This Privacy Policy describes the policies and procedures on the collection, use, and disclosure of Your information when You use the Somnivo iOS application (the “Service”), and tells You about Your privacy rights and how the law protects You.
By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
01
Interpretation & Definitions
Interpretation
The words whose initial letters are capitalized have meanings defined below. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
Definitions
- Application refers to Somnivo, the iOS software program.
- Country refers to: Wyoming, United States.
- Device means any device that can access the Service, such as a smartphone or digital tablet.
- Personal Data (or “Personal Information”) is any information that relates to an identified or identifiable individual.
- Service refers to the Application.
- Service Provider means any natural or legal person who processes data on Our behalf, including third-party companies employed to facilitate or support the Service.
- Usage Data refers to data collected automatically when using the Service.
- We / Us / Our refers to the individual developer of Somnivo, located in Wyoming, United States.
- You means the individual accessing or using the Service.
02
Data We Collect
Personal Data You Provide
Somnivo does not require an account. Your dream journal, your onboarding answers and your settings are stored only on Your Device. When You ask for an interpretation, the dream text and those onboarding answers (goal, interpretation style, dream themes and an optional first name) are sent to Our server, which forwards them to OpenAI to generate the answer. We do not store the dream text on Our server; the server keeps only a daily request counter per IP address to prevent abuse, deleted after two days.
Usage Data
Usage Data is collected automatically when using the Service. It may include information such as Your Device’s IP address, device type, operating system version, the features of the Service You interact with, timestamps, session duration, unique device identifiers, and other diagnostic data.
Purchase Data
Somnivo is a paid application. All purchases are processed exclusively through Apple’s App Store. We do not collect, store, or have access to your payment card information. Billing is governed entirely by Apple’s own Privacy Policy and Terms of Service.
03
How We Use Your Data
We use the Personal Data We collect solely for the following purposes:
- To provide and maintain the Service, including monitoring usage to detect and resolve issues.
- To perform our contract — to honor the purchase You made through the App Store.
- To contact You — to send essential notifications such as security updates or important changes to the Service. We do not send unsolicited marketing emails.
- To manage Your requests — to respond to support enquiries You send to Us.
- For service analytics — to understand how features are used and improve the Service experience.
04
Sharing Your Data
Limited Sharing
We share Your data only in the following strictly limited circumstances:
- Supabase: hosts the server that relays interpretation requests to OpenAI. It does not store Your dreams. Supabase acts as a data processor under strict contractual data protection obligations.
- OpenAI: The text of a dream You submit for analysis, together with the interpretation preferences You chose in the app (goal, interpretation style, themes and optional first name), is sent to OpenAI to generate the interpretation. OpenAI processes it as a service provider and, under its API terms, does not use it to train its models. Your dream journal itself is stored only on Your Device.
- Apple App Store: Purchase and device information is handled by Apple as part of App Store infrastructure.
- Business transfers: If the Service is acquired or merged with another entity, Your Personal Data may be transferred. You will be notified before such a transfer takes place.
- Legal requirements: We may disclose Your data if required by law or in response to valid requests by public authorities (e.g., a court or government agency).
05
Data Retention
We retain Your Personal Data only for as long as is necessary for the purposes described in this Privacy Policy, or as required to comply with legal obligations, resolve disputes, and enforce our agreements.
- Usage data: up to 24 months for feature analytics and service improvement.
- Server logs (IP addresses, access times): up to 24 months for security monitoring and troubleshooting.
When retention periods expire, We securely delete or anonymize Your Personal Data. Anonymized data that cannot be linked back to You may be retained indefinitely for aggregate analytics purposes.
06
International Transfers
Somnivo is available globally through the Apple App Store. Your information, including Personal Data, is processed at Our operating location in Wyoming, United States, and may be stored on servers operated by Supabase, which may be located outside of Your country of residence.
Where required by applicable law — including the GDPR for users in the European Economic Area or the United Kingdom — We ensure that international transfers of Your Personal Data are subject to appropriate safeguards. No transfer will take place unless adequate controls are in place to protect the security of Your data.
07
Your Rights & Deletion
Your Rights
Depending on Your location, You may have the following rights regarding Your Personal Data:
- Access: Request a copy of the data We hold about You.
- Correction: Request that inaccurate data be corrected.
- Deletion: Request deletion of Your Personal Data.
- Portability: Request Your data in a portable, machine-readable format (where applicable).
- Objection / Restriction: Object to or restrict the processing of Your data (EEA/UK users — GDPR).
- Non-discrimination: We will not discriminate against You for exercising Your rights (California users — CCPA/CPRA).
Deleting Your Data
Your dream journal is deleted when You delete the app. You may also request deletion of any Personal Data We hold at any time by contacting Us at the email address listed in the Contact section below. We will process Your request within a reasonable timeframe. Please note that We may retain certain data where We have a legal obligation to do so.
California Residents (CCPA/CPRA)
We do not sell Your Personal Data. California residents have the right to know what data is collected, to request deletion, and to be free from discrimination for exercising their privacy rights.
EEA & UK Residents (GDPR / UK GDPR)
If You are located in the European Economic Area or the United Kingdom, You have the right to lodge a complaint with Your local data protection supervisory authority if You believe Your data has been processed unlawfully.
08
Disclosure of Your Data
Law Enforcement
Under certain circumstances, We may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or a government agency).
Other Legal Requirements
We may disclose Your Personal Data in the good faith belief that such action is necessary to:
- Comply with a legal obligation
- Protect and defend Our rights or property
- Prevent or investigate possible wrongdoing in connection with the Service
- Protect the personal safety of users of the Service or the public
- Protect against legal liability
09
Security
The security of Your Personal Data is important to Us. We use commercially reasonable means — including the security features provided by Supabase — to protect Your Personal Data. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and We cannot guarantee its absolute security.
10
Children's Privacy
Our Service does not address anyone under the age of 13 (or under 16 where required by applicable law, such as GDPR). We do not knowingly collect personally identifiable information from children under the applicable minimum age.
If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us immediately. If We become aware that We have collected Personal Data from a child without verification of parental consent, We will take steps to remove that information from Our servers.
11
Links to Other Websites
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party’s site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
12
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top.
Where changes are significant, We will provide a more prominent notice via the Application or by email. You are advised to review this Privacy Policy periodically. Changes become effective when posted on this page.
13
Contact Us
If you have any questions about this Privacy Policy or wish to exercise any of Your rights, please contact Us: