Clear information about your personal data.

Data controller

The data controller for the Dreamletter service is Edip Yılmaz, an independent developer based in Türkiye. Contact and KVKK request email: privacy@dreamletter.app.

Categories of personal data

• Identity and contact: email, display name, sign-in provider identifier.
• User content: dream text/transcript, interpretations, symbols, people, chats, pattern reports, and content reports.
• Optional personal context: memories and birth date, time, city/coordinates, and natal summary.
• Transaction and subscription: product, store, entitlement status, quota, and account activity.
• Security: IP or one-way scope hash, session, error, request, and abuse-prevention records.

Collection methods, purposes, and legal grounds

Data is collected electronically through the app, website, support email, and store/sign-in providers you authorize, either directly from you or automatically while the service operates.

Providing the account and journal service and running requested AI features relies on contract formation or performance; security, fraud/abuse prevention, and service integrity rely on legitimate interests without overriding fundamental rights; legal requests and records rely on legal obligations and the establishment, exercise, or protection of rights. Where explicit consent is required for a feature, it is requested separately and freely.

Recipients and international transfers

Data may be transferred only as needed to Google Gemini (AI/transcription), Geoapify (city search), Google Play and RevenueCat (purchase/subscription), and infrastructure providers such as Hetzner/Cloudflare (hosting, network, and security). International transfers are limited and proportionate and rely on an adequacy decision, appropriate safeguards/standard contractual mechanism, or another lawful transfer basis under Article 9 of the KVKK.

Retention and deletion

Account and user content is retained while the account is active unless you delete it sooner; session records until expiry, replacement, or revocation; and support/security records while the purpose or legal need continues. Audio is never retained. Account deletion removes user content; only a minimal audit receipt containing an irreversible email hash and deletion time may be retained while necessary.

Your rights under KVKK Article 11

• Learn whether personal data is processed and request information if it is.
• Learn the purpose of processing and whether data is used accordingly.
• Learn the third parties to whom data is transferred in Türkiye or abroad.
• Request correction of incomplete/incorrect data; deletion or destruction where conditions apply; and notification of these actions to recipients.
• Object to results produced solely by automated analysis and request compensation for damage caused by unlawful processing.

How to submit a request

Send your request from the email address registered to your Dreamletter account to privacy@dreamletter.app. Include your full name, relationship with Dreamletter, request, and reply contact. Additional identity/service details required by KVKK procedure may be requested through a secure channel; do not include passwords, dream text, or identity-document copies in the first email.

Requests are resolved free of charge as soon as possible and within 30 days at the latest. If processing creates an additional cost, the tariff permitted by law may apply.

Notice and explicit consent are separate

This notice is not a consent request. Where explicit consent is required, it is presented through a separate, specific, informed, and freely given flow; consent not necessary for the service may be withdrawn.