Privacy Policy
Last updated : 7 October 2026
This policy explains what personal data the DreamAmu app (“DreamAmu”, “we”) collects, why, who it is shared with and what your rights are. DreamAmu is designed so that your dreams stay private: they are never published or shown to other users, and there is no advertising and no tracking.
1. Data controller
Alex Champavert (France) is the controller of your personal data. Contact: alex.champavert@icloud.com.
2. Data we collect
When you create an account
- Email address and password (the password is stored only as a secure hash).
- First name.
- Date of birth, used only to check that you are at least 15 years old.
When you use the app
- Dream entries: dream text, date, tags, emotions, lucidity score, reality checks and whether the dream was lucid.
- AI dream analyses you request (summary, dream signs, themes, tips…).
- Night plans (intention, checklist, focus), Academy progress (lessons completed, quiz scores), statistics, streaks and achievements.
- Preferences: goal, experience level, bedtime and wake time, reminder settings, onboarding status, language.
- Subscription status (whether you have DreamAmu Pro) and the number of free AI analyses used this week.
- Technical data: login sessions (session token, IP address and device user agent recorded at sign-in), and short-lived server logs (requests, errors) needed to run and secure the service.
Guest mode
If you use DreamAmu without an account, your dreams and settings are stored only on your device and are not sent to our server. If you later create an account, they are added to it. AI analysis requires an account.
What we do not collect
No advertising, no advertising identifier (IDFA), no tracking across apps or websites, no sale of data, no location, contacts, camera or microphone data. Reminders are local notifications scheduled on your device.
3. Why we use your data (purposes and legal bases)
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and secure your account, store and sync your journal, night plans and progress, provide the app’s features | Performance of the contract (art. 6(1)(b)) |
| Check the minimum age (15) | Legal obligation and contract (art. 6(1)(c) and (b)) |
| AI dream analysis (dream text sent to OpenAI) | Your explicit consent, asked in the app before the first analysis (art. 6(1)(a) and 9(2)(a)), which you can withdraw at any time in Profile |
| Verify your DreamAmu Pro subscription | Performance of the contract (art. 6(1)(b)) |
| Security, abuse prevention, debugging (logs) | Legitimate interest (art. 6(1)(f)) |
Dreams can reveal sensitive information (for example about your health or private life). We only use them to provide the journal and the analyses you request.
4. AI dream analysis with OpenAI
When you ask for an AI analysis of a dream, and only after you have accepted it in the app, the text of that dream, the language and a short list of recurring dream signs and themes from your previous analyses are sent to OpenAI (OpenAI, L.L.C. / OpenAI Ireland Ltd) to generate the analysis. Your name, email, date of birth and account identifier are not sent to OpenAI. Under OpenAI’s API terms, this data is not used to train OpenAI’s models and may be kept by OpenAI for up to 30 days for abuse monitoring before deletion. If you refuse or withdraw consent, no dream text is sent to OpenAI and the rest of the app keeps working.
5. Who receives your data (processors)
- Fly.io (Fly.io, Inc.): hosts our server and database in the Paris region (EU).
- OpenAI: AI dream analysis, only with your consent (see section 4).
- RevenueCat (RevenueCat, Inc.): manages in-app subscriptions. It receives your random account identifier and the purchase information provided by Apple. Our server asks RevenueCat whether your Pro subscription is active.
- Apple: processes payments for subscriptions. We never receive your payment card details.
- Expo (650 Industries, Inc.): the app framework sends basic technical app-launch events (app version, platform, OS version, a random installation identifier) to measure version adoption. No account data or dream content.
Some of these providers are based in the United States. Transfers outside the EU are covered by the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. We never sell your data and never share it for advertising.
6. How long we keep data
- Account, dreams, analyses, night plans and progress: as long as your account exists. When you delete your account, they are deleted immediately from our database.
- Backups (including our host’s automatic disk snapshots) may keep a copy for up to 30 days, then it is erased.
- Server logs: kept for a short time (generally a few days to a few weeks) by our host.
- Purchase records may be kept by Apple and RevenueCat as required by their own legal obligations.
7. Your rights
Under the GDPR and the French Data Protection Act you have the right to access, rectify and erase your data, to data portability, to restrict or object to processing, and to withdraw your consent at any time. In the app:
- Profile → Export Data gives you a copy of all your data (JSON).
- Profile → Delete Account permanently deletes your account and all its data.
- Profile → AI analysis (OpenAI) lets you withdraw your consent to AI analysis.
For any other request, write to alex.champavert@icloud.com; we answer within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).
8. Minimum age
DreamAmu is for people aged 15 and over. A date of birth is required at sign-up and accounts cannot be created for younger users. If you believe a child under 15 has given us data, contact us and we will delete it.
9. Security
All communication with our server uses HTTPS. Passwords are hashed. Access to the server is restricted to the controller.
10. Changes
We may update this policy; the date at the top shows the latest version. Important changes will be announced in the app.