Legal

Privacy Policy

Effective date: October 1, 2026

Overview

SUMMARU is a mindfulness app for breathing, sound, and meditation. We built it to collect as little as possible: no advertising, no analytics, no behavioral tracking.

Breathing, sounds, and the daily scroll work without an account. Talking with Maru asks you to sign in first, so that what Maru remembers about you — and your conversations, journal, and practice history — stays with you when you change phones. This policy explains what stays on your device, what is saved to your account when you sign in, and what is sent to the AI services that power Maru.

Your account (optional)

If you sign in with Google, we receive your email address and the display name on your Google profile. We never receive your Google password. We use your email only to identify your account — we do not send marketing email.

If you never sign in, no account is created and nothing described in the next section leaves your device.

What is saved to your account

When you are signed in, the following is stored on our database (Supabase) so it can follow you to a new device:

  • Your email address and display name
  • Meditation sessions — date, duration, type, the mood you selected, and the sound category
  • Journal entries you write
  • Your conversations with Maru — both your messages and Maru's replies
  • Replies you marked with a heart
  • Favorite tracks and their order
  • Your subscription plan and how much of your monthly allowance you have used
  • The optional profile you fill in for Maru — gender, build, whether you have a partner, the number, ages and gender of your children, a short personal note, and the answers you gave when you first opened the app
  • Maru's memory — short notes Maru keeps about you from your conversations (see Maru's memory below)

Each account can only read its own rows. This is enforced by the database itself (row-level security), not only by the app.

These records are stored in East US (North Virginia). If you use SUMMARU from another country, your data is transferred to and stored in that region.

Your profile

The profile is optional and you can leave every field blank. It is used for one thing: so Maru speaks to your life rather than to a stranger. It is sent to the AI provider as context when you use an AI feature (see below).

If you are not signed in, the profile stays on your device and disappears when you uninstall the app. If you are signed in, it is also saved to your account so that Maru still knows you on a new phone. It is readable only by your own account, and deleting your account deletes it.

You can change or clear any field at any time under Me → Maru profile. When a different account signs in on the same device, the profile, the visualization card and the other personal items left on that device are cleared first, so one person's answers are never shown to the next.

What stays on your device only

Some things are never sent to our database, whether or not you sign in:

  • App settings: theme, language, reminder time, background sound preferences
  • The colour you pick for the daily scroll, and cached text Maru has already written for you

What is sent to AI services

1. Chat with Maru

Your messages are sent to our server (summaru.app) and forwarded to Anthropic to generate a reply. To personalize it we include context alongside your message: your optional profile, the notes in Maru's memory, and a brief summary of your recent moods and meditation sessions. Anthropic processes this under its own policy at anthropic.com/legal/privacy.

Maru's memory

So that Maru can remember you from one conversation to the next, when a conversation ends it is sent to our server and Anthropic writes or updates a few short notes — for example where you live, your family, your work, routines that help you, and upcoming dates you mentioned. Maru reads these notes in later conversations.

Maru does not note health conditions, religion, race or ethnicity, sexual orientation or political views unless you explicitly ask it to remember that specific thing. Where you are from may be noted as a country or city, never as a race or ethnicity.

Memory is on by default. You can see every note, delete any of them, or turn memory off under Me → Maru's memory; you can also tell Maru to forget something in the chat. The notes are kept on your device, and in your account when you are signed in. Our server does not keep them.

2. Visualization images

When you create a visualization, your recent conversation context and the summary above are sent to our server, which uses Anthropic to compose a scene and then generates the image. To set the scene somewhere familiar, the country your request comes from (worked out from your network address, not your precise location) is used as a hint for that one image and is not stored. If you do not attach a photo, fal.ai generates the image. If you attach a photo, that photo is uploaded to fal.ai's storage and sent to OpenAI, which generates the image so that the people in your photo remain recognizable; any note you write about who is who in the photo is sent along with it. We do not keep copies of attached photos or generated images. fal.ai processes this under its own policy at fal.ai/privacy, and OpenAI under its own policy at openai.com/policies/privacy-policy.

3. Voice conversation

You can speak to Maru instead of typing. The microphone is only active while you have voice turned on, and it stops as soon as you turn it off.

The speech is turned into text by your own device, not by us — the operating system on the app (Apple on iOS, Google on Android) and the browser on the website. Depending on your device and its settings, that step may happen on the device or the audio may be sent to Apple, Google or your browser provider to be transcribed. That part is outside our control and is governed by their policies.

Summaru never receives or stores your audio. Only the resulting text reaches our server, where it is handled exactly like a message you typed (section 1). Maru's spoken replies are read aloud by your device's own text-to-speech, so no audio leaves your device for that either.

Gift cards for someone else

You can ask Maru to make a visualization card for someone you care about and send them a link. The card is saved to your account like your own cards, and anyone with the link can view it. We never ask you for another person's photo.

If you want the card to show their face, we send them a link and they add their own photo themselves. That photo is sent to our image provider (OpenAI) only to draw the card and is not stored by us. The person who received the card can take it down from the card page at any time. Unused photo-request links expire after 30 days, and the conversation saved for them is encrypted and removed once the card is made.

