← Back to Dreamscape

Privacy Policy

Version: 1.1
Last Updated: February 22, 2026

GestaltMind LLC ("we", "our", or "us") operates the Dreamscape mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

Guest Mode vs. Account Mode

Guest Mode: Dreamscape can be used entirely offline without creating an account. In Guest Mode:

• No email or phone number required
• No data transmitted to our servers
• All features work locally on your device
• AI-powered features are not available (require account)
• No terms acceptance required for basic journaling

Account Mode: To use AI-powered features, you must create an account. This Privacy Policy applies to Account Mode usage where data is transmitted to our servers for authentication and AI processing.

Privacy-First Design

Important: Dreamscape is designed with privacy as a core principle. All dream journal entries, recordings, drawings, and personal notes are stored locally on your device only. We do not have access to your dream content.

Information We Collect (Account Mode Only)

Account Information

When you create an account, we collect minimal information through Supabase authentication:

• Email address or phone number: Used for one-time password (OTP) authentication only
• Authentication tokens: Managed by Supabase for secure access

We do not store passwords. Authentication uses one-time codes sent to your email or phone via SMS (Twilio). You choose which method to use during sign-in.

SMS Consent: If you provide a phone number for SMS authentication, you expressly consent to receive text messages containing OTP codes. You can switch to email authentication at any time to stop receiving SMS messages. Message and data rates may apply.

Server-Stored Data

We store only the following non-personal data on our servers:

• AI usage metrics: To prevent abuse of AI features and manage costs
• Subscription status: To verify active subscriptions (managed via App Store/Play Store)
• Whitelist status: To manage beta access and feature rollouts
• App-generated quotes: For motivational features (not user-created content)

We do not process or store payment information. All payments are handled by Apple App Store or Google Play Store.

Local Device Data

The following data is stored only on your device and never transmitted to our servers:

• Dream journal entries and descriptions
• Voice recordings
• Drawings and sketches
• Tags, categories, and metadata
• Sleep and health data
• All user-created content

Device Permissions

Dreamscape requests the following permissions on iOS and Android to provide functionality:

• Microphone/Audio Recording: To create voice journal entries (stored locally)
• Storage/Files: To save your dream entries and media on your device
• Health Data: To integrate sleep tracking, heart rate, and resting heart rate data (optional, stored locally via Apple HealthKit or Android Health Connect)
• Biometric/Face ID/Touch ID: For secure app access using fingerprint, face unlock, or biometric authentication
• Notifications: To send reminders for dream journaling
• Alarms/Exact Alarms: For scheduled notifications at specific times

All permissions are optional except storage. You control what data the app can access through your device settings (Settings > Privacy on iOS, or App Settings on Android).

How We Use Your Information

We use the minimal data we collect to:

• Authenticate your account via one-time passwords
• Prevent abuse of AI features (which use our API credits)
• Process payments and manage subscriptions
• Provide AI-powered features using our Claude API account
• Improve app functionality based on anonymized usage patterns

AI Features and Third-Party Services

Dreamscape offers AI-powered features that use third-party AI services. When you use these features:

Dream Analysis (Anthropic Claude)

• Your dream content is sent temporarily to Anthropic's Claude API for processing
• We do not store or log AI requests containing your dream content
• AI responses are returned directly to your device
• Usage is tracked only to prevent abuse of our API quota

Voice Transcription (OpenAI Whisper)

• When you use the auto-transcription feature, your voice recording is temporarily sent to OpenAI's Whisper API for speech-to-text conversion
• Audio data is transmitted in base64-encoded format through our Supabase Edge Function
• We do not store or retain your audio data on our servers after processing
• The transcribed text is returned directly to your device
• Voice transcription is a premium-only feature requiring an active account

Anthropic's and OpenAI's privacy practices are governed by their respective privacy policies. We use authentication to protect our API accounts from unauthorized use.

Data Storage and Security

We implement security measures to protect the minimal data we store:

• Encrypted data transmission (SSL/TLS)
• Supabase-managed authentication with industry-standard security
• No dream content or personal journal entries stored on servers
• Local device storage uses your device's native security features

Since your dream data stays on your device, we recommend:

• Using device encryption and screen lock
• Enabling biometric authentication in the app
• Regularly backing up your device to prevent data loss

Data Sharing and Disclosure

We do not sell, trade, or share your personal information. Limited sharing occurs only in these circumstances:

• Supabase: Authentication provider that manages email and phone-based login
• Twilio: SMS delivery service that sends one-time passwords to your phone number (if you choose SMS authentication)
• Anthropic: Dream analysis requests are processed through their Claude API (not stored by us)
• OpenAI: Voice recordings are processed through their Whisper API for transcription (not stored by us)
• Apple/Google: Subscription purchases are processed through App Store or Play Store. We receive only subscription status notifications, not payment information
• Legal Requirements: When required by law or to protect rights and safety

Your Privacy Rights

You have the right to:

• Access: Request a copy of the minimal data we store (email/phone, usage metrics)
• Deletion: Delete your account and all server-side data at any time
• Export: Your dream data is already on your device - back it up anytime
• Control: Manage device permissions through your device settings
• Authentication Method: Choose between email OTP or SMS OTP for sign-in

To exercise these rights or for questions, contact us at info@gestaltmind.dev.

Data Retention

Server-side data retention:

• Email/phone number and authentication: Retained while your account is active
• Usage metrics: Retained for up to 90 days for abuse prevention
• Subscription status: Retained while your account is active to verify feature access

When you delete your account, we permanently delete your email/phone number and authentication data within 30 days. Subscription information is managed by Apple/Google and follows their retention policies. Local device data remains on your device until you uninstall the app or clear app data.

Children's Privacy

Dreamscape is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Third-Party Services

Dreamscape integrates with the following third-party services:

• Supabase: Authentication and user management - Privacy Policy
• Twilio: SMS delivery for one-time password authentication - Privacy Policy
• Anthropic Claude: AI-powered dream analysis - Privacy Policy
• OpenAI Whisper: Voice transcription - Privacy Policy
• Apple HealthKit: Sleep and health data integration on iOS (optional, data stays on device)
• Google Health Connect: Sleep and health data integration on Android (optional, data stays on device)

We encourage you to review their privacy policies. We are not responsible for third-party privacy practices.

International Data Transfers

The minimal data we collect (email and usage metrics) may be processed by Supabase servers in various locations. Supabase provides appropriate safeguards for international data transfers. Your dream content never leaves your device except when you explicitly use AI features (dream analysis or voice transcription).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the app and updating the "Last Updated" date. Your continued use of Dreamscape after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

GestaltMind LLC
Email: info@gestaltmind.dev
Website: gestaltmind.dev