Privacy Policy

Privacy Policy for Dreamsy

Dreamsy Privacy Policy

Last updated: 23 April 2026

This Privacy Policy explains how we process personal data when you use the Dreamsy mobile application and related services (together, the “App”).

If you have questions, contact us using the details in Section 1.

1. Controller (who we are)

Controller (service provider / operator):

InnovationWeb (Owner: Omoji O.)
Omoji Oshafu

Glatzgasse 4, 1190 Wien

Email: info@innovationweb.at

If we appoint a Data Protection Officer (DPO), we will publish the DPO contact details here.

2. What this policy covers

This policy covers processing of personal data when you:

  • Create an account (including a guest/anonymous account) and sign in
  • Save and manage dream entries and related content
  • Request AI-generated interpretations (from text or from a voice recording)
  • Use optional features such as the Cosmic Profile (astrology) and Dream Reminder notifications
  • Use text-to-speech (TTS) playback, contact/support, reporting, and purchase/subscription features

3. Personal data we process

We may process the following categories of personal data:

3.1 Account and profile data

  • Name (as provided by you)
  • Email address (for registered accounts)
  • Date of birth (used for age eligibility and for astrology features if you choose to use them)
  • Authentication and session data (tokens/identifiers used to keep you signed in)
  • Language and timezone (to localize the App and requests)

Guest/anonymous accounts:

  • If you continue without registering, we may create a guest/anonymous account identifier so you can use the App and keep your content.

3.2 Dream diary data and interpretation data

  • Dream text you submit
  • Dream metadata you select (for example: dream type, date, interpretation style/framework, language)
  • AI-generated content shown to you (for example: interpretation text, summaries, titles, keywords)
  • Tags, notes, or keywords you add (if available in your version of the App)
  • Astrology-related results attached to a dream (if you use astrology-based interpretations)

3.3 Voice / audio data (optional)

If you use the voice feature:

  • Voice recordings you make in the App (audio files)
  • Any text derived from the audio during processing (for example, transcription) where this is part of the interpretation flow

We only access the microphone if you grant microphone permission and choose to record.

3.4 Cosmic Profile (astrology) data (optional)

If you use astrology features, you can provide a Cosmic Profile. This may include:

  • Birth date (if not already in your account profile)
  • Birth place name (free text)
  • Birth latitude and longitude
  • Birth timezone
  • Birth time and birth time accuracy (exact/approx/unknown)
  • Astrology system selections (for example, zodiac system / house system)
  • Confirmation flags (for example, confirming your birth date for astrology use)

If you choose to attach dream-place information for an astrology reading, we may also process:

  • Dream place name, latitude/longitude, and timezone
  • Dream timing inputs (exact time or preset timing labels)

3.5 Dream reminder notifications (optional)

If you enable Dream Reminders:

  • Reminder schedule settings (time, enabled/disabled)
  • Preferred language for the reminder text
  • A short name used in the notification (for example, your first name)

Dream Reminders are scheduled notifications on your device. We do not need your device push token for this local reminder feature.

3.6 Subscriptions and purchases

We process purchase and entitlement information necessary to provide paid features, such as:

  • Subscription status and tier, credit balances, and feature entitlements
  • Transaction and purchase metadata (such as purchase tokens / transaction identifiers)

Payments are processed by Apple and/or Google (and their payment providers). We do not receive or store your full payment card details.

3.7 Support, contact messages, and reports

If you contact us or use in-app reporting:

  • The message content you send to us
  • Related metadata (such as the time of submission and your account identifier)
  • Reported dream text/content (if you submit a report)

3.8 Technical and log data

Like most online services, our servers and service providers may automatically receive:

  • IP address and connection information
  • Approximate location derived from IP (country/region level)
  • App version, device type, operating system version, language
  • Log data needed for security and reliability (for example, error logs)

We do not use third-party advertising SDKs in the App and we do not sell personal data.

