Privacy Policy

Last updated: January 2025

1. Introduction

Welcome to Dream Journal ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our dream journaling platform.

Your dreams are deeply personal, and we treat them with the utmost respect and confidentiality. By using Dream Journal, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: When you register, we collect your email address, name, and password (stored securely using bcrypt hashing).
  • Dream Entries: The content of your dreams, including titles, narratives, dates, emotions, tags, and any other metadata you add.
  • Profile Information: Optional information such as profile pictures, preferences, and settings.
  • Payment Information: When you subscribe, payment processing is handled by Stripe. We do not store your full credit card details.

2.2 Information Collected Automatically

  • Usage Data: How you interact with our service, including pages visited, features used, and time spent.
  • Device Information: Browser type, operating system, and device identifiers.
  • Log Data: IP addresses, access times, and error logs for security and debugging purposes.

2.3 Information from Third Parties

  • Google OAuth: If you sign in with Google, we receive your email address and basic profile information from Google.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our dream journaling service
  • Process your dream entries and provide AI-powered interpretations using Claude AI
  • Send you service-related communications (account verification, password resets, etc.)
  • Process payments and manage your subscription
  • Analyse usage patterns to improve our platform
  • Respond to your enquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats

4. AI Processing of Dreams

When you request an AI interpretation of your dream:

  • Your dream content is sent to Claude AI (Anthropic) for processing
  • The AI generates interpretations, identifies symbols, and provides insights
  • We do not use your dream content to train AI models
  • AI-generated interpretations are stored with your dream entry for your future reference

You can disable AI features at any time in your account settings.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party services that help us operate our platform (e.g., AWS for hosting, Stripe for payments, Anthropic for AI processing)
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement robust security measures to protect your data:

  • SSL/TLS encryption for all data in transit
  • Passwords are hashed using bcrypt with 12 salt rounds
  • JWT-based authentication with secure token handling
  • Regular security audits and updates
  • Access controls and authentication for all sensitive operations

While we strive to protect your information, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your information for as long as your account is active. You can:

  • Delete individual dream entries at any time
  • Export all your data in PDF or CSV format
  • Request complete deletion of your account and all associated data

After account deletion, your data will be permanently removed within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@dreamjournal.online.

9. Cookies

We use cookies and similar technologies to enhance your experience. For detailed information, please see our Cookie Policy.

10. Children's Privacy

Dream Journal is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through a notice on our platform. Your continued use of Dream Journal after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

  • Email: privacy@dreamjournal.online