DreamWeaver Privacy Policy

Effective Date: April 2, 2026

At DreamWeaver (“the App”, “we”, “us”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it, and what rights you have.

This policy applies to the use of DreamWeaver on iOS and Android, with specific notes for iOS where applicable.

1. Scope of this policy

This policy covers:

  • The DreamWeaver application and its core features (dream journal, AI analysis, image generation, audio notes, reminders, premium subscriptions).
  • Third-party services integrated for authentication, messaging, diagnostics, limited analytics, and subscriptions.
  • Local on-device processing and external service processing necessary for specific functionalities.

If you do not agree with this policy, we recommend that you do not use the App.

2. Data we may process

Based on the currently implemented functionalities, DreamWeaver may process the following categories of data:

Content you provide voluntarily

  • Dream text (title, description, tags, date, rating).
  • Audio notes that you record within the App.
  • AI-generated images related to your dreams.
  • App settings (dark mode, reminder schedule, functional preferences).

Technical data and identifiers

  • Anonymous user identifier from Firebase Authentication (when logging in anonymously).
  • Push notification token (FCM), when available and enabled.
  • Technical subscription/purchase identifiers managed by RevenueCat and the corresponding store (Apple App Store / Google Play).
  • Diagnostic and stability data (crashes, technical errors, basic device/system information) via Crashlytics.
  • On Android, advertising identifier and ad interaction data when AdMob applies (on iOS, according to current code, ads are not displayed).

Usage Data

  • Technical and usage events that may be processed through Firebase services (e.g., for operation, security, support, and product improvement).

3. Data we do not actively request

In the current version of DreamWeaver:

  • We do not request personal user contacts.
  • We do not request global system photo or library permissions (processed images are generated/managed by the App according to internal flow).
  • We do not request precise location or background location.
  • We do not request access to the calendar or health data.
  • We do not request real-name identification to use the App (anonymous authentication is used for backend services).

4. Device permissions and their purpose

DreamWeaver may request system permissions for:

  • Microphone (NSMicrophoneUsageDescription on iOS / RECORD_AUDIO on Android): to record audio notes associated with dreams.
  • Notifications: to send daily reminders (if you activate this feature).
  • (Android) Advertising Identifier / Ad ID: rewarded ad functionality on Android.

On iOS, notification and microphone authorization is requested in a functional context and can be revoked from System Settings.

5. Purposes of processing

We process information to:

  • Provide the core functions of the dream journal.
  • Save and organize your dreams, audios, and analysis results.
  • Execute AI text analysis and interpretation when requested by you.
  • Generate images related to your dream when requested by you.
  • Manage premium subscriptions, purchase restoration, and premium status validation.
  • Send daily reminders if you enable them.
  • Maintain the security, stability, and technical quality of the App.
  • Prevent crashes and provide support.

We do not use your content for purposes incompatible with those described here.

6. Legal basis (when regulations like GDPR/EEA apply)

Depending on your jurisdiction, legal bases may include:

  • Contract/Service Execution: to operate features requested by you (journal, technical sync, subscriptions, reminders).
  • Consent: for microphone and notification permissions, and for optional features involving sending content to AI services.
  • Legitimate Interest: for security, abuse prevention, technical diagnostics, and stability improvement.
  • Legal Compliance: when required by law.

7. Third-party services and transfers

DreamWeaver utilizes external providers for specific features. According to current code and dependencies, these include:

  • Google Firebase:
    • Firebase Authentication (anonymous authentication)
    • Firebase Messaging (push notifications/tokens)
    • Firebase Crashlytics (crash diagnostics)
    • Firebase Analytics / associated technical measurement services
    • Firebase Functions (if applicable in backend flows)
  • RevenueCat (subscription and premium status management)
  • Google Generative Language / Gemini (textual analysis of dreams and prompt creation)
  • Pollinations (image generation from prompts)
  • Google AdMob (Android) for rewarded ads (currently not enabled on iOS according to revised implementation)

When you use features that depend on these services, certain data may be processed by these providers under their own policies and conditions.

8. Processing of AI content

When you activate analysis or image generation:

  • The dream text you submit for analysis may be transmitted to external AI services.
  • To generate an image, the dream content may be transformed into a prompt and sent to the generation service.
  • The result may be saved locally on your device for later viewing/editing.

We recommend not including particularly sensitive data or unnecessary personal identifiers in your descriptions.

9. Local storage and user control

DreamWeaver saves information conceptually in the device's local storage (database and internal files), including:

  • Dream entries and metadata.
  • Audio references/files.
  • Generated images.
  • App preferences and settings.

The App includes features to:

  • Export your data.
  • Import backups.
  • Delete local data from settings.

These features are designed to give you control over your information.

10. Data Retention

We retain data:

  • Locally as long as you keep the App and do not delete it.
  • On third-party services, according to the timelines and policies of each provider, or until it is no longer necessary for the stated purpose.

Diagnostic technical data may be retained for reasonable periods for support and stability. If you request the deletion of data under your control in the App, it is deleted locally according to the feature used. For data already processed by third parties, their deletion procedures and policies apply.

11. Security

We implement reasonable technical and organizational measures to protect information against unauthorized access, loss, or alteration. However, no system is 100% infallible; therefore, we recommend good practices (device lock, updated system, not sharing backups on insecure channels).

12. Minors

DreamWeaver is not intentionally directed at minors below the applicable legal minimum age in their jurisdiction to consent to data processing. If we detect that data has been provided in violation of this criteria, we may take steps to delete it or restrict the service.

13. Your Rights

Depending on your country/state, you may have the right to:

  • Access your data.
  • Rectify inaccurate information.
  • Request deletion.
  • Limit or object to certain processing.
  • Data portability.
  • Withdraw consent (when processing is based on it).

You can exercise these rights by writing to: [email protected]. We will respond within a reasonable timeframe and in accordance with applicable law.

14. International Transfers

When using providers like Google/Firebase, RevenueCat, or other infrastructure services, some data may be processed outside of your country of residence. Where applicable, contractual mechanisms or reasonable safeguards will be applied in accordance with applicable regulations.

15. Changes to this Policy

We may update this policy to reflect legal, technical, or functional changes. We will publish the current version with an updated date. If the change is material, we may notify you through appropriate channels within the App or on our website.

16. Contact

For privacy questions or requests:

Appendix A - App Store Review Approach (Apple App Privacy)

This appendix helps you align the text and the "App Privacy" form in App Store Connect.

Potential categories of data processed (based on current features):

  • User Content: content of dreams, audio, and material generated/saved by the App.
  • Identifiers: anonymous user identifier (Firebase), push token, subscription identifiers.
  • Purchases: subscription status and transactions via StoreKit/RevenueCat.
  • Diagnostics: bug and crash data (Crashlytics).
  • Usage Data: technical/usage events for operation and improvement.
  • Audio Data: recordings that the user voluntarily creates within the App.

Tracking (iOS):

  • According to the revised implementation, iOS does not show ads (iOS ad repository in non-operational mode).
  • If you do not perform cross-app/cross-site tracking, declare "No Tracking".
  • If you enable iOS advertising or tracking in the future, you must update the policy, ATT permissions, and App Privacy form before publishing.

Key points for Apple Review:

  • Clearly explain that the user can use core features with anonymous identification.
  • Explain when content is shared with AI services.
  • Include an actual, functional privacy contact method.
  • Ensure consistency between this policy, App Privacy, and descriptions in App Store Connect.