Oneiras Privacy Policy

Effective date: September 8, 2026

Oneiras ("Oneiras," "we," "us," or "our") provides a private dream-journaling service on the web and through mobile applications. This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we keep it, and the choices available to you.

Dreams and journal entries can contain intimate information about you and other people. Oneiras also uses artificial intelligence to create interpretations, images, and pattern insights. Please read the sections about AI processing and sharing before using those features.

1. Personal information we collect

Information you provide

Account and profile information, such as your email address, authentication identifiers, profile description, preferences, and optional profile photographs. If you sign in with Apple or Google, we receive the account information that provider makes available under your settings.
Dream and journal information, such as titles, written or dictated dream content, journal context, voice recordings, sleep and wake times, tags, and details about people, places, objects, or events that you include.
Photographs, if you choose to personalize generated images. A photograph may contain information about you or another person. Oneiras does not use photographs to identify or authenticate a person.
Memory information, if you enable Memory, including facts you add or approve, aliases, categories, and source excerpts. Memory is off by default, and suggested facts are not used until you approve them.
Communications and reports, such as support requests, feedback, and reports about generated content. A content report may include a dream or share identifier, the reason selected, optional details, and an account or guest identifier. We do not copy the dream text into the report email.
Information about other people that you include in a dream, journal entry, photograph, or Memory. Please provide it only when you have the right to do so.

Information created while you use Oneiras

AI output and inferences, such as transcriptions, interpretations, images, tags, themes, emotions, characters, locations, objects, and recurring pattern insights. These automated results may be inaccurate and are not medical or psychological diagnoses.
Search information, such as dream-text chunks, vector and keyword search representations, search queries, similarity scores, and result rankings.
Subscription and usage information, such as billing provider, customer, subscription and transaction identifiers, product and plan, amount and currency, billing dates, subscription status, renewal status, and allowance usage. Payment providers, rather than Oneiras, collect complete payment-card or store-payment credentials.
Sharing information, such as share tokens, expiration dates, and the content included on a shared page.

Information collected automatically or from providers

We and providers operating Oneiras may receive device and browser type, operating-system and app version, language, IP address, timestamps, request outcomes, errors, performance information, and identifiers needed for authentication, security, fraud prevention, subscriptions, or notifications.

We may receive account information from Apple or Google; purchase and subscription information from Stripe, Apple, Google Play, or RevenueCat; and notification delivery information from Firebase Cloud Messaging or Apple Push Notification service.

On supported Android devices, Google Play may provide an age range and parental-approval status for significant changes. Oneiras does not receive your birth date. The app evaluates these signals on your device and does not send them to Oneiras servers. We use them only for age-appropriate access and legal compliance, not for advertising, marketing, profiling, or analytics.

The web app may keep an unfinished dream draft in browser storage. The mobile app may keep unsent drafts and recordings in local app storage. This data stays on your device until the app clears it, you clear the app's data, or you uninstall the app.

2. How we use personal information

We use personal information to:

create, authenticate, secure, and administer accounts and guest sessions;
store, synchronize, edit, search, export, share, and delete journal content;
transcribe recordings and generate requested interpretations, images, tags, patterns, and other features;
retrieve relevant past dreams and approved Memory for personalization;
process subscriptions, enforce allowances, prevent duplicate charges or usage, and provide billing support;
provide notifications and service-related communications;
respond to support requests and investigate content reports, abuse, fraud, security incidents, errors, or violations of our Terms;
measure, maintain, debug, and improve service performance and safety; and
comply with law, enforce agreements, and establish, exercise, or defend legal claims.

3. AI and search providers

When you request an AI or search feature, we may send the information needed for that feature to these providers:

OpenAI processes dream text, journal and approved Memory context, and voice recordings for content assessment, transcription, interpretation, metadata extraction, pattern analysis, and image-prompt preparation. To create a dream image showing you, OpenAI may also process the image prompt and up to five optional profile photographs.
Google Gemini processes dream descriptions, prompts, and optional profile photographs to create dream images.
Pinecone processes searchable chunks of dream and journal text and their metadata for semantic and keyword search, search representations, and result ranking. Approved Memory is stored and ranked in AWS, not Pinecone.
Amazon Web Services (AWS) stores and processes account data, journal content, files, Memory, logs, queues, and other records used to operate the service.

These providers may process information in the United States or other countries. Avoid including information you do not want processed for the feature you request.

4. How we disclose personal information

We may disclose personal information to:

AWS for authentication, hosting, databases, file storage, APIs, email, logging, monitoring, queues, backups, and security;
OpenAI, Google, and Pinecone for the AI and search functions described above;
Stripe for web billing, Apple and Google Play for mobile billing, and RevenueCat for mobile subscription administration;
Google and Apple for federated sign-in and notification delivery;
PostHog Cloud for the limited analytics described below;
professional advisers such as lawyers, accountants, auditors, insurers, or security specialists when reasonably necessary;
authorities or other parties when required by law or reasonably necessary to protect rights, safety, property, users, or the service; and
participants in a proposed or completed financing, reorganization, merger, acquisition, sale, insolvency, or similar business transaction, subject to appropriate protections.

