Privacy Policy

Introduction

Welcome to dreemlo ("we," "our," "us," or "the App"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our mobile application and related services.

Your dreams are deeply personal, and we understand the sensitive nature of the content you share with our app. This policy outlines our commitment to keeping your dream journal private and secure, while being transparent about how we use third-party services to provide AI-powered features.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. Third-Party AI Services & Data Sharing
4. Data Storage and Security
5. Your Privacy Rights and Controls
6. Data Retention
7. Age Restrictions & Content Moderation
8. Children's Privacy
9. International Data Transfers
10. Third-Party Services
11. Changes to This Policy
12. Contact Us
13. Legal Disclaimer & Limitations of Liability

1. Information We Collect

Personal Information

• Profile Data: App preferences, settings, language preferences, and subscription status
• Device Information: Device type, operating system version, app version, unique device identifier (for technical support and app functionality only)
• Payment Information: Processed securely through Apple App Store or Google Play Store (we do not collect, store, or have access to your payment card details)

Dream Content

• Dream Entries: All text content, titles, dates, emotions, tags, and metadata you add to your dreams
• Dream Elements: Characters, places, objects, animals, actions, emotions, and themes you record
• AI Memory Phrases: Personalized insights and patterns extracted from your dreams (stored locally)
• Usage Patterns: Frequency of app usage, feature usage statistics, dream count

Automatically Collected Data

• Technical Data: Performance metrics, error logs (anonymized where possible)
• Analytics: Anonymous usage statistics to improve app functionality (can be disabled in settings)

User-Generated Content

The App allows you to create and store personal dream journal entries. This content is user-generated and may include sensitive personal information, thoughts, and experiences. You are solely responsible for the content you create and store in the App.

2. How We Use Your Information

Core Functionality

• Dream Storage: Securely store and organize your dream entries locally on your device
• AI Analysis (Premium Feature — Requires Explicit Consent): Process dream content through third-party AI services for interpretation, pattern recognition, and personalized insights
• Synchronization: Sync your data across multiple devices (optional, requires explicit activation)
• Personalization: Customize your app experience based on preferences and language settings
• Memory Building: Generate and store personalized AI memory phrases locally to improve interpretation quality over time

Service Improvement

• App Enhancement: Analyze aggregated, anonymized usage patterns to improve features
• Technical Support: Diagnose and resolve technical issues reported by users
• Security: Monitor for suspicious activity and prevent unauthorized access

Communication

• Support Responses: Respond to your inquiries and support requests
• Service Updates: Notify you of important app updates, security patches, or policy changes
• Premium Features: Information about subscription benefits, renewals, and billing (through App Store/Google Play)

3. Third-Party AI Services & Data Sharing

AI-Powered Features (Premium Subscription Required)

What AI Services We Use

We use OpenAI's GPT models (a third-party artificial intelligence service) to provide the following premium features:

• Dream Interpretation: Analyze dream content to identify symbols, themes, and potential meanings
• Pattern Recognition: Detect recurring themes and emotional patterns across your dreams
• Memory Phrase Generation: Create personalized insights based on your dream history
• Dream Reports: Generate comprehensive weekly and monthly dream analysis reports
• Contextual Questions: Generate relevant questions to deepen dream understanding

What Data Is Shared with OpenAI

• Dream Content: The full text of your dream entries
• Dream Elements: Characters, places, objects, emotions, and themes you've recorded
• AI Memory Context: Up to 10 personalized memory phrases stored locally (to provide contextual interpretation)
• Language Preference: Your selected language (French or English)

What Data Is NOT Shared

• Account Information: Your email, device ID, or any personally identifiable account information
• Payment Information: No payment or billing information is ever shared
• Other Dreams: Only the specific dream(s) you choose to interpret are shared
• Analytics Data: Usage statistics and app analytics are never shared with AI services

How Third-Party AI Services Use Your Data

• According to OpenAI's API Data Usage Policy: API data is not used to train OpenAI's models unless you explicitly opt-in (which this App does NOT do)
• OpenAI retains API requests for a limited time (typically 30 days) for abuse monitoring, then deletes them
• OpenAI does not sell your data to third parties

We encourage you to review OpenAI's Privacy Policy for complete details about their data handling practices.

