Privacy Policy

The short version

• We use your dreams to provide the journal and the features you ask for. We do not sell personal data.
• Dream text and chat messages are sent to an AI provider (OpenAI) through our own server only after you give consent in the app.
• Advertising attribution uses your device’s advertising identifier only if you allow tracking in the iOS prompt.
• You can delete your account and journal in the app at any time.

Data we process

Account data

When you sign in with Apple, Google or email and password, we receive an account identifier and, depending on the method, your email address and name. If you use “Hide My Email” with Apple, we only receive the relay address. Authentication is handled by Firebase Authentication.

Journal content

The dreams you record (title, text, date, mood and emotions, lucid-dream mark, personal notes), the interpretations and symbols generated for them, your conversations with Luna, generated dream images and your app settings (such as language and image style). This content is stored in Cloud Firestore and Cloud Storage for Firebase so it syncs across your devices.

Voice input

If you dictate a dream, speech is converted to text with Apple’s speech recognition, which may process audio on Apple’s servers under Apple’s privacy policy. We receive only the resulting text; we do not store audio recordings.

Shared dreams

If you choose to share a dream, its title, text, interpretation, emotions and the display name you choose become visible to anyone with the link and to other users in the community feed. You can stop sharing at any time.

Purchases

Payments are processed by Apple. We never see your card details. We receive information about your subscription status and transactions (for example, product, trial, renewal or cancellation) through Apple and Adapty.

Usage, device and diagnostics data

Device model, iOS and app version, language, country or region derived from settings, app interactions (such as screens opened and features used), approximate usage counts and crash reports. We use this to keep the app working, prevent abuse and improve features.

Advertising identifier

We use AppsFlyer to understand which campaigns bring people to the app. iOS asks you whether the app may track you; only if you allow it do we collect your device’s advertising identifier (IDFA). If you decline, attribution works in aggregated or privacy-preserving form only.

AI processing

Before your first interpretation, the app asks for your consent to send dream text and chat messages for AI analysis. With your consent:

• Interpretations and Luna chat. The dream text, the relevant parts of your conversation and settings needed for the answer (such as language) are sent from the app to our backend (Cloud Functions for Firebase), which forwards them to OpenAI to generate the response. We do not include your name, email or account identifier in these requests. Under OpenAI’s API terms, data sent through the API is not used to train its models by default.
• Dream images. When you request an image, a text description based on your dream is sent through our backend to an image-generation provider — fal.ai, or SiliconFlow as a fallback. The resulting image is stored in your journal.

You can withdraw consent in the app’s Settings; AI interpretation and chat then stop working until you turn it back on. Existing entries stay in your journal. AI output can be inaccurate and is not medical, psychological or other professional advice.

Why we use data

• To provide the service — keeping your journal, syncing it, generating interpretations, images and chat replies you request, running subscriptions (performance of our agreement with you).
• AI features — only with your consent, which you can withdraw.
• Security and reliability — preventing abuse and fraud, fixing crashes, monitoring costs and service health (our legitimate interests).
• Improving the app — understanding which features are used, in aggregated product analytics (our legitimate interests).
• Attribution of advertising — with the advertising identifier only if you allowed tracking (consent).
• Legal obligations — for example tax records of purchases or responding to lawful requests.

Service providers

We share data only with providers that help us run the app, and only what they need:

We may also disclose data if required by law, to protect the rights and safety of users or others, or as part of a merger or acquisition, in which case this policy continues to apply.

Where data is processed

Our providers operate servers in several countries, including the United States. Where the law requires it, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by these providers.

Retention and deletion

Your account and journal are kept while your account exists. You can delete a single dream at any time, and delete your whole account in the app: Settings → Delete Account. This permanently removes your account, dreams, interpretations and chat history. Deleting the app alone does not delete your account.

Some data may remain for a limited time in backups, crash and analytics tools under their standard retention, or where we must keep it by law (for example, purchase records). If you want any remaining copies — for example generated images — removed, email [email protected] from the address linked to your account or include your sign-in method.

Deleting your account does not cancel an Apple subscription — cancel it in your Apple ID settings.

Security

Data is encrypted in transit, access to our backend is restricted and protected with Firebase security rules and App Check. You can additionally lock the journal on your device with Face ID, Touch ID or your passcode. No system is perfectly secure, so we cannot guarantee absolute security.

Your rights and choices

• Access, correct, export or delete your data. You can export your whole journal as a PDF in Settings → Privacy & data.
• Withdraw consent for AI processing in Settings, and for tracking in iOS Settings → Privacy & Security → Tracking.
• Object to or restrict certain processing, and lodge a complaint with your local data protection authority.
• Turn notifications off in iOS Settings.

To exercise a right, email [email protected]. We may ask you to confirm that the account is yours. We do not sell or “share” personal data for cross-context behavioral advertising as those terms are defined in California law.

Children

Luna Dream is not intended for children under 13 (or the minimum age required in your country). If you believe a child has given us personal data, contact us and we will delete it.

This website

lunadream.app is a static website without analytics, advertising trackers or cookies. Our hosting provider (Cloudflare) processes technical data such as IP addresses to deliver and protect the site. The symbol suggestion page opens your own email app; nothing is sent until you send the email.

Changes

We may update this policy as the app changes. The date at the top shows the latest version; for significant changes we will also let you know in the app.

Contact

Questions or requests: [email protected].