Privacy Policy

Our privacy promise

In Your Dreams is designed to be a private, reflective space. Your dreams are personal, and we treat them that way. This policy explains in plain language what we collect, why, and what we do with it.

If anything below isn't clear, please write to us at [email protected].

1. Who we are, and what this policy covers

In Your Dreams is operated by Inside Your Library, a sole-trader business based in Queensland, Australia.

This policy covers all versions of the service:

• The website and web app at inyourdreams.app
• The public archive at dreamometer.app
• The In Your Dreams Android app, distributed through Google Play

The Android app is a wrapper around the same service. It behaves the same way and is covered by the same terms, with the differences for in-app purchases set out in section 4.

2. What personal information we collect

When you create an account:

• Email address
• Name, as you provide it. If you leave it blank we store the placeholder "Dreamer"
• Encrypted password. We never see or store your actual password

When you submit a dream:

• The text you type describing your dream
• The form fields you fill in: mood, when you dreamed it, how it felt, pronouns, age band, and your device's time zone
• The generated reading and its illustration, stored in your personal dream journal

When you make a payment: see section 4. What we hold depends on whether you paid on the web or inside the Android app.

When you use the service:

• Your approximate country, derived from a Cloudflare request header
• An approximate latitude and longitude, also from Cloudflare request headers. This is derived from your network connection, is accurate only to roughly city level, and is described further in section 3
• Standard server logs, kept for troubleshooting and abuse prevention. These record what the service did while handling a request, and can include your email address in a shortened form, for example n***@example.com. They do not record your dream text. They are held by our hosting provider and deleted automatically on its own cycle, as set out in section 10

Your IP address is never stored in our database. Cloudflare processes it in order to route and protect the request, and passes us only the derived country and approximate coordinates.

The app does not ask for device location. It requests no location permission, and it does not read GPS, Wi-Fi or Bluetooth positioning. The only permissions the Android app declares are internet access and Google Play billing.

What we do not collect:

• Your IP address, in our own database
• Device fingerprints
• Advertising cookies or cross-site tracking
• Third-party analytics of any kind

What we do record: a small number of anonymous product events, so we can see whether the service works and where people get stuck. We log when a page loads, when a result is produced, when the price is shown, when checkout begins and when a purchase completes. Each event carries a random identifier that lives only until you close the tab, the page path, the referring page, and your country. It carries no name, no email and no dream content. Nothing is shared with anyone.

3. What the Dreamometer™ collects, if you consent

The Dreamometer™ is our public dream-theme archive. When you contribute to it, the following anonymous information is added:

• The theme labels extracted from your dream, for example "Falling" or "Hospital". Contributing to the Dreamometer™ never publishes your dream words
• Your mood, how the dream felt, when you dreamed it, and the emotional tone detected in your reading
• Your country
• An approximate latitude and longitude, accurate to roughly city level, which is plotted as a point on the public dream map
• The dream date, where it can be derived, and the moon phase on that date
• A generated anonymous dream ID so co-occurring themes can be grouped

Your contributions cannot be traced back to you. No account ID, email, name, IP address or dream text is stored in the public dataset. The coordinates are those of a network connection rather than a person, and they are not stored alongside anything that identifies you.

Consent is always your choice. A checkbox on the dream submission form lets you decline to contribute. If you untick it, your dream still gets a full reading, and no theme data is shared with the Dreamometer™.

Featuring a dream is a separate choice. A second, distinct checkbox offers to feature a short anonymous excerpt of your dream on the public archive. That is the only circumstance in which any of your dream words become public. It is off unless you tick it, only a fragment is stored, it is reviewed before anything appears, and you can ask for it to be removed at any time.

4. Payments and in-app purchases

On the web, payments are processed by Stripe. Stripe receives your name, email and payment method, and retains its own transaction records. We do not store your card details.

In the Android app, all purchases and subscriptions are processed by Google Play Billing. Google handles the payment entirely. We never see your card details, and we do not receive your Google account name or address. What we receive and store is:

• The product identifier you bought
• A Google Play purchase token, which we send to Google to verify the purchase is genuine and, for subscriptions, to check whether it is still active
• The resulting subscription status on your account

Google's handling of your payment is governed by Google's own privacy policy, not this one. Refunds for purchases made in the Android app are handled through Google Play. See our Refund Policy.

5. Where your dream text goes

This section is deliberately specific, because it is the part people most want to know.

The free preview. Your dream text is matched locally, on our own servers, against our library of historical dream-books. The interpretation you read back is written from that library and is not generated by an AI model. One small step in the free path does use an AI model: a word-matching tool produces a list of candidate symbols, and we send your dream text together with that list to Anthropic's Claude API, which answers only with the words that are not really images in your dream. It can remove candidates and never adds any. Up to the first 2,000 characters of your dream text are sent. No name, email or account identifier goes with the request.

The full personal interpretation. When you buy a reading, or generate one as a member, your dream text is sent to Anthropic's Claude API to write the interpretation. No name, email or account identifier goes with the request.

The dream illustration. Your reading includes an image built from your dream. To produce it we send your dream text, or a shortened description of it, to an image generation provider. That provider is currently xAI. We may change provider, and Google is the configured alternative. The prompt also includes wording derived from the pronouns and age band you chose, so that any glimpsed hand or figure reads as you. No name, email or account identifier goes with the request. Faces are never requested and the prompt explicitly excludes them.

Model providers do not receive your identity with any of these requests, and none of them is permitted to use your dream to train a model.

6. How we use your information

We use your personal information to:

• Deliver the service, meaning generating readings, saving your journal and processing payments
• Email you receipts, gift redemption codes, sign-in links and service notifications
• Respond to your support or privacy requests
• Prevent fraud, abuse and technical problems
• Comply with our legal obligations

We do not:

• Sell your personal information to third parties
• Use your dream content to train AI models, our own or anyone else's
• Use your email to send marketing unrelated to In Your Dreams

7. Who we share data with

We share limited information with the following service providers, each under their own privacy and security obligations:

We only share what is necessary, and only with providers that have their own privacy protections.

We will not share your information with anyone else unless:

• You give us permission
• We are required by law, a court order, or a government authority
• We need to protect against fraud, abuse or serious safety issues

8. Dream content handling, in summary

Your dream descriptions are:

• Used to generate your reading and its illustration
• Stored in your dream journal so you can re-read past readings, if you have an account
• Sent to the model providers named in section 5, without your identity
• Not used to train any AI model
• Not shared in the Dreamometer™. Only theme labels are, with your consent
• Published only if you separately ask for it, through the featured-dream checkbox described in section 3
• Not sold to any third party

9. Where your data is held

• Database: Supabase
• Hosting: Railway
• Payments: Stripe and Google, each with its own global infrastructure
• Email: Brevo
• Model providers: Anthropic, xAI, and where configured Google

Because In Your Dreams operates across global cloud services, your data may be processed or stored outside Australia. By using the service, you acknowledge that cross-border transfer.

10. How long we keep your data

• Account data: for as long as you have an active account
• Dream journal entries: for as long as you have an active account
• Payment records: 5 years, to comply with Australian tax and financial record-keeping obligations
• Anonymous product events: 24 months
• Server logs: up to 30 days, then deleted automatically by our hosting provider
• Dreamometer™ contributions: retained as part of the public archive, fully anonymous
• Deleted accounts: your personal data is removed from our live systems as soon as the deletion is confirmed, and in any case within 30 days. Backups are overwritten within 90 days. Anonymous Dreamometer™ contributions remain, because they carry nothing that identifies you

11. Your rights

Under the Australian Privacy Principles and applicable law, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correct: have inaccurate information updated
• Delete: request deletion of your account and associated personal data
• Withdraw consent: change your mind about Dreamometer™ contribution at any time, for future submissions
• Complain: raise a concern with us, or with the Office of the Australian Information Commissioner at oaic.gov.au

To exercise any of these rights, email [email protected]. We aim to respond within 14 days.

To delete your account you can also use our account deletion page, which works whether or not you have the app installed, or go to Account → Delete my account inside the app. That page sets out exactly what is deleted and what is retained.

12. Security

We take reasonable steps to protect your information:

• Passwords are stored as one-way hashed values, so even we cannot see your actual password
• Communications use HTTPS encryption
• Your dream text is stored on encrypted infrastructure at our database provider. It is not separately encrypted by us with a key only you hold, so it is not end-to-end encrypted. Anyone with administrative access to our database could read it, and that access is limited to the operator of In Your Dreams and to our provider under their own security obligations
• Payment data never touches our servers. It is handled directly by Stripe on the web, and by Google Play in the Android app
• Server infrastructure is protected by Cloudflare
• We do not collect or store IP addresses in our database

No system is completely secure. If a data breach occurs that affects you, we will notify you promptly, in line with Australian Notifiable Data Breach requirements.

13. Children

In Your Dreams is designed for adult reflection and is not intended for anyone under 18. The app is distributed with an adult target audience and minors blocked. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe a child under 18 has created an account, please contact us at [email protected] and we will delete the account.

14. Cookies, local storage and device backup

In Your Dreams uses only strictly necessary cookies and local storage to:

• Keep you signed in across sessions
• Remember what you entered on the dream form, so a reload does not lose it. This includes your dream text, name, email, mood, pronouns and age band, held on your own device
• Recover a reading if the app is interrupted while one is being written
• Maintain security during checkout

We do not use advertising cookies or cross-site tracking.

On Android, app data held on your device may be included in Google's device backup if you have that turned on in your Android settings. That backup is between your device and your Google account, and we have no access to it. You can turn it off in your device settings.

15. Changes to this policy

We may update this policy from time to time. The version number and "last updated" date will reflect the most recent change. If we make material changes to how we handle your data, we will notify active users by email.

16. Contact

For any privacy question, concern or request, please email:

[email protected]

We aim to respond to privacy requests within 14 days.

In Your Dreams is operated by Inside Your Library, a sole-trader business based in Queensland, Australia.