Data Transmission Security

• Encryption in Transit: All data sent to OpenAI is encrypted using TLS 1.3
• No Permanent Storage by AI Provider: OpenAI does not permanently store your dream content beyond temporary processing
• Request Logging: We log anonymous metadata about AI requests (timestamp, token count, model used) for troubleshooting, but do not log actual dream content
• No Cross-User Data Sharing: Your dreams are never shared with other users

Your Control Over AI Features

• Opt-In Required: AI features are disabled by default and require your explicit consent
• Per-Dream Control: You choose which specific dreams to interpret with AI
• Disable Anytime: You can disable AI features at any time in Settings
• Delete AI Data: You can delete all AI-generated interpretations and memory phrases from within the App
• Premium Subscription Control: AI features require an active Premium subscription

We Do NOT Share Your Dreams For

• Marketing or Advertising: Your dream content is NEVER used for advertising purposes
• AI Model Training: Your dreams are NOT used to train external AI models
• Data Sales: We NEVER sell your personal information or dream data to third parties
• Analytics: Dream content is NEVER included in analytics or aggregated statistics

Limited Exceptions for Data Disclosure

We may disclose personal information or dream content only in these specific circumstances:

• Legal Requirements: When required by law, court order, or government request
• Safety Concerns: To prevent imminent harm to you or others
• Service Providers: To trusted technical partners who help operate our service (under strict confidentiality agreements)
• Business Transfer: In case of merger, acquisition, or asset sale (with continued privacy protection commitments)

4. Data Storage and Security

Local Storage (Primary)

• Primary Storage: All dream data is encrypted and stored locally on your device
• Offline Access: Your dreams remain fully accessible even without internet connection
• Device Security: Data is protected by your device's built-in security features (passcode, biometric authentication)
• No Server Storage by Default: Unless you enable cloud backup, your dreams never leave your device

Cloud Backup (Optional)

If you enable cloud backup, your data is stored on Firebase Firestore (Google Cloud):

• Opt-In Only: Cloud backup is disabled by default and requires your explicit activation
• Encryption at Rest: Data is encrypted using AES-256 on Google's servers (Google-managed encryption keys)
• Encryption in Transit: Data transfer uses TLS 1.3 encryption
• Google Cloud Infrastructure: Data is stored in secure data centers compliant with international security standards (SOC 1/2/3, ISO 27001)

Security Measures

• Encryption: AES-256 encryption for all dream content
• Access Controls: Secure authentication protocols protect your account
• Data Isolation: Each user's data is completely isolated from other users
• Security Incident Response: Immediate notification in case of any security breach

Security Limitations

While we implement strong security measures, no system is 100% secure:

• Device Security: If your device is compromised (jailbroken, rooted, malware), data security may be affected
• Your Responsibility: You are responsible for maintaining strong device passwords/biometrics
• Network Security: Public Wi-Fi networks may pose risks; we recommend using trusted networks

5. Your Privacy Rights and Controls

Access and Control

• Data Access: View all personal information and dream content we store
• Data Correction: Update or correct any inaccurate information at any time
• Data Deletion: Request complete removal of your account and all data

Privacy Controls

• Granular Settings: Control what data is collected and processed
• AI Opt-In/Opt-Out: Explicitly enable or disable AI analysis features
• Cloud Sync Control: Choose whether to enable cloud synchronization
• Analytics Opt-Out: Disable anonymous usage analytics in Settings

Regional Privacy Rights

GDPR (European Union)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with supervisory authorities

CCPA (California)

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (Note: We do NOT sell data)
• Right to access personal information
• Right to equal service and price
• Right to deletion of personal information

Other Jurisdictions

We comply with applicable local privacy laws including UK GDPR, Brazil's LGPD, Canada's PIPEDA, and other regional regulations.

How to Exercise Your Rights

• Email us at: dreamy.application@gmail.com with "Privacy Rights Request" in the subject line
• Use the in-app Settings > Privacy > Data Management section
• We will respond within 30 days (or as required by local law)

6. Data Retention

Active Accounts

• Dream Data: Stored indefinitely while your account is active (you control deletion)
• Account Information: Maintained for the duration of your account
• AI Interpretations: Stored locally with your dreams until you delete them
• Usage Analytics: Anonymized, aggregated data may be retained for service improvement

Account Deletion

When you delete your account:

• Immediate Deactivation: Account access is immediately disabled
• Personal Data Removal: Personal information deleted within 30 days
• Secure Deletion: All traces permanently removed from active systems
• Cloud Backup Cleanup: Cloud backups completely purged within 90 days
• Anonymous Data: Aggregated, anonymized analytics may be retained (cannot be linked back to you)
• Legal Retention: We may retain minimal data if required by law

7. Age Restrictions & Content Moderation

Age Rating

dreemlo is rated 12+ (Apple App Store) / Teen (Google Play Store). This rating reflects mild infrequent mature themes that may appear in user-generated dream content.

