Privacy Policy

1. Interpretation and Definitions

1.1 Interpretation

Capitalized terms have the meanings assigned to them in this Policy.

1.2 Definitions

• Account — The unique profile created for you to access the Service.
• Application — The mobile application titled "DreamScribe — AI Dream Journal."
• Company, We, Us, or Our — DreamScribe.
• Device — Any device used to access the Service.
• Personal Data — Information that identifies or can reasonably be linked to an individual.
• Dream Data — Voice recordings, transcriptions, dream journal entries, AI-generated summaries, mood logs, and any other content you create within the Service.
• Usage Data — Data collected automatically through use of the Service, including device information, activity logs, and analytics data.
• User Content — Voice recordings, text entries, tags, metadata, or other inputs you submit through the Service.
• Website — dreamscribeapp.com.
• You — The individual using the Service or the organization on whose behalf the Service is used.

2. Types of Data We Collect

2.1 Personal Data You Provide

We may collect the following when you create an Account or use the Service:

• First name
• Last name
• Email address
• Purchase and subscription history
• Optional profile details you provide

2.2 Dream Data

To provide dream journaling and AI analysis features, we collect:

• Voice recordings captured via the app or widget
• Transcriptions of those recordings
• Written journal entries
• AI-generated dream summaries and theme tags
• Mood and emotion logs
• Dream type classifications (lucid, nightmare, recurring, etc.)
• Any other dream-related information you enter

You decide what to record. Your Dream Data is deeply personal and we treat it with the highest level of care. See Section 7 for how we handle it.

2.3 User Content

User Content includes voice recordings, transcriptions, journal entries, and tags submitted through the Service. We may use anonymized or aggregated content to improve our AI models. We do not associate such content with your identity when used for internal development.

2.4 Usage Data

We automatically collect:

• Device type, operating system, and app version
• Device identifiers (e.g., advertising ID, vendor ID)
• IP address
• Timestamps and activity logs
• Crash data
• Feature usage analytics (collected via Meta/Facebook SDK)
• Performance data

2.5 Cookies and Tracking Technologies

The Website uses cookies and similar technologies for analytics, functionality, and security. The Application may use mobile identifiers for analytics.

3. How We Use Your Data

3.1 To Provide and Improve the Service

• Voice transcription and AI dream analysis
• Dream journaling and mood pattern tracking
• Lucid dreaming tools and personalization
• Account management
• Service stability and debugging

3.2 To Improve AI Models

We may use anonymized or aggregated User Content to train and improve our AI transcription, summarization, and theme-detection models. Such use is strictly anonymized and not linked to your identity.

3.3 Communications

We may contact you about updates, new features, service notifications, and customer support responses.

3.4 Marketing (Optional)

We may send promotional emails. You may opt out at any time.

3.5 Legal and Compliance

We may use your data to detect or prevent fraud, comply with legal obligations, and protect our rights.

3.6 Business Transfers

If we engage in a merger, acquisition, or asset sale, your information may be transferred as permitted by law.

4. Legal Bases for Processing (GDPR)

Where applicable, we rely on:

• Consent
• Contract performance
• Legitimate interests (e.g., service improvement, security)
• Legal obligations

5. How We Share Personal Data

5.1 Service Providers

With vendors who support the Service, such as cloud hosting, analytics providers, and customer support tools. See Section 6 for a detailed list of third-party services and the data shared with each.

5.2 Business Transfers

As part of corporate transactions.

5.3 Legal Compliance

With law enforcement or regulators when legally required.

5.4 With Your Consent

Where you direct us to share information.

5.5 Aggregated or Anonymized Data

We may share aggregated or non-identifiable data for analytics or business purposes. We do not sell your Personal Data.

6. Third-Party Services and SDKs

The Service integrates the following third-party services. Each provider receives only the data necessary to perform its function and is contractually obligated to protect your data in accordance with this Privacy Policy.

6.1 Google Gemini AI (Google LLC)

Purpose: AI-powered dream analysis, transcription, summarization, and theme detection.

Data shared: Dream text (journal entries, transcriptions) is sent to Google Gemini for processing.

Note: Dream text is processed by Google Gemini to generate summaries, themes, and insights. Google processes this data under its Privacy Policy. We do not send your name or email to Google Gemini — only the dream content necessary for analysis.

6.2 Meta (Facebook) SDK (Meta Platforms, Inc.)

Purpose: Analytics, app event tracking, and performance monitoring.

Data collected: Usage data, device identifiers (advertising ID, vendor ID), app events, crash reports, and performance metrics.

Note: The Meta SDK collects device-level data and app usage analytics. This data may be used by Meta in accordance with its Privacy Policy. You can limit Meta's data collection through your device's advertising and tracking settings.

6.3 RevenueCat (RevenueCat, Inc.)

Purpose: Subscription and in-app purchase management.

Data shared: Anonymous user ID, purchase history, subscription status, transaction receipts, and device identifiers.

Note: RevenueCat processes purchase data to manage your subscription. It does not receive your dream content, name, or email address. See RevenueCat's Privacy Policy.

6.4 Firebase (Google LLC)

Purpose: Authentication, cloud data storage, and crash reporting.

Data shared: Email address, account credentials, dream data (encrypted), and crash logs.

All third-party providers are required to protect your data at a level equal to or greater than the protections described in this Privacy Policy.

7. Dream Data — Special Protections

We recognize that dream journals are deeply personal. We take the following commitments seriously:

• Your Dream Data is never sold to third parties.
• Your Dream Data is never shared with advertisers.
• Dream text is sent to Google Gemini AI solely for analysis, summarization, and theme detection. No other personal information (name, email) is sent alongside dream content.
• Your Dream Data is never used to train AI models in identifiable form — only strictly anonymized or aggregated data may be used for model improvement.
• You may delete your Dream Data at any time from within the app.

8. User Content and License Rights

By submitting User Content, you grant DreamScribe a worldwide, royalty-free, sublicensable license to use, store, process, reproduce, and modify your User Content solely to operate, maintain, and improve the Service, including internal AI model training on anonymized data. We do not publicly display your journal entries or recordings without your express consent.

9. Retention of Data

• Personal Data (name, email) — retained while your Account is active and for up to 30 days after Account deletion to process your request.
• Dream Data (entries, recordings, summaries) — retained until you delete it or delete your Account. Upon Account deletion, Dream Data is permanently erased within 30 days.
• Purchase Data (transaction history, subscription status) — retained for as long as required by applicable tax and financial regulations (typically up to 7 years).
• Usage Data (analytics, crash reports) — retained for up to 24 months, then automatically deleted or anonymized.
• Backups — retained for up to 90 days as part of standard disaster-recovery practices, then purged.

10. Data Transfers

Your information may be transferred to and processed on servers outside your jurisdiction, including servers operated by Google (Gemini AI, Firebase), Meta, and RevenueCat in the United States. We implement safeguards as required by law, including standard contractual clauses for international transfers.

11. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Access your Personal Data
• Correct inaccurate data
• Delete Personal Data
• Export your data
• Withdraw consent
• Object to processing
• Request restriction of processing
• Opt out of data sharing with third-party services

You may exercise these rights through in-app settings or by contacting us at [email protected].

12. Deleting Your Personal Data

You may request deletion of:

• Your Account
• Dream journal entries and recordings
• AI summaries and mood data
• Profile data
• Purchase data (subject to legal retention requirements)

Deletion requests are processed within 30 days. Some data may persist where legally required (e.g., financial records).

13. Security

We use administrative, technical, and physical safeguards to protect your data, including encryption in transit and at rest. However, no online system is entirely secure.

14. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with Personal Data, we will take steps to delete that information promptly.

15. Third-Party Links

The Service may contain links to third-party websites or services. Their privacy practices are their own, and we do not control or endorse them.

16. Changes to This Privacy Policy

We may update this Policy from time to time. Updates become effective when posted. We may notify you by email or through the Application for material changes.

17. Contact Us

If you have questions or requests related to this Privacy Policy, contact us at: [email protected]