Privacy Policy

---

Privacy Policy

Last Updated: December 21, 2025

DreamWave Journal is a personal journaling app designed to help you document and reflect on experiences such as dreams, lucid dreams, and other inner experiences. The app is designed with privacy in mind. Your journal entries remain stored on your device, and we collect limited information necessary to support app functionality and security.

By using DreamWave Journal, you agree to the practices described in this Privacy Policy.

1. Our Approach to Privacy
Your journal entries and personal reflections belong to you. DreamWave Journal is designed to give you control over your content, including built-in features that allow you to export, print, or share entries using your device’s standard sharing options.

By default, entries are stored locally within the DreamWave Journal app on your device. This means your entries are accessible only through the app itself and are not visible as separate files on your device unless you choose to export them.

2. Information We Collect

Account Information (Firebase Authentication)

To provide secure access to your account:

• Email address
• Authentication credentials managed by Firebase Authentication
• Optional display name

This information is managed by Firebase Authentication, a Google service with industry-standard security.

Account Setup and Login Information

We require account creation to use DreamWave Journal for the following reasons:

• Secure access: Your account ensures your locally stored data is protected and only accessible to you, even if multiple users share the same device
• Subscription management: Your account links your subscription and purchase entitlements to ensure proper access to premium features
• Account recovery: Enables password reset and account recovery options
• Data separation: Prevents mixing of data between different users on shared devices

Important: Your account credentials are used solely for authentication and subscription management. We do not use your account to sync, upload, or access your journal content stored on your device.

Local Data (Stored Only On Your Device)

The following stays on your device and is never uploaded to our servers:

• Journal entries (all content you write)
• Your personal Symbol Library
• Plans and routine tracking
• AI conversation history
• Custom breathing patterns

We cannot access this data. It remains on your device unless you choose to export or share it using available features.

AI Usage (Optional)

The AI feature is available with each journal entry. Only when you choose to use AI features in the Wisdom tab, the following is sent to Anthropic (maker of Claude):

• The current journal text content and title within the "Journal" tab you're working with only
• The AI conversation history for that specific entry only
• Experience type selected on "Journal" tab (dream, lucid dream, OBE, NOSC)

Not automatically included:

• Other journal entries
• Your Symbol Library
• "Objective" and "Subjective" tab content
• "Wisdom" tab content
• Images or audio recordings

AI Processing Details:

When you use AI features, data is sent to Anthropic's Claude API with the following safeguards:

• End-to-end encryption in transit (TLS/HTTPS)
• Anthropic states that user content is not stored after processing and is not used for model training.
• Processed in a manner designed to support compliance with applicable privacy laws such as GDPR and CCPA.
• You can view Anthropic's Data Processing Addendum at: anthropic.com/legal

AI Conversation Context:

• Only the current entry's AI conversation is maintained
• AI conversations are stored locally on your device
• You can clear AI conversation history anytime from within the app
• Clearing history does not affect your journal entries

Technical Data

We collect minimal technical information:

• Device type and operating system (for compatibility)
• Crash reports (to fix bugs)
• App version

We do NOT use analytics platforms to track your behavior, feature usage, or time spent in the app.

3. How We Use Your Information

Account Authentication:

• Secure login across devices
• Password recovery
• Account management

App Functionality:

• Store and display your local journal entries
• Process AI requests when you choose to use them
• Enable breathwork and binaural beat features
• Store and display plans and routines
• Send local notifications you've set up

App Improvement:

• Fix crashes and technical issues
• Ensure device compatibility
• Develop features that serve your practice

What we DON'T do:

• Analyze your journal content or dream patterns
• Track which features you use
• Build behavioral or advertising profiles
• Share your data with marketing companies
• Use your experiences for research without consent

4. Sharing Your Information

Firebase Authentication (Google):

• Email and encrypted password for account access
• Firebase does not access your journal content

Anthropic (Claude AI):

• Only when you use AI features
• Only the specific journal entry and conversation context
• Anthropic does not retain your content after processing

Apple App Store / Google Play:

• Subscription and purchase information
• Handled entirely by Apple/Google—we don't see payment details
• DreamWave does not receive access to Apple or Google account identifiers beyond subscription entitlement confirmation.

We NEVER:

• Sell or rent your personal information
• Share data with advertising networks or data brokers
• Provide your journal content to third parties
• Use your data for purposes beyond those stated here

5. Data Storage & Security

5.1 Local Storage

Your journal entries and personal content are stored on your device using secure local database technology. This data remains private and under your control.