3.9 Local storage on your device

The App stores some information locally on your device, for example:

  • Sign-in/session information stored in the device’s secure storage (where supported)
  • App preferences (such as language and selected interpretation style)
  • Dream reminder settings (if you enable Dream Reminders)
  • Cached text-to-speech (TTS) audio files and related cache metadata

You can remove local app data by using in-app controls (where available) and/or by deleting the App from your device.

4. Why we process personal data and legal bases (GDPR)

We process personal data only for specific purposes and under a lawful basis under the GDPR.

4.1 Provide and operate the App

Purpose:

  • Create and manage your account (including guest/anonymous accounts)
  • Save and display your dream diary entries and interpretations
  • Provide core App functionality and settings

Legal basis: Article 6(1)(b) GDPR (performance of a contract / providing the service you request).

4.2 Provide AI-based interpretations (text or voice)

Purpose:

  • Process your submitted dream content (text and/or audio) and selected context (such as interpretation style and language)
  • Generate and return AI-based interpretations and related outputs (such as summaries/titles)

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

4.3 Provide astrology-based interpretations (Cosmic Profile) (optional)

Purpose:

  • Store your Cosmic Profile
  • Use your Cosmic Profile and (optionally) dream timing/place inputs to produce astrology-based interpretations and related results

Legal basis: Article 6(1)(b) GDPR (performance of a contract) for the feature you choose to use.

4.4 Text-to-speech (TTS) playback (optional)

Purpose:

  • Generate audio playback of content (for example, an interpretation) and cache it on your device for faster playback

Legal basis: Article 6(1)(b) GDPR (performance of a contract).

4.5 Dream reminders (notifications) (optional)

Purpose:

  • Schedule and display dream reminder notifications on your device at the time you choose

Legal basis: Article 6(1)(a) GDPR (consent), because this feature is optional and you can turn it off at any time.

4.6 Subscriptions, purchases, and billing administration

Purpose:

  • Verify purchases, manage entitlements/credits, and restore purchases
  • Keep records required for accounting and tax compliance (where applicable)

Legal basis:

  • Article 6(1)(b) GDPR (performance of a contract)
  • Article 6(1)(c) GDPR (legal obligation)

4.7 Security, abuse prevention, and moderation

Purpose:

  • Detect and prevent abuse, fraud, and security incidents
  • Investigate reports (for example, reported dream content) and enforce our policies

Legal basis: Article 6(1)(f) GDPR (legitimate interests in protecting our users, our service, and complying with law).

4.8 Customer support and communications

Purpose:

  • Respond to your support requests and messages

Legal basis:

  • Article 6(1)(b) GDPR (contract) when support relates to providing the App
  • Article 6(1)(f) GDPR (legitimate interests) to provide efficient customer support

4.9 Special categories of personal data (Article 9 GDPR)

Dreams and voice recordings are free-form. You may choose to include information that could be considered “special categories of personal data” (for example, health data, sexual life/orientation, religious or philosophical beliefs, or other sensitive information).

We do not require such information for the App to function. Please avoid including unnecessary sensitive information.

Where our processing involves special categories of personal data, we rely on Article 9(2)(a) GDPR (explicit consent) to process that content for the purpose of providing the App features you request (such as generating an interpretation). You can withdraw your consent at any time by deleting the relevant content and/or contacting us.

Important: If you do not want us to process special categories of personal data, do not include them in your dream entries or voice recordings.

5. AI processing (interpretations)

5.1 How AI processing works

When you request an interpretation, we send the necessary inputs to our backend services and AI processing providers. Depending on the feature, inputs may include:

  • Dream text (or audio recording for voice mode)
  • Selected interpretation style/framework
  • Selected language
  • Optional astrology context you provide (Cosmic Profile) and optional dream timing/place inputs

We then return the AI-generated output to you in the App and may store it in your dream diary.

