개인정보 처리방침

The English version is the governing version. In the event of any discrepancy between the English and Polish versions, the English version prevails.

This Privacy Policy explains how your personal data is processed in the DreamAI: Dreams and Symbols app for Android, iOS and Windows (the "App"). It replaces the previous version (1.1, 18 September 2024), which described an ad-supported app. The current App shows no advertising, contains no advertising or analytics SDKs and does not use location data.

1. Who is the controller

The controller of your personal data is Dream-Apps.pl, operated by Piotr Wosinek (hereinafter "we" or the "Service Provider"). Contact: info@dream-apps.pl.

2. What data we process, why, and on what legal basis

Account and profile

E-mail address and password (handled by Firebase Authentication; we never see your password) or an anonymous account identified only by a random ID. Optionally: first name, last name, country and a profile picture. Purpose: creating and running your account, sign-in, synchronisation and support. Legal basis: performance of the contract, Art. 6(1)(b) GDPR.

Your journal content

Dreams (title, text, date and time, colours, tags, people and feelings, favourites, optional audio recording), saved symbols, revelations and notes. They are stored on your device and synchronised to the cloud (Firebase: Cloud Firestore and Cloud Storage) under your account. Purpose: providing the journal, synchronisation and backup. Legal basis: performance of the contract, Art. 6(1)(b) GDPR. You decide what you write; dreams can reveal sensitive information (for example about health or beliefs). We do not ask for such data and process it only to provide the features you use.

Purchases and credits

Purchases are made through the Microsoft Store, Apple App Store or Google Play; on mobile devices they are managed with RevenueCat. We receive confirmation of the purchase (product, time, your user ID) but never your payment card data. We store your AI credit balance and counters of AI usage. Legal basis: Art. 6(1)(b) GDPR and, for accounting records, Art. 6(1)(c) GDPR.

Technical data

Device type and model, operating system and app version, IP address and technical logs (processed by Google as our hosting provider), and a push-notification token. Purpose: operating, securing and troubleshooting the service, preventing abuse, delivering notifications you enabled. Legal basis: our legitimate interest, Art. 6(1)(f) GDPR; for notifications, your device permission.

Support

Messages you send us and the data needed to answer them. Legal basis: Art. 6(1)(b) and 6(1)(f) GDPR.

Community board “Dreams from the group”

The App shows a board of dreams that members of our public Facebook group submitted there for interpretation. A dream is copied to the board by us (the operator) from the group’s moderation queue and shown with the nickname the author used on Facebook, or as “Anonymous” if the author chose to post anonymously. We do not show profile pictures or profile links. For anonymous and pseudonymous posts, the author’s real name, which Facebook shows to group administrators, is kept by us in a separate administrator-only store (not visible in the App) so that we can answer the author on Facebook, group one person’s dreams under a hidden identifier and honour removal requests. Each dream gets a short automatic AI text analysis (section 3). Legal basis: our legitimate interest in running the community and answering its members, Art. 6(1)(f) GDPR. If you posted a dream in the group and want it removed from the App, write to info@dream-apps.pl; we remove it and do not add your posts again.

Your activity on the board: likes and hearts, comments (text, the name from your App profile or sign-in name, your user ID and time), reports of a dream (reason, your user ID) and the list of authors you chose to hide (visible only to your account). Comments can be written only by signed-in users with a registered (non-anonymous) account. Purpose: running the board, preventing spam and abuse. Legal basis: performance of the contract and our legitimate interest, Art. 6(1)(b) and 6(1)(f) GDPR. Comments are visible to other signed-in users of the App. We receive an e-mail about every new comment and every report (the comment or reported dream, the commenter’s name, e-mail address and user ID) in order to moderate; we may delete comments and hide dreams that break the rules, and a dream is hidden automatically after several reports.

3. AI features

When you use AI text analysis of dreams, the symbol dictionary, dream memory, the journal report or voice transcription, the relevant content is sent to external providers: OpenAI (text analyses, symbols, dream memory and reports, sent through our servers) and Google Cloud Speech-to-Text (voice transcription). We send requests with storage on the provider's side switched off. According to OpenAI's published API policy, data sent through its API is not used to train its models by default and may be retained for a limited time for abuse monitoring.

• AI text analysis of a dream: the dream text and its details (title, date, tags, people and feelings, colours) and, for context, up to six of your other dreams closest in time (up to three earlier and three later).
• Dream memory (switched on by default, you are notified and can switch it off at any time in Settings → Privacy and AI): your dreams are sent to OpenAI to build a short summary of your journal (motifs, people, threads, dates). The summary is stored in your account and attached to later AI analyses. You can clear it or switch memory off at any time.
• Journal report (paid with credits): the content of your dreams (up to the 1000 most recent) with titles, dates, tags, colours and people/feelings is sent to OpenAI to produce a report, which is stored in your account until you delete it.
• Voice transcription: the audio recording is sent to Google Cloud Speech-to-Text to convert speech to text.
• Community board: the text of a group dream is sent through our servers to OpenAI to produce its title and short AI text analysis shown on the board. This does not include your own journal.

