NAWA Studio / Privacy
Privacy Policy
This policy covers the NAWA Studio website (nawa-studio.com) and SAMA, the private AI assistant built by Kamel Suleiman under Kamel AI Lab. It explains what data SAMA can access, including Google user data, and how that data is used, stored, and protected.
1. Who we are
NAWA Studio and Kamel AI Lab are operated by Kamel Suleiman. For any privacy question or request, contact kamelforbusiness@gmail.com.
2. What SAMA is
SAMA is a personal, single-user AI assistant. It runs on Kamel Suleiman's own computer and is connected only to his own accounts. It is not offered to the public, and no other person can sign in to it.
3. Google user data SAMA accesses
With the account owner's explicit consent through Google's OAuth screen, SAMA may access:
- Gmail — reading and searching messages, organising labels, and preparing drafts. Messages are sent only when the account owner asks for it.
- Google Calendar — reading events and creating or updating events and reminders on request.
- Google Drive, Docs and Sheets — reading files the owner points to and creating or editing documents on request.
- Google Contacts — read-only, to find the right person when the owner asks.
4. How the data is used
Google user data is used only to carry out tasks the account owner requests: summaries, reminders, drafts, scheduling, and documents. It is not used for advertising, it is not sold, and it is not used to build user profiles for any other purpose.
5. Storage and security
OAuth tokens are stored locally on the owner's computer with file permissions restricted to the owner. Email, calendar, and file content is fetched on demand to perform a task. Conversation history is kept locally on the same computer. No Google user data is stored on the NAWA Studio website or its servers.
6. Sharing and AI processing
To perform a requested task, the relevant content may be sent to the AI model providers that run the assistant (currently OpenAI and Google Gemini, and ElevenLabs for voice). It is sent only as needed for that task and is not shared with anyone else, except where required by law.
Google user data is not used to develop, improve, or train generalised AI or machine-learning models.
7. Google API Services — Limited Use
SAMA's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
8. Revoking access and deleting data
Access can be revoked at any time from your Google Account at myaccount.google.com/permissions. Revoking access stops SAMA from reading any further data. Locally stored tokens and history can be deleted on request; email us and we will confirm once it is done.
9. Website visitors
If you contact us through this website, for example by email, a contact or callback request, or the on-site assistant, we use what you send only to reply to you and handle your request. We do not sell it.
10. Changes
If this policy changes, we will update this page and the date below.
Last updated: 9 October 2026