Dreamly AI Privacy Policy

1. Introduction & Overview

This Privacy Policy outlines how Dreamly AI ("we", "our", or "the app") processes information when you use our Android mobile application and associated web services.

Dreamly AI is a personal dream exploration, journaling, and AI-assisted dream interpretation application designed for Android. We are committed to data minimization, privacy protection, and transparent practices.

2. Architecture & Data Minimization

Dreamly AI is engineered with a local-first architecture:

You do not need to register, create a username and password, or provide personal identification to use Dreamly AI.

3. Information We Process & How It Is Handled

A. On-Device Journal Storage (Local Only):

• Dream Entries: Dream titles, written dream narratives, dates, times, dream types (such as Lucid, Vivid, Nightmare, Recurring), vividness ratings, and emotional intensity ratings are saved locally in a private SQLite database on your Android device.
• Voice Notes: When you record a voice memo to capture a dream upon waking, the audio file is saved exclusively in your device's local application storage. Voice recordings are never uploaded or sent to external servers or AI providers.
• Calendar & Patterns: Recurring motif statistics and pattern calculations are performed locally on your device based on your stored journal entries.

B. Information Transmitted for AI Interpretation:

• Dream Narrative & Tags: When you voluntarily tap to request an AI interpretation, the written dream narrative, along with optional symbol keywords, emotion tags, and selected language, is transmitted over an encrypted HTTPS connection to our backend serverless service.
• Interpretation Output: Our backend generates a structured 6-part reflective interpretation (Summary, Detailed Analysis, Symbols, Emotions, Event Sequence, and Possible Meaning) and streams the response back to your device.

C. Device Permissions:

• Microphone Permission (android.permission.RECORD_AUDIO): Used solely for on-device voice recording of dream notes. Voice audio remains strictly local and is never transmitted over the internet.
• Location Permissions: Dreamly AI does not request or use GPS, fine location, or coarse location permissions.
• Network Layer: Standard IP addresses are transmitted at the network layer during secure HTTPS communication with the backend and integrated services.

4. AI Processing & Backend Infrastructure

To generate natural-language interpretations, incoming interpretation requests are processed through reputable cloud and AI infrastructure providers:

• Backend Hosting: Vercel (for serverless API execution and static delivery).
• AI Inference Providers: Google Gemini and Groq AI APIs (for generating structured dream interpretations).
• Operational Rate Limiting & Infrastructure: Upstash Redis is utilized as backend infrastructure strictly for operational rate limiting, duplicate-request suppression, and token budget management to ensure service stability and abuse prevention. Upstash Redis is backend infrastructure and is not contacted directly by the mobile app. User dream narratives and generated interpretations are never stored, logged, or retained in Redis.

5. Advertising – Google AdMob

Dreamly AI displays advertisements using Google AdMob, an advertising service provided by Google LLC.

To serve banner and interstitial advertisements, prevent ad fraud, ensure security, and provide ad measurement, Google AdMob and its SDK may automatically collect and process certain device and usage information, including:

• Device identifiers, including the Google Advertising ID (AAID) where available.
• IP address and general network connection details.
• Ad interaction, viewability, click, and impression data.
• Diagnostic and technical performance data related to ad serving.

Google's data processing activities are governed by Google's Privacy Policy. For more information on how Google processes advertising data, please review:

• Google Privacy Policy (https://policies.google.com/privacy)
• How Google uses information from sites or apps that use our services (https://policies.google.com/technologies/ads)

6. Analytics & Product Measurement Disclosures

To evaluate product stability, understand feature engagement, and measure organic acquisition, Dreamly AI utilizes Google Analytics for Firebase (within the Android mobile application) and Google Analytics (on our website).

A. Measurement Purposes:

• Measuring product lifecycle milestones and activation (such as first open, initiating a dream entry, and receiving an interpretation).
• Understanding feature engagement (such as viewing the dream journal, calendar patterns, saving favorites, and sharing entries).
• Measuring organic acquisition and installation attribution via the Google Play Install Referrer (evaluating campaign sources without personal profiling).

B. Non-Sensitive Event Parameters & Strict Content Safeguards:

In full accordance with our privacy principles, mobile app analytics measurements utilize only high-level, non-sensitive event parameters, such as:

• Selected application language (language)
• Aggregated dream count buckets (dream_count_bucket)
• Entry creation source (entry_source)
• Share action type (share_type)
• Active screen name (screen)
• Content category type (content_type)

C. Website Measurement & UTM Campaign Attribution:

The Dreamly AI website uses client-side session storage (sessionStorage) to temporarily maintain standard acquisition campaign parameters (such as UTM source, medium, campaign, content, term, and referrer sources) across pages. When a user clicks to visit the Google Play Store, these parameters are attached to the Google Play Store URL to measure install attribution. The website does not employ third-party advertising tracking pixels or cross-site profiling cookies.

D. Third-Party Networks:

Google Analytics operates under Google's Privacy Policy (https://policies.google.com/privacy). Users can manage ad identifiers and device personalization through Android Settings (Google > Ads).

We do not sell user data, nor do we integrate Mobile Measurement Partners (MMPs such as AppsFlyer, Adjust, or Singular), data brokers, or social network tracking pixels.

7. Data Retention

• On-Device Data: Your journal records, patterns, and voice memos remain on your local device until you modify or delete them within the app, clear application storage, or uninstall the app.
• Backend State: The backend functions statelessly. AI interpretation processing is transient and ephemeral; dream narratives are processed in memory and streamed directly back to your device without persistent storage on our servers. Operational rate-limiting counters and duplicate-suppression hashes on Upstash Redis expire automatically based on standard short TTL configurations.

8. Data Security

All communications between the mobile application and backend services are encrypted in transit using standard HTTPS / TLS (Transport Layer Security). We enforce strict security controls and minimize server-side data retention to protect against unauthorized access.

9. User Rights & Data Control

You retain complete ownership and control over your information within Dreamly AI:

• You can add, edit, export, or delete individual dream entries at any time directly in the app.
• You can reset or manage advertising identifiers and ad personalization through your Android device settings (under Google > Ads).
• You can delete all locally stored app data at any time through Android Settings > Apps > Dreamly AI > Storage > Clear Storage, or by uninstalling the application.

10. Children's Privacy

Dreamly AI is not directed to children under the age of 13 (or under 16 in applicable jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided personal information to the application, please contact us so that we can take appropriate steps.

11. Cookies & Web Tracking

The Dreamly AI website does not use persistent tracking cookies, cross-site trackers, or third-party marketing pixels. It utilizes standard client-side sessionStorage solely for temporary UTM campaign attribution during your active browsing session.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect updates to application features or legal requirements. When changes are made, the "Last updated" date at the top of this document will be revised accordingly.

13. Contact Information

If you have questions, inquiries, or feedback regarding this Privacy Policy or data handling in Dreamly AI, you may contact us through the official Dreamly AI Google Play app listing and support channels at:

https://play.google.com/store/apps/details?id=com.oberon.dreamlyai