Privacy Policy

Last updated: 3 June 2026

1. Who we are

Sammy is developed and operated by Daniel Stumpf, an individual developer based in Germany. You can reach us at admin@sammytheapp.com.

2. Data we collect

We collect only what is necessary to provide the service:

  • Account data — email address, name (optional), stored via Clerk. If you sign in with Apple, Google, or Discord, we receive your name and email address from that provider via Clerk.
  • Usage data — which task categories you like or skip, used to improve task recommendations. Linked to an anonymous session ID, not your name.
  • Custom tasks — titles, categories, and durations of tasks you create (premium only).
  • Payment data — handled entirely by Stripe. We never see your card details.
  • Push notification token — stored on our server only if you grant notification permission, so we can send timer reminders.

3. How we use your data

  • To provide personalised task recommendations.
  • To sync your custom decks across devices (premium).
  • To send timer notifications you requested.
  • To manage your subscription via Stripe.
  • We do not sell your data, run ads, or share it with third parties beyond what is listed below.

Legal basis (GDPR Art. 6): Account management, device sync, and payment processing are based on the performance of a contract (Art. 6(1)(b)). Anonymous usage interaction data is processed on the basis of our legitimate interest in improving task recommendations (Art. 6(1)(f)). Analytics via PostHog are processed solely on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time in Settings → Analytics.

4. Third-party services

Security: All data in transit is encrypted using TLS, provided automatically by Vercel.

5. Data retention

We retain your data for as long as your account is active. If you delete your account, we erase all personal data within 30 days. Anonymous usage interactions may be retained for up to 12 months for analytics.

6. Your rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, or delete your data, and to object to or restrict processing. Email us at admin@sammytheapp.com to exercise any of these rights. We will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority. The competent authority for Germany is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI).

7. Children

Sammy offers an optional age group setting that includes users aged 8 and above. Use of Sammy by children under 13 requires parental or guardian supervision. We do not knowingly collect personal data from children under 13 without verifiable parental consent.

If you believe a child has provided us with personal data without appropriate consent, please contact us and we will delete it promptly.

8. Changes to this policy

We may update this policy from time to time. Material changes will be notified in the app or by email.

9. Contact

Daniel Stumpf
Germany
admin@sammytheapp.com