What we do with your dreams

When you record or type a dream, we send it to Google Gemini so the AI can analyze symbols and generate an image. We store the result in your private journal on Supabase. We do not sell your dreams, we do not use them to train our own models, and you can delete everything at any time.

• Account data: email address, password hash (managed by Supabase Auth), and an auto-generated pen name.
• Sign-in and profile data: if you use Google Sign-In, Google's SDK may process your name, email address, phone number, coarse location, account and device identifiers, and limited usage or other technical data for sign-in functionality and analytics. EchoDream does not use this data for advertising or cross-app tracking.
• Profile photo (optional): an avatar image you choose to upload.
• Dream content: the raw text or transcription of dreams you record, plus the AI-generated cleaned text, analysis, keywords, emotional theme, and image.
• Community content (optional): if you choose to share a dream, the shared snapshot, any comments you post, and reactions you give.
• Feature and purchase data: App Store purchase history, subscription status, and counts of AI features used to enforce your plan limits.
• Operational data: page-load performance metrics (via Cloudflare Web Analytics, excluding EU visitors), error reports and sampled performance traces (via Sentry), and, only when you allow optional analytics, limited usage events (via Google Analytics).

To produce analysis and imagery, your dream text is sent to Google Gemini over the network. Google's handling of API content is governed by its Gemini API terms. We do not have a separate agreement allowing Google to use your dream content to train their models beyond what those terms specify. We do not use your dreams to train any model of our own. On supported Apple devices, speech recognition runs on the device; EchoDream does not upload or store microphone audio.

These services receive some portion of your data so EchoDream can function. None of them receive your password.

Cloudflare Web Analytics measures page-load performance outside the EU without using the Google Analytics consent choice. Cloudflare states that this service collects minimum timing metrics and does not collect or use visitors' personal data. We do not send dream content, account identifiers, or custom events through this service, and the beacon is not injected for visitors in the EU.

Google Analytics is disabled unless you actively allow analytics cookies. Before that choice, EchoDream does not load the Google Analytics tag or queue events for later. If enabled, we send limited, normalized page paths, approved campaign-attribution parameters, and approved event fields—not dream text, dream summaries, chats, email addresses, pen names, account IDs, or dream IDs. You can reject or withdraw analytics at any time through Privacy settings without losing access to EchoDream's core features.

• Access & export: request a copy of your dreams by emailing the address below.
• Deletion: delete your account and all associated dreams from the Profile page at any time. This action is permanent.
• Correction: you can edit your pen name in your profile; for other corrections, contact us.
• Withdraw optional analytics: you can disable analytics at any time without affecting your account or journal. AI processing requested when you ask EchoDream to interpret or illustrate a dream is separate from optional analytics.

Your dreams remain in your journal until you delete them or delete your account. We do not auto-delete entries today, but we may add a user-controlled retention setting in the future.

EchoDream is not intended for users under 16. If you become aware that a child has created an account, contact us and we will delete it.

If we make material changes (new subprocessor, new data use, retention change), we will update the date at the top of this page and may prompt you to re-acknowledge.

Privacy questions or requests: [email protected].