Age Verification

• Users must confirm they are 13 years of age or older (17+ in some jurisdictions) to create an account
• Users between 13-17 should have parental consent
• By using the App, you represent and warrant that you meet the minimum age requirements

Prohibited Content

Users may not use dreemlo to create, store, or process:

• Content depicting child sexual abuse or exploitation (CSAM)
• Content that promotes terrorism or violent extremism
• Content that violates intellectual property rights of others
• Spam, malware, or malicious content

Accounts found to violate these policies may be immediately suspended or terminated, and we may report illegal content to law enforcement as required by law.

8. Children's Privacy

• We do not knowingly collect personal information from children under 13
• We do not knowingly allow children under 13 to create accounts
• If we discover we have collected information from a child under 13, we will immediately delete that information
• Parents who believe their child under 13 has provided information should contact us at dreamy.application@gmail.com

9. International Data Transfers

• Worldwide Access: dreemlo is available globally
• Data Localization: Data is primarily stored locally on your device
• Cloud Storage: If you enable cloud backup, data may be transferred internationally to Google's secure data centers
• AI Processing: When using AI features, dream content is transmitted to OpenAI servers (primarily located in the United States)

Protection Measures

• Standard Contractual Clauses (SCCs): For EU data transfers
• Encryption in Transit: All international data transfers use TLS 1.3 encryption
• Data Minimization: Only necessary data is transferred internationally

10. Third-Party Services

App Store Platforms

• Apple App Store: Subject to Apple's Privacy Policy for app downloads, payments, and subscription management
• Google Play Store: Subject to Google's Privacy Policy for app downloads, payments, and subscription management

AI Services

• OpenAI (GPT Models): Used for AI-powered dream interpretation (requires Premium subscription and explicit consent)

Firebase Services (Google)

• Firebase Remote Config: Used to update AI prompts and app configurations remotely. Data shared: device type, app version (no personal information or dream content)
• Firebase Firestore: Used for optional cloud backup of dream data (AES-256 encryption at rest, Google-managed keys)

Analytics Services (Optional)

• Anonymous usage statistics (can be disabled in Settings)
• Data shared: feature usage, session duration, app version (no personal information or dream content)

No Other Third Parties

• No advertising networks
• No social media integration
• No data brokers

11. Changes to This Policy

• All changes will show a new "Last Updated" date
• For significant changes affecting your rights, we will notify you via in-app notification
• Your continued use of dreemlo after changes take effect constitutes acceptance of the updated policy
• If you disagree with changes, you may delete your account and cease using the App

12. Contact Us

If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our privacy practices, please contact us:

• Email: dreamy.application@gmail.com
• Subject Line: Please include "Privacy Policy" in your subject line for faster processing
• Response Time: We will respond within 30 days (or as required by applicable law)

13. Legal Disclaimer & Limitations of Liability

No Warranty

THE APP AND ALL SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.

• No Warranty of Accuracy: AI-powered interpretations are provided for entertainment and self-reflection purposes only
• No Professional Advice: dreemlo is NOT a substitute for professional medical, psychological, or therapeutic advice
• No Data Loss Guarantee: You are responsible for backing up your important data
• No Uninterrupted Service: We do not guarantee the App will be available at all times

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• We are not liable for any indirect, incidental, special, consequential, or punitive damages
• Our total liability shall not exceed the amount you paid for Premium subscription fees in the 12 months preceding the claim (or $50 USD if no fees were paid)
• We are not responsible for the actions, privacy practices, or content of third-party services (including OpenAI)
• You are solely responsible for any content you create, store, or share through the App

Third-Party AI Disclaimer

When you use AI-powered features:

• You acknowledge that AI interpretations are generated by third-party AI systems (OpenAI) and may contain errors or inaccuracies
• We do not endorse, verify, or take responsibility for the content of AI-generated interpretations
• AI interpretations reflect patterns and probabilities, not factual assessments or professional opinions
• You use AI-generated content at your own risk and discretion

Severability

If any provision of this Privacy Policy is found to be invalid or unenforceable under applicable law, that provision shall be modified to the minimum extent necessary and the remaining provisions shall remain in full force and effect.

Legal Compliance

This Privacy Policy is designed to comply with applicable privacy laws and regulations including:

• GDPR (General Data Protection Regulation — EU)
• UK GDPR (United Kingdom)
• CCPA (California Consumer Privacy Act)
• COPPA (Children's Online Privacy Protection Act — USA)
• LGPD (Lei Geral de Proteção de Dados — Brazil)
• PIPEDA (Canada)
• Apple App Store Review Guidelines and Google Play Developer Policy Center

Summary of Key Points