Privacy Policy

• We never sell your personal data or your dreams.
• Your dream content is not used to train third-party AI models.
• Data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• You can export or permanently delete your vault at any time.

Account data. Email address, display name, authentication identifiers, password hash, and optional profile preferences.

Dream journal entries. Free-text dream descriptions, dates, tags, symbols, emotions, lucidity and intensity ratings, and any media you attach.

Voice journals. Audio recordings you submit for transcription, plus the transcribed text.

AI-generated content. Interpretations, symbol maps, emotional pattern analyses, timelines, and Oracle conversations produced from your inputs.

Subscription & billing. Plan, status, and limited payment metadata. Card details are processed by our PCI-compliant payment provider and never stored on our servers.

Operational data. Device, browser, IP, language, timezone, and aggregated product analytics used to keep the platform secure and reliable.

• Operate the vault, generate AI interpretations, and personalize reflections.
• Surface patterns across dreams, symbols, emotions and timelines for you.
• Authenticate you, prevent abuse, and protect the integrity of your account.
• Process subscription billing and deliver receipts.
• Send transactional and security emails (e.g. OTPs, password resets, important account notices).

We do not use your dream content for advertising, profiling outside the product, or training third-party models.

Interpretations are generated by large language models accessed via secure model providers. Prompts containing your inputs are transmitted over TLS and processed transiently to return a response. We do not authorize providers to retain your content for training.

See the AI Disclosure for limitations and human-first guidance.

Your vault is encrypted in transit with TLS 1.3 and at rest with AES-256 managed by our infrastructure provider. Role-based access controls and database row-level security ensure that only you and explicitly authorized administrative operators (under audit) can access your private records.

Sensitive entries can be masked, biometrically locked on supported devices, and hidden from passive viewing.

We retain your data for as long as your account is active. Inactive accounts may be archived after 24 months with prior notice. Upon deletion, content is purged from primary systems immediately and from encrypted backups within 30 days.

Subject to applicable law (including GDPR and CCPA), you can: access your data, correct it, export it in machine-readable form, restrict or object to certain processing, and request permanent deletion.

You can self-serve most rights from the Account Deletion Center or by writing to support@dreamvaultai.io.

We do not sell personal information. We share data only with vetted processors that help us run the service: cloud infrastructure, AI model providers, transactional email delivery, analytics, and payment processing. Each is bound by contract and acts only on our instructions.

• Cloud database, storage, and authentication.
• AI model providers for interpretation and transcription.
• Transactional email delivery for OTPs and notifications.
• Aggregated product analytics (no dream content shared).
• Payment processor for premium subscriptions.

We use essential, security, authentication and preference cookies only. We do not deploy advertising or cross-site tracking cookies. See the Cookie Policy.

Your data may be processed in jurisdictions outside your own. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

DreamVault is not intended for users under 16. We do not knowingly collect data from children. If you believe a minor has created an account, contact us and we will remove it.

You can permanently delete your account and vault at any time from the Account Deletion Center. Deletion is irreversible and propagates to encrypted backups within 30 days.

We will notify you in the product and by email of material changes at least 14 days before they take effect.

For privacy questions, data requests or security disclosures, write to support@dreamvaultai.io.