Privacy Policy

Last updated: August 30, 2026

What this is

Sammie is an AI companion service. When you use Sammie, we collect information to make the service work and to improve your experience. This policy explains what we collect, how we use it, and your rights.

Who we are

Sammie is operated by Sammie AI, LLC. For privacy-related questions or requests, contact us at hello@talktosammie.com.

What we collect

  • Account information — your email address and name, provided when you sign up.
  • Conversation content — the messages you send to Sammie and Sammie's responses. These are stored so your conversations continue where you left off.
  • Memory facts — personal details that Sammie learns about you over time from your conversations (for example, your hobbies, where you live, your family). You can view and delete these at any time from the sidebar.
  • Mood check-ins — if you use the mood tracking feature, your mood entries and any notes you add.
  • Feedback — ratings or comments you submit about the service.

Legal basis for processing (EU/UK users)

If you are in the European Union or United Kingdom, we process your personal data on the following legal bases:

  • Contract — processing necessary to provide the service you signed up for (your conversations, account data, billing).
  • Legitimate interests — understanding how the service is used so we can improve it, and protecting the security of the service.
  • Consent — analytics and advertising cookies, which you can accept or decline via the cookie banner.

How we use it

  • To provide and improve the Sammie service.
  • To give Sammie context about you so conversations are more personal and relevant.
  • To authenticate your account securely.
  • We do not sell your personal information to third parties.
  • We do not use your conversations to train AI models. Sammie's current paid Replit AI Integration has model training and input/output logging disabled.

Cookies and tracking

Sammie uses cookies and similar tracking technologies for the following purposes:

  • Essential cookies — required for the service to function (authentication, session management). These cannot be declined.
  • Analytics and advertising technologies — Google Analytics and Google Ads help us understand how people find and use Sammie. In listed European regions, Google analytics and advertising storage are denied by default until you accept. In other regions, Google tags may operate before you make a choice. Selecting "Decline" updates Google consent settings to denied. Your choice is stored in your browser's local storage; clearing local storage resets it.

Anonymous page-view analytics

In addition to Google analytics described above, Sammie records a minimal, cookieless page-view event when the application initially loads. This event contains a timestamp, the Sammie site and page path, your browser's IANA timezone, an approximate country, an anonymous session identifier stored in sessionStorage that disappears when you close the tab, and a referrer URL truncated to 500 characters. If timezone information is not enough to derive a country, the server may use the request IP address transiently for country lookup; the IP address is not stored in the page-view table. These page-view records are deleted after 90 days.

Third-party services

We use the following third-party services to operate Sammie. Each has its own privacy practices:

  • Clerk — handles account creation, authentication, and sign-in. clerk.com/privacy
  • Replit — provides application hosting, database and service infrastructure, and the paid AI Integration used to send requests to OpenAI. Replit states that training and input/output logging are disabled for paid AI model endpoints. replit.com/privacy-policy
  • OpenAI (through the Replit AI Integration) — processes conversation context and other content described under "AI processing" below. openai.com/privacy
  • Stripe — handles subscription billing. Payment-card details are stored and processed by Stripe rather than Sammie. Sammie stores limited Stripe customer, subscription, and transaction information needed to provide and manage paid access. stripe.com/privacy
  • SendGrid — processes your email address and limited message content when we send account, service, and lifecycle emails. twilio.com/legal/privacy
  • Google Analytics / Google Ads — used to measure traffic and advertising effectiveness under the regional consent defaults and browser choice described above. policies.google.com/privacy

Data retention

We retain account-linked application data while your account is active. When an account-deletion request completes, Sammie immediately deletes active application records associated with your account, including conversations, messages, memory facts, mood entries, feedback, profile information, and the local account record.

Account deletion also attempts to delete the Clerk identity and cancels an active Stripe subscription. Stripe billing and transaction records, Clerk records, AI-provider records, SendGrid records, infrastructure logs, and backups are controlled by those providers or by separate retention processes. They may remain for the provider's applicable retention period, legal obligations, fraud prevention, dispute handling, security, or backup rotation. Sammie cannot require an independent provider to delete records sooner than its applicable obligations and retention practices allow.

Cookieless page-view records are deleted after 90 days. Aggregate page-view statistics may be calculated from those records while they are retained.

AI processing

Sammie sends content to AI models through the paid Replit AI Integration. Depending on the feature you use, that content may include the full current conversation history, stored memory facts, your name, and timezone-derived context.

AI processing is used to:

  • generate conversational responses and maintain conversation context;
  • generate conversation titles;
  • extract and classify memory facts that support future conversations; and
  • generate spoken audio from text when you use text-to-speech.

The current paid Replit AI Integration has model training and input/output logging disabled. This statement describes the configuration of Sammie's current paid AI integration and is not a claim about unrelated AI products or services.

Your rights

Depending on where you live, you may have rights to access, correct, delete, receive a portable copy of, restrict processing of, or object to processing of your personal data. You may also withdraw consent where processing relies on consent.

  • In-app controls — view and delete conversations and memory facts, or use the self-service account-deletion control below.
  • Email requests — request access, correction, portability, restriction, objection, or assistance with deletion by emailing hello@talktosammie.com. Sammie does not currently provide an automated data-export, restriction, or objection tool.
  • Google consent — accept or decline through the cookie banner. Clearing this site's local storage resets the stored choice so the banner can be shown again.

EU and UK users may also lodge a complaint with your local data protection supervisory authority. In the EU, find your authority at edpb.europa.eu.

View and manage your data

  • View and delete memory facts — open the sidebar and select "What Sammie knows" to see and remove any stored facts.
  • Delete conversations — you can delete any conversation from the sidebar. This permanently removes the conversation and all its messages.

Privacy-oriented design choices

Sammie limits page-view records to a small set of fields, does not store IP addresses in the page-view table, uses a tab-scoped anonymous session identifier, and deletes page-view records after 90 days. Account, conversation, and memory endpoints require authentication and check that requested records belong to the signed-in user. The service also applies request rate limits and lets users delete individual conversations and memory facts.

Data security

The public Sammie service uses HTTPS for data in transit. Application controls include authenticated access to account-linked features, ownership checks on conversations and memory facts, input validation, and rate limiting on selected endpoints. No system is perfectly secure, and we cannot guarantee absolute security.

Not medical advice

Sammie is a companion, not a medical professional, therapist, or crisis service. Nothing Sammie says should be treated as medical, mental health, legal, or financial advice. If you are in crisis, please contact emergency services (911 in the US) or a crisis line (988 Suicide & Crisis Lifeline in the US).

Contact

Questions about this policy or requests related to your data can be sent to: hello@talktosammie.com

Delete your account

Deleting your account permanently removes your active Sammie application data and attempts to delete your Clerk identity and cancel an active Stripe subscription. If either provider action fails, Sammie may need to resolve it separately. Provider records, billing records, logs, and backups may remain under the separate retention practices described above. Account deletion cannot be undone.

Related terms

Use of Sammie is also governed by our Terms of Service.