Privacy Policy — Dreamlore
Last updated: 11 October 2026
Dreamlore ("we", "us") is operated by Bitfuzed (PVT) LTD, a company based in Sri Lanka. Contact: contact@bitfuzed.com. This policy explains what we do with your information.
The short version
- Your dream journal is stored on your device. While you are signed in, it is also backed up to our storage under your account — your dreams, their readings and their pictures — so signing in on a new phone brings it back. Backup is on by default; you can turn it off, and delete the backup, in Settings at any time.
- Signing in is optional. Without an account, your journal stays only on your device and a subscription works on the device that bought it. Signing in carries your Dreamlore Plus subscription and your journal backup between your devices: a subscription bought while signed in is linked to your account, so it works on your other devices too, on Android and iPhone alike.
- When you record a dream, the recording is sent once to our processing service and our AI provider to be turned into text, then deleted from your phone. Neither the app nor we keep the audio.
- A dream recorded on an Apple Watch goes from the watch to your iPhone, and is then handled exactly like one recorded on the phone.
- To generate an interpretation, the text of a dream is sent to our processing service and our AI provider, used only to produce that reading, and not stored by us afterwards.
- We advertise Dreamlore on Facebook and Instagram. To learn which ads bring people in, the app tells Meta when it is opened and when a subscription or trial is bought — never your dreams, recordings, readings or account. You can turn this off in Settings → "Share installs with Meta".
What we collect and why
| Data | Purpose | Where it lives |
|---|---|---|
| Dream transcripts & interpretations | Your journal | On your device (local database), and — unless you turn backup off — a backup copy in our storage, linked to your account |
| Dream pictures | Illustrate a dream you chose to paint | Generated on request; stored on your device and, unless you turn backup off, in your backup |
| Dream recording (transient) | Turn a spoken dream into text | Sent to our proxy → OpenAI when you stop recording; deleted from your phone once transcribed; not retained by us |
| Dream text (transient) | To generate an interpretation, and a picture if you ask | Sent to our proxy → OpenAI at request time; not retained by us |
| Anonymous device token (random ID) | Enforce fair-use limits, and give the one free picture only once | Our proxy (rate-limit counters and a used-free-picture flag, auto-expiring) |
| Email address and display name | Identify your account so a subscription follows you | Firebase Authentication (Google, Apple or email sign-in; with Sign in with Apple this may be a private relay address) |
| Sign-in token (transient) | Check which Plus your account has (given without a purchase, or bought on another device), and link a purchase made while signed in to it | Sent to our proxy when the app checks your plan or a purchase; verified and discarded, not stored |
| Subscription status | Unlock paid features | Google Play Billing or the App Store, verified by our proxy |
| Purchase link | Make a subscription bought while signed in work on your other devices | Our proxy: your account's ID (a random Firebase identifier, not your email), the store's reference for the purchase (an App Store transaction number, or a one-way hash of the Google Play purchase token), which store, and the paid-through date. Removed about two months after the subscription ends |
| Crash reports and app-usage events | Diagnose crashes and see which screens are used | Firebase Crashlytics and Analytics, release builds only |
| App opens and store purchases (ad measurement) | Measure which of our Facebook and Instagram ads lead to installs and subscriptions | Meta's SDK sends Meta that the app was opened, and subscription or trial purchases (product, price, currency), with device details such as model and OS version and, on Android only, the device's advertising ID. On iPhone the app never asks to track you and does not collect the advertising ID; installs are measured through Apple's SKAdNetwork. Release builds only; off when you turn off Settings → "Share installs with Meta" |
A subscription belongs to the Apple Account or Google account that paid for it, and always works on the phone that bought it. While you are signed in it is also linked to your Dreamlore account, so signing in on another phone or tablet brings Plus with it; signing out takes that linked Plus off the device again. If a different Dreamlore account restores the same purchase, the link moves to that account.
We do not collect your contacts or your location, and we do not keep your audio: a recording is sent once to be transcribed, and only the text comes back.
Third parties (sub-processors)
- OpenAI — transcribes a dream you record, generates the interpretation from its text, and the picture if you ask for one. Receives the recording and the dream text, never your identity.
- Google (Firebase) — Authentication (email, display name), Crashlytics and Analytics.
- Meta Platforms — measures our Facebook and Instagram ads: receives app opens and store purchases as described above, never dream content or your account. Meta's own use is covered by its Data Policy.
- Google Play — app distribution, payment processing and subscription state (Android).
- Apple — Sign in with Apple, and App Store distribution, payment processing and subscription state (iPhone).
- Cloudflare — hosts our proxy, which holds the API keys and the rate-limit counters so the app never has to, and stores journal backups (Cloudflare R2, encrypted at rest). A backup is reachable only with its account's sign-in.
Retrieval runs inside our own proxy against a public-domain library shipped with it, so no third party is involved in choosing which passages you are shown. We do not sell personal data.
Our website
Our website may count visits with a cookie-free analytics service. If it does, each page request records the page, the site that linked to it, the country (derived by the network; your IP address is not stored), whether the visitor is a person or an automated crawler, and which download button was pressed. None of it is linked to you, to an account, or to the app.
Retention
Journal data remains on your device until you delete it (Settings → "Clear all dreams", or by uninstalling). Your backup is kept while your account exists and backup is on: a dream you delete is deleted from it too, "Clear all dreams" empties it, turning backup off lets you delete it, and deleting your account deletes it. A purchase link is kept while the subscription lasts and removed about two months after it ends. Apart from backups and purchase links, our proxy keeps only short-lived, anonymous rate-limit counters (auto-expiring). Recordings are not persisted by us, and dream text sent for a reading is not kept apart from your own backup.
Your choices & rights
- Delete your dreams anytime: Settings → Clear all dreams (on this device and in your backup).
- Stop sharing with Meta: Settings → Share installs with Meta. On Android you can also reset or delete your advertising ID in your phone's settings.
- Turn backup off: Settings → Back up my journal. You choose whether to keep or delete the copy already backed up.
- Delete your account, its backup and all local dreams: Settings → Delete account. This removes your Firebase account and your journal backup permanently and cannot be undone. If you have uninstalled the app, email contact@bitfuzed.com and we will delete it for you.
- Deleting your account does not cancel a Google Play or App Store subscription — cancel that in Google Play, or in Settings → your name → Subscriptions on iPhone, or you will continue to be billed.
- To get a copy of your backed-up journal, or to have it deleted without the app, email contact@bitfuzed.com from the address you sign in with.
- If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), you have rights to access/delete/etc.; email contact@bitfuzed.com.
Children
Dreamlore is not directed to children under 18 and we do not knowingly collect their data.
Security
Data in transit is encrypted (HTTPS). Backups are encrypted at rest and can be read or changed only with your account's sign-in. On-device data is protected by your device's security. Your journal is never sold, shared or used to train AI models. No method is 100% secure.
Changes
We may update this policy; material changes will be noted in the app or here.
Contact
Bitfuzed (PVT) LTD, contact@bitfuzed.com, +94702145899