Dreamee Privacy Policy

1. Introduction

Welcome to Dreamee (« we », « our », « the application »).

Your privacy matters to us. This privacy policy describes how we collect, use, store, share and protect your personal data when you use our application available on the App Store (iOS) and Google Play Store (Android).

2. Data Controller

• Application name : Dreamee
• Publisher / Developer : Dimosapps
• Contact email for privacy enquiries : dimosmobileapps@gmail.com

3. Data We Collect

3.1. Identification and Authentication Data

• Email address: Collected during registration to create your account and allow you to sign in
• Password: Stored securely and encrypted (never in plain text)
• First name (display_name): Optional, collected during onboarding to personalise your experience
• OAuth identifiers: If you choose to sign in with Google or Apple Sign In, we receive basic information from your account (email, name if available)

3.2. Content Data (Dreams)

• Dream text content: The text you enter in your dream journal
• Audio transcription: If you use the voice transcription feature, audio recordings are converted to text locally on your device, then only the transcribed text is stored (audio files are not kept)
• Dream metadata:
  • Dream date
  • Title (optional)
  • Lucidity level (0-5)
  • Mood (optional)
  • Notes on lucidity triggers (optional)
  • Favourite status
  • Dream characteristics (flying, falling, water, fire, etc.)
  • Identified symbols (characters, places, objects, other)

3.3. AI Analysis Data

• AI-generated analyses: Analyses of your dreams generated via our automatic analysis service are stored in our database
• Analysis format: Analysis format preference (one line, short paragraph, three parts)
• Content hash: A technical identifier used to detect whether a dream's content has changed

3.4. Preferences and Configuration Data

• User preferences:
  • Interface language (French, English, German, Spanish, Italian)
  • Notification settings (enabled/disabled, reminder times)
  • Morning reminder settings
  • Onboarding status (completed or not)
  • Pro subscription status (active/inactive)
• Saved symbols: Your personal libraries of recurring symbols (characters, places, objects, other)

3.5. Technical and Usage Data

• Device identifiers: Unique identifiers for your mobile device
• Device type: Model, operating system, version
• IP address: Collected automatically when connecting to our servers
• Usage logs: Anonymised data on app usage (features used, session duration) to improve our services
• Error logs: Technical information in case of issues for diagnosis and fixing

3.6. Payment and Subscription Data

• Subscription information: Your Pro subscription status (monthly or annual)
• Transaction history: Managed by payment platforms (Apple App Store, Google Play Store) and Superwall
• Note: We do not directly collect your card details. Payments are processed by Apple and Google via their secure payment systems.

3.7. Location Data

No precise location data is collected. We do not use GPS or other location services.

4. Legal Basis for Processing (GDPR)

In accordance with the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:

• Contract performance: To provide the application's services
• Consent: For use of the microphone (voice transcription) and push notifications
• Legitimate interests: To improve our services and prevent fraud
• Legal obligations: To comply with our legal and regulatory obligations

5. Use of Data

We use your personal data for the following purposes:

• Provide the service: Create and manage your account, save and sync your data, generate automatic analyses of your dreams
• Improve the service: Analyse app usage to identify issues and improve the user experience
• Communication: Send you push notifications (if enabled) and inform you of important updates
• Subscription management: Manage your Pro subscription and process payments via Apple and Google platforms
• Security and compliance: Prevent fraud, ensure the security of our systems and comply with our legal obligations

6. Sharing Data with Third Parties

We never sell your personal data. We only share your data in the following cases:

6.1. Service Providers (Sub-processors)

We use the following services which act as data processors under contract:

• Supabase: Database hosting, authentication, cloud storage, and server functions (Edge Functions). Supabase is GDPR compliant and stores data in the European Union or United States depending on your region.
• OpenAI: Used via our Supabase Edge Functions to generate AI analyses of your dreams. Only the text content of your dreams is sent to OpenAI for analysis. OpenAI is GDPR compliant and offers data protection guarantees.
• Superwall: Subscription and paywall management. Superwall collects minimal data necessary to manage your subscription.
• Apple (App Store): For in-app purchases and Apple Sign In authentication
• Google (Play Store): For in-app purchases and Google OAuth authentication

6.2. Legal Obligations

We may disclose your data if required by law, in response to a court order, subpoena, or request from a competent government authority.

6.3. Business Transfers

In the event of a merger, acquisition, or asset sale, your data may be transferred. We will inform you of any change in ownership or use of your data.

6.4. Consent

We will share your data with other third parties only if you have given us your explicit consent.

7. International Data Transfers

Your data may be transferred and stored outside your country of residence, including:

• European Union: Supabase may store your data in EU data centres
• United States: Some of our providers (OpenAI, Supabase depending on region) may store data in the United States

We ensure that all international data transfers are carried out in accordance with the GDPR and with appropriate safeguards (standard contractual clauses, Privacy Shield, etc.).

8. Data Retention

8.1. Retention Period

• Account data: Retained for as long as your account is active. You can delete your account at any time.
• Dreams and analyses: Retained until you delete your account or delete them manually.
• Billing data: Retained in accordance with legal obligations (generally 7 to 10 years depending on the jurisdiction).
• Technical data and logs: Retained for a maximum of 12 months, then deleted or anonymised.

8.2. Data Deletion

When you delete your account:

• All your personal data is permanently deleted
• Your dreams, analyses, preferences and saved symbols are deleted
• Billing data may be retained longer in accordance with legal obligations

You can request deletion of your data at any time by contacting us at the email address indicated in the « Contact » section.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

9.1. Technical Measures

• Encryption in transit: All communications between the app and our servers are encrypted via HTTPS/TLS
• Encryption at rest: Sensitive data is encrypted in our database
• Secure authentication: Use of secure authentication tokens (JWT) with expiration
• Access control: Access to personal data restricted to authorised persons only
• Regular backups: Automatic and secure backups of our databases

9.2. Organisational Measures

• Staff training on data protection
• Strict security policies
• Regular security audits

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Your Rights (GDPR and Others)

In accordance with the GDPR and applicable laws, you have the following rights regarding your personal data:

• Right of access: Obtain a copy of all personal data we hold about you
• Right to rectification: Correct any inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restriction of processing: Restrict the processing of your data in certain cases
• Right to data portability: Receive your data in a structured format and transfer it to another controller
• Right to object: Object to the processing of your data on legitimate grounds
• Right to withdraw consent: Withdraw your consent at any time for processing based on consent
• Right to lodge a complaint: Lodge a complaint with a competent data protection authority

To exercise these rights, contact us at the email address indicated in the « Contact » section below. We will respond to your request within one month.

11. Application Permissions

Dreamee requests the following permissions:

11.1. Microphone (iOS and Android)

• Usage: For voice transcription of your dreams
• When: Only when you manually enable the voice transcription feature
• Data collected: Audio recordings are processed locally on your device and converted to text. Only the transcribed text is sent to our servers. Audio files are never stored or transmitted.

11.2. Notifications (iOS and Android)

• Usage: To send you reality check reminders and morning reminders
• When: Only if you enable notifications in the application settings
• Data collected: No personal data is collected via notifications. They are managed locally on your device.

You can revoke these permissions at any time through your device settings.

12. Children's Privacy

Dreamee is not intended for children under 13 (or 16 in some EU countries). We do not knowingly collect personal data from children.

If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. If we learn that we have collected personal data from a child without verifiable parental consent, we will take steps to delete such information from our servers.

13. Cookies and Similar Technologies

Dreamee does not use traditional cookies. However, we use:

• AsyncStorage: Local storage on your device to improve performance (data cache)
• Authentication tokens: Stored locally to maintain your login session

This data is stored only on your device and is not shared with third parties.

14. Changes to this Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal or regulatory reasons.

When we make substantial changes to this policy, we will update the « Last updated » date at the top of this page and inform you via an in-app notification or by email.

We encourage you to review this page regularly to stay informed about how we protect your data.

15. Contact

For any questions, concerns or requests regarding this privacy policy or the processing of your personal data, you can contact us:

Email: dimosmobileapps@gmail.com

Subject: « Privacy policy enquiry - Dreamee »

We are committed to responding to your requests within a reasonable time, generally within 30 days.