Privacy policy

Last updated: 2026-11-09

Sarai is a haggling game for iOS and Android, played against AI merchants. This policy says what we collect when you play, why, who else handles it, how long we keep it, and what you can do about it.

Sarai is run by [FOUNDER: legal entity name], [FOUNDER: registered address] (“we”, “us”). We are the controller of your personal data. You can reach us at sarai.support.0@gmail.com.

What we collect

• Your account. You need an account to play. When you sign in with Google (or, on iPhone, with Apple), we receive your email address, your name and an account identifier from that provider. We never see your password. If you use Apple’s Hide My Email, we receive the relay address instead.
• Your name in the game. The display name you choose, or a six-letter handle we generate for you.
• What you type and what the merchants say. Every message you send in a haggle, the merchant’s replies, and the referee’s ruling on each exchange.
• Your play. Your rounds, prices, scores, daily attempts, streaks, leaderboard and league standing, how many rounds you have used this month, your friends and friend requests, and what each merchant remembers about your past visits, which can include a line you wrote. If you answer the question after a round (would you go back to that merchant), we keep your answer with the round.
• Your plan. Whether you subscribe, to which plan, and when it renews or ends, as the App Store or Google Play tells us. We never see your card or other payment details: the store handles payment.
• Your choices. Your settings, and when you accepted the notice that the merchants are run by AI services.
• Reports and messages. Lines you report, share clips made from your rounds, and anything you send to our support address.
• Advertising data (free plan only). If you play on the free plan, our advertising partners collect your device’s advertising identifier, your IP address, approximate location derived from it, device and app information, and which ads you saw or tapped. See Advertising.
• Technical data. Our servers log request times, errors and IP addresses; these logs hold no messages. If you have allowed it in your device settings, Apple or Google may share crash reports with us. On your device the app stores your language, your settings and your sign-in.

We do not use third-party analytics. If that changes, we will update this policy first.

How we use it

• To run the game: to have the merchants reply and the referee rule on each exchange, score your rounds, keep your streak, count your monthly rounds, remember you between visits, and show your name, prices and scores on boards and in leagues, and a round to anyone you share its link with.
• To provide your plan: to check with the store whether you subscribe, unlock what your plan includes, and stop showing you ads if you do.
• To show ads on the free plan, as described under Advertising.
• To keep the game safe: to screen messages for abuse, review reported lines, enforce fair use and stop people breaking the rules.
• To improve Sarai, including training our own AI models: we read and measure rounds (what was typed, the merchants’ replies and the referee’s rulings) to tune the merchants and the referee, and we may use them to train AI models of our own. Before rounds are used this way they are de-identified: your name, and any email addresses, phone numbers and links in them, are removed. You can switch this off (see Your choices).
• To develop new products and services built on the same technology, such as tools for practising or running negotiations. For this we use only de-identified data: rounds with your name, account and contact details removed, which no longer say who played them. The same switch turns this off too.
• To answer you when you write to us.

What you write in Sarai is never shown to a business customer, in any product. If we build products for businesses, they receive no player’s rounds, only what models trained on de-identified data have learned.

Our legal basis (EEA and UK)

• Contract. Running the game and your plan for you is necessary for the contract between us (the terms of use).
• Legitimate interests. Keeping the game safe, improving Sarai (including training our own AI models on de-identified rounds), and developing new products from de-identified data: a fair game that gets better, built from what is already stored rather than anything new, with your name and contact details taken out first.
• Consent. Personalised ads, and the storing of or access to information on your device for advertising where the law requires consent. You can withdraw consent at any time (see Advertising).
• Legal obligation. Keeping purchase records and answering lawful requests.

Your right to object. You can object at any time to any use that rests on our legitimate interests. For improving Sarai, training our AI and new products, turning off Use my haggles to improve Sarai, including training our AI in Settings does it at once, for your past rounds as well as future ones. For anything else, write to us.

Who else handles it

• AI service providers we use to run the merchants and the referee. What you type, and the conversation so far, is sent to them during play so they can write the merchants’ replies and the referee’s rulings. We use only providers that are bound by contract to use what we send solely to provide their service to us, not to train their own models. They may keep it for a short time, as their terms allow, to keep their service safe. We may change providers; this rule applies to every one we use. Do not type anything private.
• Our hosting providers, who store the game’s data, handle sign-in and run the game’s servers for us, in the United States, under contract: Supabase (database and sign-in) and Railway (servers).
• Google and Apple, when you choose them to sign in.
• The App Store and Google Play, which handle purchases, subscriptions, refunds and app updates under their own privacy policies.
• Our advertising partners, such as Google AdMob, on the free plan only (see below).
• Authorities, if the law requires it, or to protect players or the game from serious harm.

Where your data is handled outside the EEA or the UK, we rely on the safeguards the law requires for that transfer, such as the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.

