Privacy Policy — Dreamlore
Last updated: 18 September 2026
Dreamlore ("we", "us") is operated by R.M.J.P. Kumara, a sole trader based in Sri Lanka,
trading as Bitfuzed. Contact: kumararmjp@gmail.com. This policy explains what we do with
your information.
The short version
- Your dream journal is stored on your device, not on our servers.
- Signing in is required, and it exists to carry a Dreamlore Plus subscription
- Dreamlore never records, saves or uploads audio. When you speak a dream, your
- To generate an interpretation, the text of a dream is sent to our processing
between your devices. It is not used to store or read your journal.
phone's own speech service turns it into text (on Android, Google's speech
recognition, which may run on the device or on Google's servers).
service and our AI provider, used only to produce that reading, and not stored
by us afterwards.
What we collect and why
| Data | Purpose | Where it lives |
|---|---|---|
| Dream transcripts & interpretations | Your journal | On your device only (local database) |
| Dream pictures (Plus) | Illustrate a dream you chose to paint | Generated on request, stored on your device only |
| Dream text (transient) | To generate an interpretation, and a picture if you ask | Sent to our proxy → OpenAI at request time; not retained by us |
| Anonymous device token (random ID) | Enforce fair-use limits | Our proxy (rate-limit counters, auto-expiring) |
| Email address and display name | Identify your account so a subscription follows you | Firebase Authentication (Google) |
| Sign-in token (transient) | Check whether your account has been given Plus without a purchase | Sent to our proxy when the app checks your plan; verified and discarded, not stored |
| Subscription status | Unlock paid features | Google Play Billing, verified by our proxy |
| Crash reports and app-usage events | Diagnose crashes and see which screens are used | Firebase Crashlytics and Analytics, release builds only |
Sign-in is optional for using the journal, but required to hold a subscription.
We do not collect your contacts, your location, or your audio. Dreamlore never
records or stores a sound file; your phone's speech service converts speech to text
and Dreamlore receives only the text.
Third parties (sub-processors)
- OpenAI — generates the interpretation from your dream text, and the picture
- Google (Firebase) — Authentication (email, display name), Crashlytics and
- Google (Android speech recognition) — your phone's speech service converts what
- Google Play — app distribution, payment processing and subscription state.
- Cloudflare — hosts our proxy, which holds the API keys and the rate-limit
if you ask for one. Receives the dream text, never your identity.
Analytics.
you say into text, on the device or on Google's servers depending on the phone,
under Google's own privacy policy. Dreamlore receives only the text.
counters so the app never has to.
Retrieval runs inside our own proxy against a public-domain library shipped with
it, so no third party is involved in choosing which passages you are shown. We do
not sell personal data.
Our website
Our website counts visits without cookies. For each page request it records the page, the site that linked to it, the country (derived by the network; your IP address is not stored), whether the visitor is a person or an automated crawler, which download button was pressed, and any word typed into the dream dictionary search. This uses Cloudflare’s cookie-free analytics. None of it is linked to you, to an account, or to the app.
Retention
Journal data remains on your device until you delete it (Settings → "Clear all
dreams", or by uninstalling). Our proxy keeps only short-lived, anonymous rate-limit
counters (auto-expiring). Dream text is not persisted by us after a reading is returned.
Your choices & rights
- Delete your dreams anytime: Settings → Clear all dreams.
- Delete your account and all local dreams: Settings → Delete account. This
- Deleting your account does not cancel a Google Play subscription — cancel
- Because the journal itself lives on your device, there is no server-side copy of
- If you are in the EEA/UK (GDPR) or California (CCPA/CPRA), you have rights to
removes your Firebase account permanently and cannot be undone. If you have
uninstalled the app, email kumararmjp@gmail.com and we will delete it for you.
that in Google Play, or you will continue to be billed.
your dreams for us to export.
access/delete/etc.; contact kumararmjp@gmail.com.
Children
Dreamlore is not directed to children under 18 and we do not knowingly collect
their data.
Security
Data in transit is encrypted (HTTPS). On-device data is protected by your device's
security. No method is 100% secure.
Changes
We may update this policy; material changes will be noted in the app or here.
Contact
kumararmjp@gmail.com