Your dreams stay yours.

Operator and contact

Dreamletter is operated by Edip Yılmaz, an independent developer based in Türkiye. Privacy and data-rights requests may be sent to privacy@dreamletter.app; general support is available at support@dreamletter.app.

Data we process

• Account information: email, display name, password hash, and Google sign-in identifier when used.
• Dream text, approved voice transcripts, interpretations, symbols, people, chats, and pattern reports.
• Personal context entries and birth date, time, city/coordinates, and calculated natal summary only when you choose to add them.
• Subscription/entitlement status, quota activity, and limited security, request, and error records.
• IP address or one-way scope values derived from it, plus limited device/request information for website and API security.

Why we process it

• Create your account, maintain your session, and provide your dream archive across devices.
• Produce transcripts, interpretations, chat replies, alternate perspectives, and pattern reports when requested.
• Use optional personal context and natal summaries only in the relevant features.
• Manage subscription access, respond to requests, prevent abuse, and keep the service secure.

AI, voice, and personal context

When you request an interpretation or chat reply, the relevant dream, selected perspective, and limited archive context needed for the response are sent to Google Gemini. This context may include recent dream summaries, recurring symbols, and personal context or a natal summary only when you added them. Passwords and session tokens are never included in AI context.

Audio is processed temporarily by Google Gemini only while producing a transcript; Dreamletter does not save it to a file system or database. No dream entry or interpretation begins before you approve the transcript.

Dream and personal-context text may contain sensitive information. We recommend that you do not include unnecessary personal information about other people.

Providers and transfers

Some providers may process data outside Türkiye. Transfers are limited to data required for the service and rely on provider terms and applicable data-transfer mechanisms. Dreamletter does not sell personal information or share it for behavioral or cross-context advertising.

• Google Gemini: content required for transcription, interpretations, chat, and report generation.
• Geoapify: only the city-search text used to find city suggestions, coordinates, and time zone; birth date, birth time, and account identifier are not included.
• Google Play and RevenueCat: purchase, product, store, and subscription/entitlement identifiers; dream content is not shared.
• Infrastructure providers such as Hetzner and Cloudflare: technical data required for hosting, network delivery, security, and availability.

Retention and deletion

• Account, dream, and optional-profile data is kept while your account is active unless you delete it sooner.
• Audio is never retained; it is processed only transiently during the transcript request.
• Rotating session records are kept until expiry, replacement, or revocation, within a maximum 365-day session lifetime.
• Support, error, and security records are kept only as long as needed to resolve requests, protect the service, or meet legal obligations, then deleted or anonymized.
• When an account is deleted, associated user content is removed. A minimal receipt containing only an irreversible email hash and deletion time may be retained for as long as needed to demonstrate deletion and prevent abuse.

Security

Dreamletter uses encryption in transit, password hashing, limited access, protected session tokens, request throttling, and controls that avoid unnecessary copies of sensitive content in logs. No internet service can guarantee absolute security; we will meet applicable notification duties if a significant incident occurs.

Your rights and choices

• Export a portable JSON archive from the app.
• Edit or delete an individual dream, personal-context entry, or birth profile.
• Delete your account in the app or submit a deletion request on the web.
• Where applicable in your location, request access, correction, deletion, a copy, objection, or restriction. Requests under applicable U.S. state privacy laws are accepted through the same channel.

Children and policy changes

Dreamletter is not directed to children under 13. If we learn that we knowingly collected data from a child under 13, we will take appropriate steps to delete it.

If the app's or providers' data practices change, this policy will be updated and the date above will be revised. Material changes may also be announced through an appropriate channel.