Privacy Policy for Dream4

1. Introduction

Dream4 is a platform designed to support personal growth through intentions, journaling, reminders, calming tools, and an interactive AI coach. While our chatbot offers reflective guidance, please note that it is not intended to provide professional, medical, or legal advice. Use of the Service is at your own risk, and you are solely responsible for any decisions or actions taken based on the content provided.

2. Information We Collect

3. Data Protection and Storage

We implement industry-standard security measures to protect your data:

• TLS encryption in transit for all data transmission
• Regular security audits and penetration testing
• Secure data storage in ISO 27001 certified facilities
• Automatic data backups with encryption
• Regular privacy compliance assessments

4. How We Use Your Information

Your information is used for the following purposes:

• Providing and Maintaining the Service: To deliver personalized content, send notifications, and facilitate chatbot interactions.
• Improvement and Personalization: To analyze usage patterns, improve our Service, and tailor our content to your interests without sending journal text, chat text, assessment answers, or raw emotional content to product analytics tools.
• AI Processing: Some AI features are processed through trusted third-party AI providers, including OpenAI and Anthropic, operating under confidentiality and security commitments. We send only the content needed to provide the requested AI feature, safety checks, and related service functionality.
• AI Provider Restrictions: We do not permit third-party AI providers to use your content for their own purposes or to train public, shared, or provider-owned AI models. Provider retention is limited by our agreements and settings and may include short-term security, abuse-prevention, or legal retention where required.
• Model Training and Prompt Improvement: Your conversations, journal entries, goals, and assessment answers are not used to train public or shared AI models. If you explicitly opt in to data collection or prompt improvement during onboarding or in settings, Dream4 may use selected interaction data internally to improve Dream4 prompts, safety checks, and product quality. You can turn this off in settings.
• Product Analytics: We use product usage patterns associated with Dream4's privacy-preserving user ID, or in aggregated form, to understand feature performance and improve the Service. Product analytics do not include email addresses, journal text, chat text, assessment answers, or raw emotional content.
• Limited Human Review: Authorized personnel may review limited user content only when needed for safety investigations, technical troubleshooting, support requests, abuse prevention, legal requirements, or when you explicitly enable data inspection or similar review settings.
• Emotional Data Limits: We do not use emotional data for advertising, employment decisions, insurance scoring, credit eligibility, or manipulative behavioural targeting. Dream4 does not infer or present psychological diagnoses, and we do not create persistent psychological profiles for third-party monetization.
• Communication: To respond to your inquiries and provide customer support via [email protected].
• Legal Compliance and Security: To meet our legal obligations and protect the security and integrity of our Service.
• Payment Processing: To process and manage your payments and subscriptions.
• App Store Compliance: To comply with App Store and Google Play Store policies and requirements.
• Linked coach or organization access (opt-in): Employers, coaches, and organizational partners cannot access private journals, conversations, goals, insights, or usage statistics unless you explicitly connect with an access code and enable the specific sharing category. Individual reflective content is never used for employment evaluation. Organizations receive only aggregated or anonymized wellbeing insights unless you explicitly choose to share individual content. You can review and change these permissions at any time in the app.
• Analytics: To understand user behavior and improve our Service across web and mobile platforms.
• Dream4 provides AI-generated content tailored to your message tone. No biometric or real-time emotion data is used. We comply with GDPR and the EU AI Act (Article 50).

We process your personal data based on legal grounds provided by the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable laws.

5. Data Retention and Security

We retain your personal information only as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. You can request deletion of your stored data at any time through the app settings or by contacting support. For mobile app users, uninstalling the app does not automatically delete data previously stored through the Service. We implement industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee the absolute security of your information.

Data Deletion

You can request deletion of your data by:

• Using the deletion option in app settings
• Contacting [email protected] with your deletion request
• For EU users, using your GDPR right to be forgotten

6. Your Rights

If you are located in the European Union, you have certain rights regarding your personal data under the GDPR. These rights include:

• The right to access your personal data.
• The right to correct inaccurate data.
• The right to request deletion of your data.
• The right to restrict or object to certain processing of your data.
• The right to data portability.

To exercise any of these rights or if you have any questions about your personal data, please contact us at [email protected].

7. Third-Party Links

Our Service may contain links to third-party websites that are not operated by us. We are not responsible for the privacy practices or the content of these third-party sites. We encourage you to review the privacy policies of any websites you visit.

8. Disclaimer and Limitation of Liability

• No Professional Advice: The information provided by our chatbot and other personal growth content is for general informational and educational purposes only and is not a substitute for professional advice.
• User Responsibility: You acknowledge and agree that any reliance on the content provided by Dream4 is at your own risk.
• No Harassment Claims: While we strive to create a positive environment, our Service is not liable for any claims of harassment or harm resulting from user interactions. Use of the Service is provided "as is" without warranties of any kind.

9. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from individuals under this age. If you believe that we have inadvertently collected such data, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date". We encourage you to review this policy periodically.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

[email protected]

Thank you for trusting Dream4. We are committed to protecting your privacy and providing a secure, supportive experience as you reflect, set intentions, and build supportive habits.

12. Mobile App Specific Provisions

For users of our mobile applications:

• App Permissions: We only request necessary device permissions and clearly explain their purpose when requested.
• Data Collection: Some features may collect additional data (like device ID) for app functionality and improvement.
• Third-party Services: Our apps may use third-party services such as Firebase for notifications and crash reporting, PostHog for product analytics, payment processors for subscriptions, and trusted AI providers for AI features. We do not send journal text, chat text, assessment answers, or raw emotional content to product analytics tools.
• App Store Compliance: We comply with all Apple App Store and Google Play Store privacy requirements.
• Mobile Security: We implement additional security measures specific to mobile platforms.
• Offline Data: Any data collected while offline is encrypted and synced when connectivity is restored.