Privacy Policy

1. Introduction

This Privacy Policy explains how somnara ("we", "us", "our") collects, uses, and protects your personal data when you use our website or mobile application. We respect your privacy and are committed to protecting your personal data.

2. What Data We Collect

We collect the following types of data:

• Account Information: Email address and name during registration
• Dream Content: Your dream entries, tags, and associated emotions
• Optional Analytics and Diagnostics: Screen and feature interactions, crash logs, and performance data only when you enable them
• Device Information: Device type, operating system, and app version
• Advertising Data: Advertising identifiers (IDFA/AAID), ad interactions, and approximate location (derived from IP) used for ads
• Subscription Data: A purpose-limited account identifier, product, purchase status, and entitlement status
• Voice Transcription: A voice recording only when you choose to record and request transcription; the audio is not stored in your somnara account
• Online Dream Interpretation: Dream text, selected emotion, optional context, and pseudonymized device and IP hashes used to prevent abuse

3. How We Use Your Data

We use your data for the following purposes:

• Service Provision: Storing and managing your dream entries
• AI Analysis: Processing your dreams to generate interpretations and visualizations
• Communication: Sending important app updates and service messages
• Improvement: Analyzing app usage and diagnostics to improve our services only when you enable these optional choices
• Advertising: Showing ads, measuring ad performance, and personalizing ads where permitted

4. Data Storage and Security

Your account data is securely stored with Appwrite. We use industry-standard encryption for transmission and storage. Content needed for AI processing is decrypted and sent to OpenRouter and the selected model provider only when you explicitly request that processing. Online interpretation data that you do not import is stored with additional application-layer encryption and automatically deleted within 7 days; imported interpretations become private account data and can be deleted with the dream or account.

5. Data Sharing

We do not sell your personal data. We share limited data with service providers to operate the app, process AI analysis, and deliver ads:

• Appwrite: For secure data storage and authentication
• Google Gemini AI: Depending on the configured model, may provide explicitly requested dream interpretation, transcription, or visualization processing
• OpenRouter: For AI features, required content is decrypted on somnara servers and sent to OpenRouter. Interpretations and images use Google models; OpenRouter routes the request to an available model endpoint.
• RevenueCat: For purchase processing, subscription status, and feature entitlements using your purpose-limited account identifier
• Google Firebase Analytics: For optional app-interaction analytics only when you enable usage analytics
• Sentry: For optional crash and performance diagnostics only when you enable diagnostics; somnara does not attach screenshots, names, email addresses, or account IDs
• Google Mobile Ads (AdMob): For ad delivery, measurement, and consent; may use advertising identifiers and ad interaction data

AI features and your consent

For AI features, required content is decrypted on somnara servers and sent to OpenRouter. Interpretations and images use Google models; OpenRouter routes the request to an available model endpoint.

Interpretations and follow-up questions: dream text, an available name, values, relationship names and types, significant events, and known dream symbols, themes, emotions and people.

Dream images: dream text, mood and selected image style.

Voice transcription: your recorded audio file is sent to OpenRouter’s speech recognition service. The recording is not saved in your somnara account.

Before you first use each AI feature, we ask for permission. We store the permitted feature, notice version and time locally, separately for each account. You can withdraw permissions in Settings → AI & privacy. Saving and reading your journal remain available without consent. Withdrawal applies to future requests and cannot recall data already transmitted.

Processing and possible retention by AI providers follow the privacy terms of the selected endpoint. The current configuration does not guarantee blanket zero retention. We disable the OpenRouter request cache; this does not replace a provider retention commitment.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can view all your data through the app
• Correction: You can edit your dream entries and profile information
• Deletion: You can delete individual dreams or your entire account
• Data Portability: You can export your dream data

7. Cookies and Tracking

The website uses analytics cookies (Google Analytics) only with your consent; your choice is stored for up to 6 months. The online dream tool uses necessary or functional cookies for abuse prevention (up to 12 months) and a stable hero test variant (up to 90 days). The mobile app does not use cookies. Optional Firebase Analytics and Sentry diagnostics remain off until enabled. You can manage ad consent in the app and device settings.

8. Children's Privacy

somnara is not intended for children under 13 years of age. If you are under the age of consent in your country (for example under 16 in parts of the EU), please use the app only with parental permission. We do not knowingly collect personal data from children.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through an in-app notification.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through our contact form. Patrick Fürderer-Tosolini, Pestalozzistr. 100/2, 70736 Fellbach, Germany.