Privacy Policy

Effective Date: Aug 23, 2024

At Dream Decoder, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our Services.

1. Key Points

Authentication: We collect your email address and profile picture when you sign in using Google or Twitter. This information is shared with Google strictly for authentication purposes. OAuth 2.0 protocol ensures that your login credentials are not shared with us.
Dream Content: Dream content is securely stored in Google Cloud and is shared with our AI provider (such as OpenAI), for processing. This content is completely anonymized—no contact details or personally identifiable information are passed along.
Tracking Information: All tracking information collected through analytics services is anonymized. We use this data to understand user interactions, but no identifiable information is shared.
Messaging App Integration: If you link your account to a messaging app (such as Telegram), conversations through that messaging app will be sent to the app provider. This allows us to integrate features and ensure functionality, but the app provider handles the conversation data according to their own privacy policies.

2. Information We Collect

User Data: Collected through Google OAuth (and Twitter), including email address and profile picture.
Dream Data: Inputted dream content and voice files are securely stored in Google Firestore and Google Cloud Storage, respectively. This ensures that both dream text and related audio files are handled securely and efficiently.
Tracking Data: Collected through analytics services to understand user interactions and improve our services. All tracking data is anonymized to ensure user privacy.

3. How We Use Your Data

Authentication: To manage accounts and personalize your experience.
AI Processing: To analyze and interpret dream data.
Payments: To process transactions securely.
Messaging: To allow account linking and interactions through messaging apps.
Analytics: To understand and improve user experience and website performance.

4. How to Delete Your Data

Deleting Dreams on Our Website: You have the ability to delete each dream directly through our website. Once deleted, the dream will be removed from our systems and will no longer be accessible.
Dreams Through Messaging Apps: If you have shared dreams through a messaging app, you can delete them on that platform according to the app's procedures. However, please note that the dream data will still exist on our website until you delete it through our website interface. To ensure complete removal, you must delete the dream both on the messaging platform and on our website.

5. Third-Party Services

Authentication and Identity Management

Google OAuth
- Data Collected: Email address and profile picture.
- Usage: For authentication and account management.
- Storage: Stored securely in our database.

AI Processing

OpenAI/Groq
- Data Collected: Dream data without personal information.
- Usage: To generate dream interpretations and have conversations with user.

Data Storage

Google Firestore
- Data Collected: Dream data and user settings.
- Usage: To store and manage dream data securely.
Google Cloud Storage
- Data Collected: Audio files for voice chat.
- Usage: To store audio files securely.

Payment Processing

Stripe
- Data Collected: Payment information.
- Usage: We use Stripe to handle payment transactions. When you make a payment, your card information is processed directly by Stripe. We do not collect, store, or have access to your credit card details. Stripe ensures that your payment information is handled securely in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). Our role is limited to managing the transaction process through Stripe's secure platform.

Messaging App Integration

Telegram Bot API
- Data Collected: Data for account linking and messaging interactions.
- Usage: For integration with messaging platforms.

Communication

AWS SES
- Data Collected: Email addresses for system notifications.
- Usage: To send login one-time password or product updates emails.

Analytics

Google Analytics
- Data Collected: Anonymous website usage data.
- Usage: To analyze website performance.
Microsoft Clarity (Occasional Use)
- Data Collected: User interaction data through session recordings and heatmaps.
- Usage: Occasionally used when new features are launched to better understand user interactions and improve the user experience.
- Storage: Data is managed in accordance with Microsoft Clarity's privacy policies.
Umami (Self-Hosted)
- Data Collected: Internal website interaction data.
- Usage: For internal analysis and improvements.
- Storage: Data is stored on our servers and used internally.

6. Use of Dream Symbols for Articles

Symbol Interpretation: We may use symbols extracted from user dreams to write interpretation articles. These articles are intended to provide insights and analysis based on the symbols from various dreams.
Anonymization: The symbols used in these articles are anonymized and aggregated to ensure that no personally identifiable information is included. We do not disclose any specific details about individual dreams or users in these articles.
Purpose: The goal of using these symbols is to create informative content that may help users and others understand common themes and meanings associated with dream symbols.

7. Data Security

We implement industry-standard security measures to protect your data from unauthorized access and ensure its confidentiality.

8. Updates to This Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via our website or email.

9. Contact Us

For questions or concerns about this Privacy Policy, please contact us at [email protected]

By using our Services, you agree to our privacy practices.