Privacy Policy

DreamBridge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the DreamBridge mobile application and website (collectively, the "Service").

Your dreams are deeply personal. DreamBridge stores dream data locally on your device by default. Optional cloud backup and sign-in use Supabase Auth. We do not sell your data or use cross-app advertising trackers.

The Privacy Nutrition Label above summarises the data we collect, consistent with our App Store disclosure. The sections below explain each category in detail.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the Service.

Contact Info — Name and Email Address: When you create an account, we collect your email address and authentication identifiers (email/password, Sign in with Apple, or Google). Sign in with Apple may also provide your name. We use these for account authentication, transactional emails (e.g. password reset), and — with your consent — to personalise your experience.

Financial Info — Payment Info: If you subscribe to DreamBridge Premium, payment is processed through Apple In-App Purchase and managed via RevenueCat. We receive confirmation of your subscription status and purchase history but do not store your full payment card details. Payment data is used for App Functionality (granting premium access) and Analytics (subscription performance). Payment info is linked to your identity.

User Content — Audio Data: Voice recordings you make when logging a dream are transcribed locally on your device. When you request an AI interpretation, your dream text (not the audio) is sent through our secure Supabase Edge Function proxy to Anthropic Claude. Before your first AI interpretation, the app displays a consent dialog that names Anthropic's Claude AI as the recipient and describes what data is shared ("your dream text"). You must tap Allow & Interpret to proceed — tapping Cancel aborts with no data sent. You can revoke or re-grant this consent at any time in Settings → Dream Tracking → AI Dream Interpretation. Audio data is not linked to your identity.

Identifiers — User ID: We assign each account an internal User ID via Supabase Auth. This identifier is used for App Functionality, Product Personalisation, and Analytics. It is not linked to your external identity (name, email) in any data we share with third parties.

Usage Data — Product Interaction: We collect anonymised data about how you interact with the app — which features you use, tap sequences, session length, and feature engagement — via PostHog product analytics. This data is used for Product Personalisation, App Functionality improvements, and Analytics. It is not linked to your identity. We do not use Apple's App Tracking Transparency framework.

Diagnostics — Crash Data, Performance Data, and Other Diagnostic Data: We collect crash reports, app performance metrics, and other technical diagnostic information via Sentry to identify and fix issues. Dream text is never included in diagnostic breadcrumbs. This data is not linked to your identity and is used solely for App Functionality and Analytics.

Push Notifications (OneSignal): If you enable morning reminders, we store your device push token via OneSignal solely to deliver those reminders. We do not collect phone numbers for marketing.

Newsletter subscription: If you opt in via our website, we collect your email address to send dream interpretation tips. This is entirely optional and separate from the app account.

App Functionality: We use your account data (name, email, User ID), dream text, payment information, and diagnostic data to provide the core service — recording dreams, generating AI interpretations, managing your subscription, and keeping the app running reliably.

Product Personalisation: Your name, email, User ID, dream content, and product interaction data help us tailor the experience — surfacing relevant insights, personalising your dream pattern reports, and adapting recommendations over time.

Analytics: We analyse contact info, payment data, usage patterns, identifiers, and diagnostic data to understand how the app performs and where to improve. Analytics data is aggregated wherever possible and processed through PostHog.

We do not sell, trade, or rent your personal information to third parties for their own marketing purposes.

Anthropic (Claude AI): When you request a dream interpretation, dream text is sent to Anthropic's Claude AI via a secure Supabase Edge Function proxy. Voice recordings are transcribed locally on your device — only the resulting text is transmitted. Anthropic does not use your content to train their models under our API agreement. See https://www.anthropic.com/legal/privacy.

Supabase: We use Supabase for account authentication (Supabase Auth) and optional encrypted cloud storage of dream data. Data is stored in Supabase's managed infrastructure. See https://supabase.com/privacy.

RevenueCat: Subscription management, entitlement tracking, and purchase validation for DreamBridge Premium are handled by RevenueCat. See https://www.revenuecat.com/privacy.

Apple (In-App Purchase): Subscription payments are processed by Apple. We receive subscription status and purchase metadata. Apple's privacy policy governs payment processing. See https://www.apple.com/legal/privacy.

Sentry: We use Sentry for crash reporting and app performance monitoring. Dream text content is never included in error breadcrumbs or logs. See https://sentry.io/privacy.

PostHog: We use PostHog for product analytics — understanding feature usage, session behaviour, and aggregate engagement patterns. PostHog data is not used for cross-app advertising. See https://posthog.com/privacy.

OneSignal: We use OneSignal to deliver morning reminder push notifications. Only your device push token is stored; it is used solely to send reminders you have enabled. See https://onesignal.com/privacy-policy.

Vercel: Our website is hosted on Vercel, which may process request metadata (IP address, user-agent) in its access logs. See https://vercel.com/legal/privacy-policy.

We require all third-party providers to handle your data in compliance with applicable privacy laws.

Local Data: Dream data stored on your device is retained until you delete it or uninstall the app.

Cloud Data: If you enable cloud backup, your data is stored until you delete it through the app or request account deletion.

AI Processing: Dream text submitted for interpretation is processed in real-time and not retained by Anthropic after generating the response.

You may delete your account and all associated data at any time from within the app (Settings → Privacy → Delete My Data). Deletion is processed immediately and is irreversible.

Payment records are retained as required by applicable financial regulations, typically 7 years, even after account deletion.

Diagnostic data (crash reports, performance data) collected via Sentry is automatically purged after 90 days.

Anonymised, aggregated analytics data that cannot identify you may be retained indefinitely for product improvement.

Newsletter subscribers may unsubscribe at any time via the unsubscribe link in any email.

Local Storage (Default): All dream data is stored on your device using secure local storage. This data is protected by your device's security features (passcode, biometrics).

Cloud Sync (Optional): If you enable cloud backup, data is encrypted before transmission and stored on Supabase infrastructure with industry-standard security (TLS in transit, encrypted at rest). You can disable cloud sync or delete cloud data at any time from app settings.

AI interpretation requests are routed through a server-side Supabase Edge Function — your dream content is never sent directly from the device to the AI provider, and is not persistently stored by the AI service after processing.

Payment processing is handled entirely by Apple — we never receive or store raw payment card data.

Access to personal data is restricted to authorised personnel only. No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information — including contact info, audio data, or payment information — from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@dreambridge.app and we will delete that information promptly.

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you (including contact info, audio data, and usage data); request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; and data portability (you can export all your dream data in JSON format from Settings → Export Data).

Control AI Processing: Dreams are only sent for AI interpretation when you explicitly request it and have granted consent via the in-app dialog. Toggle AI interpretation off or on at any time in Settings → Dream Tracking → AI Dream Interpretation.

To exercise any of these rights, contact us at support@dreambridge.app. We will respond within 30 days.

California residents: Under the CCPA, you have the right to know what personal data we collect, the right to delete it, the right to opt out of its sale (we do not sell data), and the right to non-discrimination for exercising your rights.

If you are in the European Economic Area, you have the right to lodge a complaint with your local data protection authority.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an in-app notification.

Any changes to data types collected will be reflected in both this policy and our App Store privacy nutrition label simultaneously.

Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, our data practices, or to exercise your privacy rights, please contact us at:

Email: support@dreambridge.app

We aim to respond to all privacy inquiries within 5 business days.