai. We may need to verify your identity before acting on a request. You may use an authorized agent where the law allows it. If we decline a request, we will explain why.
15. Security
Your information is encrypted in transit and at rest, recordings are kept in private storage, only a small number of named staff can reach our systems, and every sign-in to our AWS console requires multi-factor authentication. Sit Downs are not end-to-end encrypted. No system is completely secure. The Security Policy describes our controls.
16. Children
Sammurai is for adults only. If we learn that an account belongs to someone under 18, we will close it and delete its personal information. If you believe a person under 18 has given us personal information, contact info@sammurai.ai.
17. Do Not Track and Global Privacy Control
Our website and web app run no third-party analytics, advertising or cross-site tracking, so there is nothing for a Do Not Track or Global Privacy Control signal to turn off there.
18. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top shows when it was last changed. If a change is material, we will give you notice through the Service. If we change how we use information received from your Google Account, we will ask for your consent before the new use begins.
19. Contact Us
Sammurai, Corp., 10 Maple Street, Port Washington, NY 11050, United States.
Privacy questions, rights requests, complaints and support: info@sammurai.ai