Privacy Policy — DreamVoice (Yume no Koe)
1. About This Policy
This Privacy Policy explains how the Operator handles user information in DreamVoice (“Service”).
The Service is intended for users aged 13 or older. Users under 13 may not use the Service. If a higher age requirement applies under the applicable store age rating or local laws, that requirement applies. We do not knowingly collect information from users below the applicable age. If we learn that a user is under the applicable age, we will delete the information. Minors should use the Service with guardian consent.
2. Information Collected
The Service may collect the following:
- User input: dream text, optional title, emotion tags, dream date.
- AI outputs: daily Dream Voice analysis, supportive notes, symbols, summaries/keywords, and Weekly Dream Letter reflections, headlines, body text, highlights, prompts, symbols, and references to source dream entries.
- Identifiers: anonymous auth ID (e.g., Firebase Auth UID), Support ID.
- Usage/technical data: screen/interaction events, Weekly Dream Letter display/create/ready/open/delete/push-open events, crash logs, config fetches.
- Notification data: device tokens, notification permission status, and notification category settings needed to send notifications.
- Device and app information: OS version, app version, device model, language settings, Firebase Installation ID, IP address, and similar technical information.
- Server-stored data: user input (including dream text), AI results, Weekly Dream Letter job state/results/source references, weekly aggregate information such as dream-entry counts, dates, emotion tags, and keywords for the target week, processing state, usage counts.
- Contact info: email address, inquiry content, optional Support ID/device info/screenshots.
3. How It Is Collected
- Entered by users.
- Automatically collected by the app (analytics, diagnostics).
- Issued via authentication (anonymous auth).
4. Purpose of Use
- Provide the Service (daily Dream Voice, Weekly Dream Letter, display, storage, notifications).
- Manage usage limits and prevent abuse.
- Improve quality (troubleshooting, usage understanding).
- Understand Weekly Dream Letter generation status, reading behavior, and notification performance.
- Respond to inquiries and verify identity when needed (e.g., to prevent impersonation).
- Legal compliance and dispute response when required.
5. Third-Party Services
The Operator uses third-party services to provide and operate the Service. Their handling of information is governed by their own policies.
- Google Firebase (authentication, database, hosting, analytics, crash reporting, etc.)
- OpenAI (AI generation)
- Google Forms (support/inquiry form)
Sending to OpenAI
To provide AI-generated features, user input such as dream text, title, emotion tags, dates, daily Dream Voice outputs, source dream information and references needed for Weekly Dream Letter generation, and generated results may be sent to OpenAI.
OpenAI states that API inputs and outputs are not used to train or improve its models by default. However, OpenAI may retain inputs, outputs, and related metadata for a limited period for purposes such as abuse monitoring, service operation, legal compliance, and safety. Retention and handling are governed by OpenAI’s policies and the API settings used by this Service.
6. Disclosure to Third Parties
The Operator does not provide personal information to third parties without consent, unless required by law. However, data may be sent to the above service providers within the scope necessary to provide the Service.
7. Cross-Border Transfer
Because the Service uses cloud services provided by overseas operators, including Google Firebase, OpenAI, and Google Forms, collected data may be processed or stored on servers outside your country/region, including but not limited to the United States.
8. Retention
- On-device data: kept until the user deletes it.
- Server data: in principle kept until the user deletes it.
- Weekly Dream Letter results and job data: in principle kept until the user deletes them.
- Inquiry data: kept as long as reasonably necessary to respond and manage support history, and deleted when no longer needed.
- Logs held by third-party services: follow each provider’s retention rules and may persist for a certain period.
9. User Rights and Choices
- Delete individual dreams.
- Delete Weekly Dream Letters.
- Delete account (which removes related data on device and server).
- Push notification permissions: users can enable or disable push notifications through OS notification settings or in-app settings where available.
- Currently, there is no opt-out UI for analytics or crash reporting.
If you want deletion of information submitted via the support form, please contact the Operator via the contact form.
Even if you delete an individual dream entry, a Weekly Dream Letter generated before deletion may still contain summaries, keywords, symbols, reflections, or other derived information from that entry. To delete those derived weekly results as well, please use the Weekly Dream Letter deletion feature or the account deletion feature.
Identifiers issued through anonymous authentication may remain on the device or be restored after reinstalling the app, depending on the device and OS behavior. To delete related server-side data, please use the account deletion feature.
10. Security
The Operator takes reasonable measures to prevent unauthorized access or leakage, including:
- Encrypted communication (HTTPS)
- Access control and authentication
- On-device data protected by standard OS mechanisms
11. Incident Response
If a breach or similar incident occurs, the Operator will investigate impact, prevent recurrence, and notify when legally required or deemed necessary.
12. Changes to This Policy
This Policy may be updated; notices will be given in-app or on the web.
13. Contact
For inquiries about this Policy: https://forms.gle/9eEJhVS64nKTxdgr8