Privacy Policy

Effective Date: April 11, 2026

Introduction

Dreamz ("we," "our," or "us") is a mobile dream journal application that uses artificial intelligence to generate mystical interpretations of your dreams. We are committed to protecting your privacy and being transparent about how we handle your data.

This Privacy Policy explains what information we collect, how we use it, how we store it, and what rights you have over your data. By using Dreamz, you agree to the practices described in this policy.

We believe your dreams are deeply personal. Our guiding principle is simple: your data belongs to you, and we collect only what is necessary to provide the service.

Information We Collect

Information You Provide

• Email address. Required for account creation and authentication. This is the only piece of personally identifiable information we require.
• Dream text entries. The content you write describing your dreams.
• Optional profile details. You may optionally provide your zodiac sign, gender, and age range to receive more personalized dream readings. None of these fields are required.

Information Generated by the Service

• Dream readings. AI-generated interpretations of your dream entries.
• Subscription status. Whether you are on the free or premium tier.

Information We Do Not Collect

• Precise location or GPS data
• Exact date of birth
• Contacts or address book data
• Browsing history or activity outside the app
• We do not use first-party analytics services or tracking pixels (third-party ad SDKs may collect data as described below)

Advertising

Dreamz displays interstitial ads to users on the free tier via Google AdMob. These ads appear between dream readings. Premium subscribers do not see ads. AdMob may collect device advertising identifiers (such as IDFA on iOS or AAID on Android), device information, and app interaction data in accordance with Google's privacy policy. We do not use your dream content, email address, or profile data for ad targeting.

You can limit ad tracking through your device settings: on iOS, go to Settings > Privacy & Security > Tracking; on Android, go to Settings > Google > Ads > Opt out of Ads Personalization.

How We Use Your Information

We use your information solely to provide and operate the Dreamz service:

• Dream analysis. Your dream text, your selected mood for that dream, and any optional profile context you have provided (zodiac sign, gender, age range) are sent to the OpenAI API to generate AI-powered dream interpretations. Your email address, account ID, name, and any other personally identifiable information are never included in these API requests. Dream analysis only occurs after you have explicitly granted AI consent in the app.
• Personalized readings. If you provide your zodiac sign, gender, or age range, this information subtly tailors the tone of your readings but is not linked to your identity when sent to OpenAI.
• Authentication. Your email address secures your account.
• Subscription management. Your subscription status determines available features.

We do not sell, rent, or share your personal data with data brokers or any third party for marketing purposes. Limited technical identifiers (device advertising IDs) may be shared with ad networks for ad delivery as described above. We do not use your data to train AI models. We do not send marketing emails.

AI Consent and Third-Party AI Processing

Dreamz uses OpenAI, L.L.C. ("OpenAI") as a third-party AI service to generate dream interpretations. Before any dream text is transmitted to OpenAI, you must explicitly grant consent in the app.

How consent is obtained

The first time you request a dream reading, the app displays a full-screen consent modal titled "Before We Read Your Dream." The modal:

• Discloses exactly what data will be sent: your dream text, your selected mood, and any optional profile details you have shared (zodiac sign, gender, age range).
• Identifies OpenAI as the recipient of that data.
• States that your data is processed solely to generate your reading and is not used to train AI models.
• Links directly to this Privacy Policy.
• Requires you to tap "Allow Dream Readings" to proceed. If you tap "Not Now," no data is sent and no reading is generated.

Your consent choice is stored on our servers (in your profile record) and synced across your devices. You can revoke consent at any time from Settings → AI Data Sharing → Allow AI Dream Readings. Once revoked, no additional dream text will be transmitted to OpenAI. Previously generated readings remain in your grimoire unless you delete them.

Equivalent data protection by OpenAI

When your dream data is transmitted to OpenAI, it is subject to OpenAI's API data usage policy. Per OpenAI's policy as of the effective date of this Privacy Policy:

• Data submitted to the OpenAI API is not used to train OpenAI's models.
• Data is processed solely to generate the response to the request.
• Data may be retained by OpenAI for up to 30 days for abuse monitoring and legal compliance, after which it is deleted.
• OpenAI maintains its own security, encryption, and access controls for data in transit and at rest.

We have reviewed OpenAI's public API data usage policy and confirm that the protections OpenAI applies to data submitted through its API are equivalent to or stronger than the protections described in this Privacy Policy. OpenAI's full API data usage policy is available at https://openai.com/enterprise-privacy and https://openai.com/policies/api-data-usage-policies.

We do not use any other third-party AI service. OpenAI is the only recipient of dream content for AI processing.

Data Storage and Security

Your data is stored in a Supabase-hosted PostgreSQL database with encryption at rest. We protect your data with:

• Row Level Security (RLS) ensuring each user can only access their own data
• JWT authentication for all requests
• HTTPS/TLS encryption for all communication
• No sensitive data in logs

Third-Party Services

Service	Purpose	Data Shared
OpenAI	Dream text analysis	Dream text, optional zodiac/gender/age (no PII)
Supabase	Auth and database	Email, dream entries, profile
RevenueCat	Subscription processing	Anonymous user ID, subscription status
Apple/Google	In-app purchases	Payment details (handled by Apple/Google)
Google AdMob	Advertising (free tier)	Device ad identifier, device info, app interaction data (no dream content, email, or profile data)

Your Rights and Choices

• Export your data as JSON from the Settings screen at any time.
• Delete individual dreams. Deletion is immediate and cannot be undone from the app.
• Delete your account and all data permanently from Settings.
• Update or remove optional profile details at any time.
• Control AI processing. Grant or withdraw consent for AI dream analysis at any time from Settings.

Data Retention

• Active accounts: data retained while account is active.
• Deleted dreams: removed from your journal immediately and permanently purged from our database within 30 days.
• Deleted accounts: all data permanently removed.
• Inactive accounts: may be deleted after 12 months with advance notice.

Children's Privacy

Dreamz is not intended for children under 13. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the app or via email.

Contact Us

For questions about this policy or your data: support@dreamzjournal.com

We will respond within 30 days.