The short version
When you record or type a dream, we send it to Google Gemini so the AI can analyze symbols and generate an image. We store the result in your private journal on Supabase. We do not sell your dreams, we do not use them to train our own models, and you can delete everything at any time.
What we collect
- Account data: email address, password hash (managed by Supabase Auth), and an auto-generated pen name.
- Dream content: the raw text or transcription of dreams you record, plus the AI-generated cleaned text, analysis, keywords, emotional theme, and image.
- Community content (optional): if you choose to share a dream, the shared snapshot, any comments you post, and reactions you give.
- Operational data: error reports (via Sentry) and basic usage events (via Google Analytics).
How dream content is processed
To produce analysis and imagery, your dream text is sent to Google Gemini over the network. Google's handling of API content is governed by its Gemini API terms. We do not have a separate agreement allowing Google to use your dream content to train their models beyond what those terms specify. We do not use your dreams to train any model of our own.
Subprocessors
These services receive some portion of your data so EchoDream can function. None of them receive your password.
| Service | Purpose | Data |
|---|---|---|
| Google Gemini | AI analysis & image generation | Dream text, generated image prompts |
| Supabase | Database, auth, file storage | All account & dream data |
| Vercel | Hosting & serverless functions | Request metadata, dream text in transit |
| Sentry | Error monitoring | Stack traces, user ID (no dream content) |
| Google Analytics | Anonymous usage analytics | Pageviews, events (no dream content) |
Your rights
- Access & export: request a copy of your dreams by emailing the address below.
- Deletion: delete your account and all associated dreams from the Profile page at any time. This action is permanent.
- Correction: you can edit your pen name in your profile; for other corrections, contact us.
- Withdraw consent: because AI processing is core to the product, you cannot withdraw consent and continue using EchoDream. Withdrawing consent is equivalent to deleting your account.
Retention
Your dreams remain in your journal until you delete them or delete your account. We do not auto-delete entries today, but we may add a user-controlled retention setting in the future.
Children
EchoDream is not intended for users under 16. If you become aware that a child has created an account, contact us and we will delete it.
Changes to this notice
If we make material changes (new subprocessor, new data use, retention change), we will update the date at the top of this page and may prompt you to re-acknowledge.
Contact
Privacy questions or requests: support@echodream.io.