Privacy Policy
Last updated: January 31, 2026
Our Commitment
Dreams are deeply personal. Nebula is built on a simple principle: we collect only what's necessary to provide the service and never sell or share your dream content with third parties for their own purposes.
Information We Collect
Account Information
When you create an account, we collect:
- Email address:Used for authentication and account recovery
Profile Information (Optional)
You may optionally provide:
- Gender identity:Helps personalize dream interpretations based on research-backed patterns
- Age range:Helps personalize dream interpretations based on research-backed patterns
This information is entirely optional. You can skip it during onboarding and update or remove it anytime in Settings. If not provided, the app works normally without this context.
Dream Content
When you record and process dreams:
- Voice recordings:Temporarily processed for transcription, then immediately discarded. We do not store audio files.
- Dream transcripts:The text of your dreams, stored to generate artwork and analysis
- Generated images:AI-created artwork based on your dreams
- Interpretations:Jungian psychological analysis of your dreams
- Archetypes:Symbols and themes identified in your dreams
Information We Do Not Collect
- Location data
- Contacts or address book
- Photos from your camera roll
- Health or fitness data
- Payment or financial information
- Browsing history
- Advertising identifiers
How We Use Your Information
- Provide the service:Process your dreams, generate artwork, and deliver psychological insights
- Personalization:If you provide demographic information, tailor interpretations to research-backed patterns
- Account management:Enable you to sign in, recover your account, and manage your data
We do not use your data for advertising, profiling, or any purpose beyond providing the dream journal service.
Third-Party Services
We use the following services to operate Nebula:
About AI Processing
When you record a dream, the audio is sent to Google's Gemini API for transcription. The transcript is then analyzed to generate psychological insights. Artwork is generated using either Google's Gemini or fal.ai's image models, depending on the selected style. Per their API terms, your data is not used to train AI models. Data is processed in real-time and not persistently stored by these providers.
Data Security
We implement industry-standard security measures:
- Encryption in transit:All data transmitted via HTTPS/TLS
- Encryption at rest:Database and storage encrypted with AES-256
- Access control:Row-level security ensures you can only access your own dreams
- Authentication:Secure JWT-based tokens with time limits
- Rate limiting:Per-user limits to prevent abuse
Data Retention
- Account data:Retained until you delete your account
- Dreams and images:Retained until you delete them or delete your account
- Voice recordings:Immediately discarded after transcription; never stored
Your Rights
You have the right to:
- Access:View all data we store about you within the app
- Delete:Remove individual dreams or your entire account
- Correct:Edit your dream transcripts
- Export:Download your dreams (coming soon)
Account Deletion
When you delete your account, all associated data is permanently removed, including all dreams, generated images, and authentication data. This action is irreversible.
GDPR & CCPA
For users in the EU/EEA/UK and California, we comply with applicable data protection regulations including the right to be forgotten, data portability, and the right to withdraw consent. Contact us to exercise these rights.
Children's Privacy
Nebula is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or in-app notification before the changes take effect.
Contact Us
For privacy questions or data requests, contact us at:
We aim to respond within 30 days.