Advertising

The free plan is supported by ads: one full-screen ad after your daily round. Subscribers see no ads.

• What the ad partner collects. Our advertising partners, such as Google AdMob, collect your device’s advertising identifier, IP address, device and app information and ad interactions, to show ads, measure them, cap how often you see one, and prevent fraud. Google explains how it uses this at policies.google.com/technologies/partner-sites. Your conversations are never sent to an ad partner.
• In the EEA, the UK and Switzerland, the app asks for your consent through Google’s consent form before any personalised ads. You can change your choice at any time from Settings.
• On iPhone, the app asks for permission to track you through Apple’s App Tracking Transparency prompt. If you say no, your advertising identifier is not shared and ads are not personalised.
• On Android, you can reset or delete your advertising ID, or opt out of ads personalisation, in your device’s settings.
• If you decline, and for players in the EEA or the UK under 16, ads are non-personalised: chosen by the app and rough location, not by a profile of you. Non-personalised ads may still use the identifier to cap frequency and stop fraud.

What other players see

Other players see your display name or handle, and your price and position on boards once they have played that day. A round you share can be read by anyone with its link; links, email addresses and phone numbers are left off what it shows. Someone who opens your link can ask to be your friend, and becomes one only if you accept. The merchant’s hidden lowest price is never shown to anyone.

How long we keep it

• Your account, rounds and play are kept for as long as you have an account.
• When you delete your account, your rounds and transcripts, the merchants’ memory of you, your daily results, streak, league places, friends and friend requests, the rounds you shared and their clips, the reports you filed and your sign-in record are deleted at once. See Deleting your account.
• Copies in our encrypted backups roll off within 30 days.
• De-identified data, totals across all players, and AI models trained on de-identified data may be kept after you delete your account, because they no longer identify you.
• Server logs, which hold no messages, are kept for a limited time to fix problems, then expire.
• Your purchase history stays with the App Store or Google Play under their terms.

Your choices

Use my haggles to improve Sarai, including training our AI, in Settings, is on unless you turn it off. Off, your rounds, past and future, are left out of the rounds we read, measure and train on, and out of the de-identified data for new products. The game still keeps them for you (an open haggle, what a merchant remembers, the daily, a round you share). We may still look at a round to handle a report, abuse or cheating, or a message you send us, and totals across all players (such as how many rounds were played) still count yours.

Ads. Change your ad choice in Settings (EEA, UK and Switzerland), with Apple’s tracking setting on iPhone, or with your advertising ID settings on Android. Subscribing removes ads.

Delete your account in Settings, at any time. Deleting your account does not cancel a subscription: cancel it in your App Store or Google Play account.

Your rights

Depending on where you live, you can ask us for a copy of your data (including in a portable form), to correct it, to delete it, to restrict how we use it, or to object to a use, and you can withdraw a consent at any time. Write to sarai.support.0@gmail.com from the email address on your account; we answer within a month. In the EEA and the UK you can also complain to your data protection authority (in the UK, the ICO).

EU and UK representative: [FOUNDER: name and address of the EU and UK representatives, if required].

California and other US states

This section is our notice at collection under the California Consumer Privacy Act and similar state laws.

• What we collect, in the law’s categories: identifiers (email, account identifier, IP address, advertising identifier); commercial information (your plan and its status); internet or other electronic activity (your rounds, messages and ad interactions); and approximate location from your IP address. We do not collect sensitive personal information as the law defines it, and do not use any to infer things about you.
• Why, and for how long: as described above under How we use it and How long we keep it.
• Selling and sharing. We do not sell your personal information for money. On the free plan, letting an ad partner use your advertising identifier for personalised ads can count as “sharing” for cross-context behavioural advertising, and in some states as a “sale”. To opt out (Do Not Sell or Share): decline tracking in Apple’s prompt or settings on iPhone, opt out of ads personalisation on Android, or write to sarai.support.0@gmail.com with the subject “Do Not Sell or Share”. We do not knowingly sell or share the data of anyone under 16.
• Your rights: to know, access, correct and delete your personal information, to opt out of selling and sharing, and not to be treated differently for using these rights. You, or an agent you authorise, can make a request at the support address; we verify it against the email on your account.

Security

Your data is encrypted in transit and at rest with our hosting providers, and only the people who run Sarai can reach it. No system is perfectly secure; if a breach puts your data at risk, we will tell you and the authorities as the law requires.

Age

You must be at least 13 to use Sarai. In the European Economic Area you must be at least 16, unless your country sets a lower age for using an online service like this one without a parent’s permission. We do not knowingly collect data from anyone younger. If you believe a child has an account, write to us and we will delete it.

Changes

When this policy changes, we will update the date at the top. For a significant change we will tell you in the game before it takes effect.