Privacy Policy

Last updated: January 11, 2025

Hypnolux ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We may collect information that you voluntarily provide when using the Service, including:

• Account Information: Name, email address, and authentication credentials when you create an account
• Profile Information: Display name, preferences, and settings you configure
• Dream Journal Entries: Text content of your dream descriptions, notes, and tags
• Voice Recordings: Audio recordings you create using our voice logging feature
• Images: Photos or images you upload to the Service
• Feedback and Communications: Information you provide when contacting us for support or feedback

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, time spent in the app, interaction patterns
• Log Data: Access times, error logs, and diagnostic information
• Analytics Data: Aggregated usage statistics and performance metrics

2. Voice Data Processing

IMPORTANT INFORMATION ABOUT VOICE DATA

When you use our voice recording feature to log dreams:

• Recording: Your voice is recorded locally on your device when you activate the recording feature
• Transmission: Audio recordings are transmitted to third-party speech-to-text service providers for transcription
• Third-Party Processing: Our speech recognition providers (which may include Google Cloud Speech-to-Text, Apple Speech Recognition, or similar services) process your audio to convert it to text
• Storage: We do not permanently store raw audio recordings on our servers after transcription is complete. Only the transcribed text is retained in your dream journal
• Provider Policies: Third-party speech recognition providers may retain audio data according to their own privacy policies, which we encourage you to review

3. Image Data Processing

IMPORTANT INFORMATION ABOUT IMAGE DATA

When you upload images to the Service:

• Upload: Images you upload are transmitted to our servers and may be stored in cloud storage
• AI Processing: Images may be processed by third-party artificial intelligence services (such as Google Cloud Vision, OpenAI, or similar providers) for analysis and feature functionality
• Purpose: Image processing is used to enhance dream journal entries, provide visual analysis, or support other Service features
• Third-Party Retention: AI service providers may process and temporarily retain image data according to their own privacy policies
• Your Control: You can delete uploaded images from your account, though copies may remain in backups or with third-party providers for a limited period

4. AI and Dream Analysis Data

When we provide AI-powered dream analysis and interpretation:

• Processing: Your dream journal text is sent to third-party AI service providers (such as Google Gemini, OpenAI, Anthropic, or similar services) for analysis
• Purpose: This processing enables features like dream interpretation, pattern detection, symbol analysis, and personalized insights
• Provider Policies: AI providers may use your data according to their terms of service and privacy policies. We encourage you to review these policies
• No Human Review: Your dream content is processed by automated AI systems. We do not routinely have humans review your personal dream content
• Aggregate Insights: We may use anonymized, aggregated data to improve our AI models and Service features

5. Third-Party Service Providers

We work with the following categories of third-party service providers who may have access to your data:

• Cloud Infrastructure: Google Cloud Platform, Amazon Web Services, or similar providers for data storage and computing
• Authentication Services: Firebase Authentication, Apple Sign-In, Google Sign-In for account management
• Speech Recognition: Google Cloud Speech-to-Text, Apple Speech Framework, or similar services for voice transcription
• AI/ML Services: Google Gemini (Vertex AI), OpenAI, Anthropic, or similar providers for dream analysis
• Analytics: Firebase Analytics, Mixpanel, or similar services for usage analytics
• Payment Processing: Apple App Store, Google Play Store, Stripe, or RevenueCat for subscription management
• Push Notifications: Firebase Cloud Messaging, Apple Push Notification Service for notifications

Each third-party provider operates under their own privacy policy and terms of service. We are not responsible for the privacy practices of these third parties.

6. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your dream entries and provide AI-powered analysis
• Transcribe voice recordings to text
• Personalize your experience and provide recommendations
• Send notifications, reminders, and service-related communications
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues or security concerns
• Comply with legal obligations

7. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who assist in providing the Service (as described above)
• Legal Requirements: If required by law, regulation, or legal process
• Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission to share your information

We do not sell your personal information to third parties for their marketing purposes.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. Specifically:

• Account Data: Retained until you delete your account
• Dream Journal Entries: Retained until you delete them or your account
• Voice Recordings: Raw audio is not stored after transcription; transcribed text is retained as part of your journal
• Images: Retained until you delete them or your account
• Analytics Data: Typically retained in aggregated form for up to 26 months

After account deletion, we may retain certain information as required by law or for legitimate business purposes, including backup copies for a limited period.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

10. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information and account
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for data processing where applicable
• Opt-Out: Opt out of certain data processing activities

To exercise these rights, please contact us at privacy@hypnolux.app or use the account settings in the app.

11. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from those in your country. By using the Service, you consent to the transfer of your information to these countries.

13. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights

14. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the rights described in Section 10 above. Our legal bases for processing include:

• Performance of our contract with you (providing the Service)
• Your consent (for optional features)
• Our legitimate interests (improving the Service, security)
• Compliance with legal obligations

15. Disclaimer Regarding AI Processing

IMPORTANT DISCLAIMER

By using the Service, you acknowledge and agree that:

• Your voice and image data will be processed by third-party AI service providers
• We do not control how third-party providers process, store, or use your data beyond our contractual agreements with them
• Third-party AI providers may use your data to improve their services, subject to their own privacy policies
• We are not responsible for any data breaches, unauthorized access, or other security incidents that occur at third-party providers
• AI-generated content and analysis may be inaccurate and should not be relied upon for any important decisions

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@hypnolux.app
Legal Inquiries: legal@hypnolux.app
Website: https://hypnolux.app