News by email (only if you ask for it)

When you sign in, you can tick a separate box to receive SUMMARU news — new sounds and features — by email. It is unticked unless you tick it, and signing in alone never adds you to it.

We record your choice and when you made it on your account. You can turn it off at any time in Settings, or by the unsubscribe link in any such email. Without that consent we only email you about your account itself, such as sign-in links or changes to these terms.

If you sign up as a tester

The website has a form for joining the pre-release test. It asks for one thing: the email address you use for Google Play, which is what an invitation to a closed test has to be sent to.

That address is sent to us over Telegram and kept only until the test is over. It is used to send you the invitation and nothing else — no newsletter, no marketing, and it is never passed to anyone. Ask us at support@summaru.app and we will delete it.

Submitting the form does not create an account, and it is unconnected to any account you may already have.

Making Maru better

When you press the heart on something Maru said, that reply is kept — on your device and on our server — so the improvement carries over when you change phones. We read these to see what actually helped, and we change how Maru is asked to speak.

That is prompt work, not model training: nothing you say is used to train an AI model, by us or by anyone else, and none of it is sold or handed to a third party. Only replies you chose to mark, and conversations you chose to report (below), are used this way.

You can also report any reply from Maru with the flag beside it. A report sends the reason you pick, anything you write, and — unless you switch it off in the report sheet, where you can read exactly what will be sent — the conversation around the replies you mark — you can mark more than one — from before the first of them up to the last, at most forty messages, along with the context Maru was given, which can include notes from Maru's memory. We use reports only to find out why Maru answered badly and to fix it. The conversation and anything you wrote are deleted three years after the report; the reason and the reported reply itself are kept, so we can count how often a problem happens. When a report leads to a fix, we write a made-up example of the same kind of exchange — containing nothing from your conversation — and keep it permanently to check that later changes to Maru do not bring the problem back.

Ask us at support@summaru.app and we will delete any of these sooner. Deleting your account removes your marked replies with it; a report is unlinked from you, and its conversation is still removed on the three-year schedule.

Counting visits to this website

This website counts page views so we can tell which writing is read. It uses Vercel Web Analytics, which sets no cookies and builds no profile of you: it records the page, the referring site, the country, and the kind of device — nothing that identifies a person, and nothing that follows you to another site.

This counting happens on the website only. The app does not do it, and it is unconnected to your account or to anything you tell Maru.

What we do not collect

  • No password — sign-in is handled entirely by Google
  • No phone number, address, or payment card details
  • No device identifiers or advertising IDs
  • No location data
  • No advertising, and no data sold or shared with advertisers
  • Nothing you tell Maru is used to train anyone's AI models

Stopping abuse

The free visualization card is one per account. To keep that from being defeated by making accounts in bulk, we also count how many cards come from one network address in a day.

We do not store the address. It is combined with a secret value and hashed, and only the hash and a per-day count are kept. The hash cannot be read back as an address, and it is not used to recognize you, build a profile, or link your visits — it only answers “how many today.” These records are deleted after seven days.

Third-party services

ServicePurposeData shared
GoogleSign-inYour email address and display name are shared with us by Google when you sign in
SupabaseAccount database and authenticationEverything listed under “What is saved to your account”
AnthropicMaru replies and visualization scene textChat content, plus profile and a mood/session summary used for personalization
fal.aiVisualization image generation and photo storageConversation context, and any photo you attach for a visualization
OpenAIVisualization image generation when you attach a photoThe photo you attach, any note about who is who in it, and the scene description
VercelApp and website hostingStandard request logs (IP, timestamp)
TelegramDelivering tester sign-ups to usOnly the email address you type into the tester form on the website

How long we keep it

Data saved to your account is kept until you delete it or delete your account — we do not expire it on a schedule, because the point of keeping it is to preserve a long practice history. Your device keeps only the 15 most recent conversations with Maru; your account keeps them all. The conversation attached to a report is the exception: it is deleted three years after the report.

Chat messages are not retained by us after Anthropic returns a reply, beyond the copy saved to your account described above. Photos attached to a visualization are handled by fal.ai under its own policy. Vercel request logs are retained per Vercel's standard policy.

Deleting your data

Delete your account and everything in it. In the app, open Settings → Delete account. This permanently removes your account and all records listed above — sessions, journal, conversations, favorites, and subscription usage. It cannot be undone, and it takes effect immediately.

Clear only your practice history. In the app, open Settings → Clear history. This removes your meditation records from both your device and your account, and keeps the account itself.

Remove everything from the device. Uninstalling the app removes everything stored locally, including your profile and settings. If you have an account, uninstalling does not delete it — use Delete account first.

If you cannot access the app, email us at support@summaru.app from the address you signed in with, and we will delete your account and its data within 30 days.

Children

SUMMARU is for people aged 14 and over and is not directed at children. We do not knowingly collect any information from children under 14 (under 13 in the United States).

Changes to this policy

If we make material changes, we will update the effective date at the top of this page. Continued use of the app after changes constitutes acceptance.

Contact

Questions or requests: support@summaru.app