Privacy Policy

Information We Collect

When you create an account, we collect your email address for authentication. If you sign in via Google OAuth, we receive your name and email from Google. When you submit a dream entry, we store the text you provide along with the AI-generated analysis, images, and associated metadata. We do not collect any information beyond what you explicitly provide.

We automatically collect limited technical data such as your IP address, browser type, and device information for the purpose of maintaining security and improving the Service. We do not use tracking cookies or third-party analytics that profile your behavior across other websites.

How We Use Your Data

Your dream entries are sent to OpenAI for analysis, and the generated images are created using FLUX via our API. The results are stored in your private account. We do not sell, share, or use your dream content for any purpose other than providing the analysis service to you. We do not use your content to train AI models.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases: performance of our contract with you (to provide the Service), your consent (for optional features), and our legitimate interests (to improve the Service and maintain security).

Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS) with row-level security policies ensuring that only you can access your own dream entries. All data is transmitted over HTTPS. We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days.

Third-Party Services

We use the following third-party services to operate DreamRiver:

• Supabase — authentication and database storage
• OpenAI — dream analysis (text sent via API; not used for training)
• Replicate (FLUX) — dream image generation
• Vercel — application hosting
• Stripe — payment processing (we do not store your payment card details)
• Google — OAuth sign-in (optional)

Each service has its own privacy policy governing how they handle data. We encourage you to review their respective policies.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate data
• Deletion — request that we delete your data ("right to be forgotten")
• Portability — request your data in a machine-readable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

You can delete any dream entry at any time from within the app. To exercise any of these rights or to request full account deletion, contact us at brandon@linguosity.ai. We will respond to requests within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise your California privacy rights, contact us at brandon@linguosity.ai.

Children's Privacy

DreamRiver is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly.

Data Retention

We retain your personal data and dream entries for as long as your account remains active. If you delete individual dream entries, they are removed immediately. If you request account deletion, all associated data is permanently deleted within 30 days.

International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated date. If we make material changes, we will make reasonable efforts to notify you via the email associated with your account.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at brandon@linguosity.ai.