Privacy Policy

Last Updated: December 21, 2025

Introduction

Drowsy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our dream journaling mobile application.

Your dreams are deeply personal. We built Drowsy with privacy as a core principle.

Information We Collect

Information You Provide

  • Account Information: Email address and password (optional - you can use the app with limited features without an account)
  • Profile Information: Display name and avatar preference (optional)
  • Dream Content: The dreams you record, including dream titles and descriptions, whether dreams are lucid dreams, dream date and time
  • Life Context: Personal reflections and context you choose to add to help with dream interpretation
  • Follow-up Conversations: Questions you ask about your dreams and the AI responses

Information Collected Automatically

  • App Usage Data: Features used, analysis requests, dreams logged (for achievements and progress tracking - stored locally on your device)
  • Device Information: Device type and operating system version (for app compatibility)
  • Login Activity: Last login date (for streak tracking)

Information NOT Collected

  • Location data
  • Contacts or address book
  • Photos or camera access (unless you explicitly share)
  • Health or fitness data
  • Browsing history

How We Use Your Information

Dream Analysis & Interpretation

  • Your dream content is sent to our AI service (Anthropic Claude) only when you explicitly request an analysis
  • AI analysis is performed in real-time
  • Analysis results are stored securely in your personal account
  • The AI does not retain or learn from your individual dreams

We Use Your Information To:

  • Provide AI-powered dream interpretations and insights
  • Generate personalized patterns and emotional trend analysis
  • Track your progress (streaks, achievements, XP)
  • Sync your data across your devices (if you create an account)
  • Send optional reminder notifications (if enabled)
  • Improve the app experience

We Do NOT:

  • Sell your personal data to third parties
  • Use your dreams for advertising purposes
  • Share your dream content with other users
  • Train AI models on your personal dream data
  • Access your data without your explicit action
  • Send marketing emails without consent

Data Storage & Security

Where Your Data Lives

Local Storage:

  • App preferences and settings
  • Achievement progress and XP
  • Cached dream data for offline access

Cloud Storage (Supabase):

  • Dream content and analyses
  • Life context entries
  • Follow-up chat histories
  • User profile information
  • Subscription status

Security Measures

  • All data transmission uses HTTPS/TLS encryption
  • Database encryption at rest
  • Row-Level Security (RLS) policies ensure you can ONLY access your own data
  • Passwords are hashed using industry-standard algorithms (never stored in plain text)
  • Authentication tokens with secure expiration
  • We use Supabase's enterprise-grade security infrastructure

Row-Level Security

Our database implements strict Row-Level Security policies:

  • Each user can only read, update, or delete their own data
  • Not even our development team can read your dream content
  • All queries are automatically filtered by your user ID

Your Privacy Controls

You Can:

Use Without Account

Basic journaling works without registration

View All Data

See all dreams, analyses, and context you've added

Delete Individual Dreams

Remove any dream and its associated analysis permanently

Delete Your Account

Request complete deletion of all your data

Export Data

Download your complete dream journal

Lock the App

Enable biometric (Face ID/Touch ID) protection

Data Retention

  • Your data is retained as long as you have an active account
  • Deleted dreams are permanently removed within 30 days
  • Account deletion removes all associated data within 30 days
  • Local data is cleared when you log out or uninstall the app

Third-Party Services

Services We Use:

ServicePurposeData Shared
SupabaseDatabase, Authentication, Edge FunctionsAccount info, dream content, analyses
Anthropic (Claude AI)Dream interpretation & analysisDream text (processed in real-time, not stored by Anthropic)
Apple App StorePayments & SubscriptionsPurchase info (handled entirely by Apple)
Apple Push NotificationsRemindersDevice token only (no dream content)

Children's Privacy

Drowsy is rated 4+ on the App Store and is suitable for all ages. For users under 18, we recommend parental guidance. We do not knowingly collect personal information from children without parental consent. If you believe a child has provided personal information without appropriate consent, please contact us.

Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update inaccurate information
  • Deletion: Request removal of your data
  • Portability: Export your data in a readable format
  • Withdraw Consent: Opt out of optional data processing
  • Restriction: Limit how we use your data

For California Residents (CCPA)

You have the right to know what personal information we collect and how it's used. We do not sell personal information.

For EU/UK Residents (GDPR)

You have enhanced rights including data portability and the right to be forgotten.

To exercise these rights, contact us at: hello@dreamjournal.com

Summary

Dream ContentEncrypted, only you can access it
AI AnalysisProcessed in real-time, not stored
Personal DataNever sold, never shared
AccountOptional - basic features work without
Data DeletionYou can delete everything, anytime
PaymentsHandled by Apple

Your dreams stay yours. Always.

If you have questions about this Privacy Policy or your data:

Email: hello@dreamjournal.com

Response Time: We aim to respond within 48 hours