Sensitive data and religion. To adapt tone and content, the AI may infer from your dreams whether you appear to be a religious person, and the dream memory may record such an indication. This may constitute data concerning religious beliefs (Art. 9 GDPR). We process it only on the basis of your explicit consent (Art. 9(2)(a) and Art. 6(1)(a) GDPR), which you give before the first use of AI features. You can withdraw consent at any time (Settings → Privacy and AI) without affecting earlier processing; without consent the AI features are not available. Please do not enter information about other people or sensitive details you do not want processed.

AI texts are informational suggestions generated automatically. AI is used only for text analysis and for hints that make it easier for you to interpret a given dream; it is not a dream interpretation (which is prepared by real experts, see section 4). They are not medical, psychological, legal or spiritual advice and are not used to make decisions that produce legal effects concerning you.

4. Human (Premium) interpretation

If you purchase and send a dream for interpretation by a human, we receive by e-mail the content of that dream with the details you saved (title, text, date, colours, people and feelings, link to an audio recording), your user ID and the name, last name, e-mail address and country from your profile. We use them only to prepare and deliver the interpretation, which we send back inside the App. Legal basis: Art. 6(1)(b) GDPR.

5. Recipients of data

• Google (Firebase: Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging; Google Cloud Speech-to-Text) – hosting and infrastructure;
• OpenAI – AI processing described in section 3;
• RevenueCat, Microsoft, Apple and Google Play – purchases and payment settlement;
• our e-mail provider – delivery of e-mails (for example Premium interpretation requests and moderation notices);
• Meta (Facebook) – the group from which dreams come and where we publish replies is hosted by Facebook, which acts as an independent controller under its own policy;
• public authorities, where required by law, and advisers bound by confidentiality.

These providers act as our processors or, where they set their own purposes (for example payment stores), as independent controllers. We do not sell your data and do not use it for advertising.

6. Transfers outside the EEA

Our cloud project is hosted in the United States, and OpenAI and Google process data there. Transfers rely on the safeguards offered by the providers, in particular the EU–US Data Privacy Framework (adequacy decision) where the provider is certified, or the European Commission's Standard Contractual Clauses. You can request information about the safeguards at info@dream-apps.pl.

7. How long we keep data

• Account and journal: until you delete them or delete your account (Profile screen). Data on your device stays until you remove the App or its data.
• Dream memory: until you clear it, switch memory off and choose deletion, or delete your account.
• Journal reports: until you delete the report or your account.
• Purchase records: for the period required by accounting regulations and the limitation period of claims.
• Support messages: as long as needed to handle the request and for the limitation period of claims.
• Technical logs: for short periods set by the hosting provider (typically about 30 days).
• Aggregated AI-usage counters (number of requests, volume, estimated cost per month): for operating and billing analytics.
• Community board: dreams from the group until the author asks for removal or we remove them. Your likes, hearts, comments, reports and hidden-authors list: until you delete them or delete your account, when they are deleted automatically.

8. Your rights

You have the right to: access your data; rectify it; erase it; restrict processing; receive it in a portable format; object to processing based on our legitimate interest; withdraw consent at any time; and lodge a complaint with a supervisory authority – in Poland the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the authority in your country.

You can exercise many rights directly in the App: delete your account and all its data (Profile), export or back up your journal (Settings → Backup, PDF export), clear dream memory and withdraw AI consent (Settings → Privacy and AI) and delete reports (Journal report). On the community board you can delete your own comments, hide an author and report a dream. You can also write to info@dream-apps.pl; we answer within one month.

9. Is providing data required

Providing data is voluntary, but an account and journal content are necessary to use the App's synchronised journal. Without your consent to AI processing, AI features cannot be used; the rest of the App works.

10. Children

The App is not intended for persons under 16. We do not knowingly collect their data. If you believe a child has provided data, contact us at info@dream-apps.pl and we will delete it.

11. Security

Data is transmitted over encrypted connections, and access to cloud data is restricted by access rules so that only your account and our server functions can read it. Access on our side is limited to authorised persons. No system is completely secure, and we cannot guarantee absolute protection.

12. Changes

We may update this policy, for example when we add features. The current version is always available on this page, and material changes will also be announced in the App. The effective date and version number are shown at the top of the page.

13. Contact

Privacy questions and requests: info@dream-apps.pl

14. Website trydreamai.app

This section applies to the website trydreamai.app (not to the mobile app). The website currently runs no analytics or advertising.

Your choices in the browser. The website stores your choice of theme (light or dark) and text size in your browser (local storage). This data stays in your browser and is not sent to us.

Blog counters. The view and like counters on blog articles do not use cookies and do not store IP addresses; they only use a short-lived anonymized hash (kept for up to two days) so that the same visit is not counted repeatedly.

Server logs. Like any website, our server records technical data about requests (such as the IP address, the time and the requested page) for security and to keep the website running.

If you have questions about this section, contact us at info@dream-apps.pl.