5.2 Device Backups

Your device's automatic backup system (iCloud, Google Backup) may include DreamWave data. We don't control these backups. To keep data fully private, you can exclude DreamWave from automatic backups in your device settings.

5.3 Account Security
We take reasonable measures to help protect your account. Account authentication is handled through Firebase Authentication, a secure authentication service provided by Google. We do not store your password directly.

You are responsible for maintaining the confidentiality of your login credentials and for all activity that occurs under your account. We recommend using a strong, unique password and not sharing your credentials with anyone.

5.4 No Cloud Syncing or Backup by DreamWave

We want to be clear about what we DO NOT do:

• We do NOT automatically sync your journal content to cloud servers
• We do NOT back up your journal entries to our servers
• We do NOT have access to your journal content on our servers
• We do NOT store copies of your entries remotely

Your journal data remains exclusively on your device. If you lose your device or uninstall the app without exporting your data first, we cannot recover it for you.

Recommendation: Regularly export important entries using the app's export features to maintain your own backups.

5.5 Network Security

• All data sent to AI services is encrypted in transit (HTTPS/TLS)
• No automatic cloud syncing of journal content

6. Your Rights & Choices

You have complete control over your data:

Access & Review:

• View all your journal entries and content
• Review your account information

Edit & Delete:

• Modify or delete any journal entry
• Modify or delete any symbol from Symbol Library
• Clear AI conversation history
• Delete all local data or your entire account

Export:

• Export entries to PDF
• Export AI conversations to PDF
• Share entries via your device's native sharing features

Disable Features:

• Disable notifications
• Manage app permissions in device settings

Delete Your Account:

• Contact us at support@dreamwavejournal.com
• We'll delete your Firebase Authentication data
• You'll be instructed to clear local data from your device

7. App Permissions

DreamWave may request these device permissions:

• Microphone (Optional): For voice journaling features (if you choose to record audio)
• Camera (Optional): For adding photos to journal entries
• Photo Library (Optional): For selecting existing photos to add to entries
• Notifications (Optional): For reminders and alerts you set within the app
• Face ID (Optional): For quick convenient login and privacy between sessions
• Storage/Files (Optional): For exporting journal entries as PDF or other formats
• Background App Refresh (Optional): For notification delivery and scheduled reminders

All permissions are optional. You can grant or revoke them anytime in your device settings. The core journaling functionality works without these permissions, though specific features (like voice recording or photo attachments) will require their respective permissions.

We do NOT request or require:

• Location services
• Contacts access
• Calendar access
• Health data access
• Bluetooth or NFC

8. Children's Privacy

DreamWave is intended for users aged 13 and older. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please contact us immediately at support@dreamwavejournal.com and we will delete it.

9. Health & Wellness Disclaimer

DreamWave is a personal exploration tool, not a medical or therapeutic service.

Our features—journaling, breathwork, binaural beats, and AI-guided reflection—are designed for personal insight and self-exploration. They are not:

• A substitute for professional mental health care
• A diagnostic tool for psychological or sleep disorders
• Medical or therapeutic treatment
• A replacement for licensed counseling

Our AI uses a Socratic approach—asking reflective questions to guide you toward your own insights. It cannot and does not provide:

• Therapy or clinical advice
• Psychological diagnosis
• Crisis intervention
• Professional mental health support

If you're experiencing:

• Distressing dreams or nightmares
• Mental health challenges
• Sleep disorders
• Psychological distress

Please consult a qualified healthcare provider or mental health professional.

Crisis Resources:

• National Suicide Prevention Lifeline: 988
• Crisis Text Line: Text HOME to 741741
• Emergency Services: 911 (US) or your local emergency number

By using DreamWave's AI features for personal reflection on difficult emotions or experiences, you acknowledge this is for self-exploration only and not a substitute for professional care.

10. Data Retention

Active Accounts:

• Account information remains in Firebase Authentication while your account is active
• Local journal data persists on your device until you delete it
• AI conversation history stays on your device until cleared

Deleted Accounts:

• Firebase Authentication data is deleted immediately
• You're responsible for clearing local data from your device
• Any exported files remain wherever you saved them

Crash Logs:

• Retained for 12 months to identify recurring issues
• Contains no personally identifiable information

11. International Users

DreamWave is available globally. Your data may be processed in different regions:

Firebase Authentication:

• Operates in Google's global infrastructure
• Complies with international data protection laws

Anthropic (Claude):

• Processes AI requests in compliant data centers
• Maintains GDPR and privacy law standards

Your journal content:

• Stays on your device regardless of location
• No automatic international transfer

Rights for European Users (GDPR):

• Right to access your data
• Right to correct inaccurate data
• Right to delete your data
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with your supervisory authority

Rights for California Residents (CCPA/CPRA):

• Right to know what data we collect
• Right to delete your data
• Right to opt out of data sales (we don't sell data)
• Right to non-discrimination

We extend these rights to all users, regardless of location.