We may also disclose information at your direction, including when you create and distribute a dream share link.

5. Shared dreams

Dreams are private unless you create and distribute a share link. Anyone with a valid link may view the title, content, interpretations, and images included on the shared page without signing in. Recipients may copy, capture, save, or redistribute that information. Revoking or expiring a link prevents future access through Oneiras but cannot retrieve copies already made by others.

6. Analytics, cookies, and similar technologies

The web service uses technologies needed for authentication, security, preferences, and operation. Optional marketing measurement is off by default. We store either your allow or decline choice in a first-party preference cookie for up to 180 days. If you allow analytics, we may also store a landing-page experiment assignment, without an account identifier, for up to 90 days. You can reopen Privacy choices at any time. Declining or withdrawing consent prevents new measurement and clears that experiment assignment; it does not erase information already collected. Browser Do Not Track and Global Privacy Control signals keep this optional measurement off. If cookies are blocked, a choice applies only to the current page.

With that optional preference, Oneiras uses PostHog Cloud for a limited set of web events, such as navigation, sign-up progress, dream saves, voice-note duration, image downloads, and upgrade clicks. We configure PostHog in cookieless mode with a daily rotating identifier, no person profiles, no automatic interaction capture, and no session replay. We do not send dream text, photos, email addresses, account identifiers, or URL query strings to PostHog. We do not send these PostHog events from the native iOS or Android apps.

On mobile, RevenueCat processes purchase history for subscription functionality and purchase analytics. Firebase Cloud Messaging processes notification identifiers and service metadata, including metadata used to measure SDK adoption and maintain service quality.

You may block or clear cookies through your browser settings, although some features may not work as intended.

Oneiras does not sell personal information for money, use dream or journal content for targeted advertising, or share personal information for cross-context behavioral advertising.

7. Retention and account deletion

We keep personal information only as long as reasonably necessary to provide Oneiras and for security, fraud prevention, support, accounting, dispute, and legal purposes. We consider the nature and sensitivity of the information, the reason it was collected, the risk of keeping it, and applicable requirements.

Account information, dreams, recordings, images, interpretations, share links, pattern insights, and Memory are generally kept while your account is active. After you request account deletion, we delete this information from active systems within 30 days, subject to the exceptions below.
Deleting an account removes operational usage details. We retain a minimal, content-free deletion marker for up to 30 days so delayed processing cannot recreate deleted usage data.
We retain limited subscription, entitlement, and transaction records for up to seven years from the latest relevant transaction or billing-term date for financial reporting, audits, fraud prevention, disputes, and legal claims. An active legal hold or legal obligation may require longer retention.
Payment and app-store providers may retain their own records under their policies and legal obligations.
Support and safety correspondence, security and application logs, and backups are kept only as long as reasonably necessary for their purpose and are then deleted, deidentified, overwritten, or isolated from ordinary use.
Deidentified information may be kept while it remains deidentified.
Server-side deletion does not erase drafts or recordings remaining only on your device. Clear the app's data or uninstall it to remove those copies.

See Delete Your Account for deletion instructions and additional details.

8. Your choices and privacy rights

You may use account controls to update profile information, manage notifications, revoke share links, delete dreams, and delete your account. You may keep Memory off, pause it, edit or forget approved facts, dismiss suggestions, exclude a dream, or export Memory.

Depending on where you live and subject to applicable exceptions, you may have the right to request access, correction, deletion, or a portable copy of your personal information; obtain information about how it is processed; appeal a denied request; or use an authorized agent. We will not discriminate against you for exercising an applicable privacy right.

Submit a request through the available account controls or email contact@oneiras.com. We may ask for information reasonably necessary to verify your identity, residency, or an agent's authority. If we deny an appeal, you may contact the privacy regulator or attorney general where you live.

You may opt out of marketing email using its unsubscribe link. We may still send necessary account, security, subscription, or service messages.

9. Security

We use technical, organizational, and physical safeguards designed to protect personal information. No internet service or storage system is completely secure, and we cannot guarantee absolute security. If a breach requires notice under applicable law, we will provide that notice.

10. International data transfers

Oneiras is operated from the United States and uses providers that may process information in the United States and other countries. Those countries may have different privacy protections from where you live. Where required, we use an appropriate legal mechanism for international transfers.

11. Children

Oneiras is not intended for children under 13. If you are under 13, do not use the service. Users under 18 must have permission from a parent or guardian when required by law or an app store. If we learn that we collected a child's personal information in violation of applicable law, we will take appropriate steps to delete it. A parent or guardian may contact us using the address below.

12. Other services

Oneiras may link to services we do not control. Their terms and privacy practices apply to them, and we encourage you to review their policies.

13. Changes to this Policy

We may update this Policy. We will post the updated version and effective date and provide additional notice of material changes when required by law.

14. Contact us

For questions, privacy requests, or concerns, email contact@oneiras.com.