5.2 AI outputs and limitations

AI outputs are generated automatically.
They may be inaccurate, incomplete, or inappropriate.
They are for wellness, reflection, and entertainment purposes only and do not constitute medical, psychological, psychiatric, therapeutic, legal, or other professional advice.

If you experience distress or feel at risk of self-harm, seek professional help or contact emergency services.

5.3 AI model training

We do not use your dream content to train or fine-tune AI models.

Note: Some providers may use service data in limited ways to operate and secure their services. We use contractual safeguards (where applicable) and configure providers to limit such use where available.

6. Sharing and recipients (service providers)

We share personal data only as necessary to operate the App, provide features you request, process purchases, and comply with legal obligations.

Depending on the context, recipients may act as:

  • Processors (processing on our behalf), or
  • Independent controllers (processing under their own responsibility, such as app stores)

6.1 Typical recipients

Depending on your use of the App, we may share data with:

  • Cloud hosting and infrastructure providers (for example, Google Cloud Platform)
  • Database/storage providers (for example, MongoDB configured for EU/EEA regions where available)
  • AI processing providers (for example, Google Vertex AI / Gemini)
  • Subscription management providers (for example, RevenueCat)
  • Apple App Store and Google Play Store (purchase processing)
  • Place lookup / timezone resolution services used to resolve place inputs for astrology features (provider depends on configuration)

6.2 User-initiated sharing

If you use the App’s sharing features, you choose what to share and with which app or recipient. Once shared, the recipient processes the content under their own privacy practices.

7. International data transfers

Some service providers may process data outside the EU/EEA.
Where personal data is transferred outside the EU/EEA, we implement appropriate safeguards, such as:

  • European Commission adequacy decisions, and/or
  • Standard Contractual Clauses (SCCs) approved by the European Commission

You can contact us at info@innovationweb.at to ask for more information about safeguards used for specific transfers.

8. Retention (how long we keep data)

We apply a user-controlled retention model where possible.

8.1 Dream diary content

Your dream entries and interpretations are stored until you delete them, unless we must retain some information for legal reasons.

8.2 Cosmic Profile

Your Cosmic Profile is stored until you edit or delete it, or until you delete your account.

8.3 Audio recordings

Voice recordings may be stored on your device until you submit them or delete/overwrite them. When you submit audio for interpretation, we process it to provide the feature.
Server-side retention for audio (if any) depends on the processing pipeline and troubleshooting needs: [INSERT AUDIO RETENTION STATEMENT OR PERIOD].

8.4 Purchases and billing records

We may retain limited transaction and billing records where required by law (for example, tax/accounting).

8.5 Support messages and reports

We retain support messages and reports as long as necessary to respond, enforce policies, and keep records of actions taken, unless a longer retention is required by law.

8.6 Backups

Deleted data may remain in encrypted backups for a limited period before being overwritten, according to our backup retention practices: [INSERT BACKUP RETENTION PERIOD].

8.7 Local device caches

Some features cache data on your device (such as TTS audio). This cache is automatically cleaned periodically, and you can also remove it by deleting the App.

9. Security

We use appropriate technical and organizational measures to protect personal data, which may include:

  • Encryption in transit (HTTPS/TLS)
  • Access controls and authentication
  • Role-based access and need-to-know restrictions
  • Security monitoring and logging

No system is 100% secure. Please keep your login credentials confidential and use a strong password.

10. Your rights under the GDPR

Subject to applicable law, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data
  • Restrict processing
  • Data portability (where applicable)
  • Object to processing based on legitimate interests
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

To exercise your rights, contact us at: info@innovationweb.at

We may need to verify your identity before processing certain requests. We respond within the time limits required by applicable law.

11. Children

The App is intended for users aged 14 and older (or the minimum age permitted in your country to use the App without parental consent, where applicable).

We do not knowingly collect personal data from children below the applicable minimum age. If you believe a child has provided personal data to us, contact us and we will take appropriate steps to delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.
If we make material changes, we will notify you in the App and/or on our website and update the “Last updated” date.