11.5 Data Portability and User Control

You have complete ownership and control over your journal content:

Export Options:

• Export individual entries as PDF
• Export AI conversations as PDF
• Share entries through your device's native sharing options (email, messaging, cloud storage of your choice)

Data Control:

• All exported data is in standard formats you can read without DreamWave
• You can export your data anytime before deleting your account
• You control where exported files are stored (your device, cloud service of your choice)
• No proprietary formats that lock you into our app

Manual Backup Recommendation:

Since your journal is stored locally and we don't provide cloud backup, we recommend:

• Regularly exporting important entries
• Saving exports to your preferred backup location
• Maintaining copies before switching devices or uninstalling

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements.

When we make changes:

• We'll update the "Last Updated" date
• Significant changes will be communicated via email or in-app notification
• Continued use after changes indicates acceptance

You can always review the current policy in the app or at dreamwavejournal.com/legal/privacy-policy

13. Third-Party Services

For transparency, here are all third-party services we use:

Firebase Authentication (Google)

• Purpose: Account access and security
• Data: Email, encrypted password
• Privacy: https://firebase.google.com/support/privacy

Anthropic (Claude)

• Purpose: AI-guided reflection (optional)
• Data: Journal entries you choose to discuss
• Privacy: https://www.anthropic.com/privacy

Apple App Store / Google Play

• Purpose: App distribution and subscriptions
• Data: Purchase information
• Privacy: Apple and Google privacy policies apply

Note: All payment processing is handled exclusively by Apple App Store or Google Play Store. DreamWave does not process, store, or have access to your payment card information or payment details. All billing inquiries and subscription management must be directed to Apple or Google.

We do NOT use:

• Analytics platforms
• Advertising networks
• Marketing automation tools
• Social media tracking
• Behavioral monitoring services
• Third-party data brokers

14. Legal Requests

We may disclose account information if required by valid legal process (court order, subpoena, or law enforcement request). Given our local-storage approach, we have limited data to share—primarily Firebase Authentication information.

We will notify you of legal requests unless prohibited by law.

15. Business Transfers

If DreamWave is acquired, merged, or undergoes a business transition, your account information may be transferred. We will:

• Notify you at least 30 days before any transfer
• Give you the option to delete your account
• Ensure the new entity honors this Privacy Policy

In the event of a business transfer, your locally stored journal content will NOT be transferred because:

• It exists only on your device, not our servers
• We do not have access to your journal entries
• Only account authentication data would be part of any business transfer

You maintain complete control and ownership of your journal content regardless of business changes.

16. Governing Law

This Privacy Policy is governed by the laws of the State of Illinois, United States. Any disputes will be resolved in accordance with these laws.

This does not override your rights under local privacy laws in your jurisdiction.

17. Contact Us

For privacy questions, data requests, or concerns:

• Email: contact@dreamwavejournal.com

Response Times (Best-Effort)
We aim to respond within the following timeframes whenever possible:
• Privacy requests: typically within 30 days
• General support inquiries: generally within 5 business days
• Security-related concerns: as soon as reasonably possible, often within 48 hours

Response times may vary depending on request complexity, volume, and availability.

18. App Store Compliance

DreamWave Journal complies with Apple App Store and Google Play Store requirements:

• Age rating: 13+ (due to account requirement and mature themes that may appear in user-generated content)
• In-app purchases: Clearly disclosed subscription pricing and terms
• Privacy labels: Accurately reflect data collection practices as described in this policy
• Data use: Limited to functionality described in this policy
• Parental consent: Required for users under 18 as stated in Terms of Service

Store-Specific Data:

• Apple and Google collect their own usage analytics about app downloads and in-app purchases
• This data is governed by their respective privacy policies
• DreamWave does not have access to this platform-level analytics

19. Our Commitment
We treat your personal reflections with care and respect. DreamWave Journal is built to support private self-reflection while honoring your trust and privacy.