Privacy Policy

Last updated: February 7, 2026

Our Commitment

Dreams are deeply personal. Nebula is built on a simple principle: we collect only what's necessary to provide the service and never sell or share your dream content with third parties for their own purposes.

Information We Collect

Account Information

When you create an account, we collect:

  • Email address: Used for authentication and account recovery

Profile Information (Optional)

You may optionally provide:

  • Gender identity: Helps personalize dream interpretations based on research-backed patterns
  • Age range: Helps personalize dream interpretations based on research-backed patterns

This information is entirely optional. You can skip it during onboarding and update or remove it anytime in Settings. If not provided, the app works normally without this context.

Dream Content

When you record and process dreams:

  • Voice recordings: Temporarily processed for transcription, then immediately discarded. We do not store audio files.
  • Dream transcripts: The text of your dreams, stored to generate artwork and analysis
  • Generated images: AI-created artwork based on your dreams
  • Interpretations: Jungian psychological analysis of your dreams
  • Archetypes: Symbols and themes identified in your dreams

Information We Do Not Collect

  • Location data
  • Contacts or address book
  • Photos from your camera roll
  • Health or fitness data
  • Payment or financial information
  • Browsing history
  • Advertising identifiers

How We Use Your Information

  • Provide the service: Process your dreams, generate artwork, and deliver psychological insights
  • Personalization: If you provide demographic information, tailor interpretations to research-backed patterns
  • Account management: Enable you to sign in, recover your account, and manage your data

We do not use your data for advertising, profiling, or any purpose beyond providing the dream journal service.

Third-Party Services

We use the following services to operate Nebula:

Supabase
Authentication and data storage
Account data, dream content, generated images
Privacy Policy →
Google Gemini API
AI transcription and analysis
Voice recordings (temporary), dream text
Terms of Service →
fal.ai
AI image generation
Dream text
Privacy Policy →
RevenueCat
Subscription management
Anonymous user ID, subscription status
Privacy Policy →
PostHog
Product analytics
Anonymous usage events, device type
Privacy Policy →

Your dream content is processed by AI services in real-time to generate artwork and insights. Your data is not used to train AI models. Voice recordings are discarded immediately after transcription.

Data Security

We implement industry-standard security measures:

  • Encryption in transit: All data transmitted via HTTPS/TLS
  • Encryption at rest: Database and storage encrypted with AES-256
  • Access control: Row-level security ensures you can only access your own dreams
  • Authentication: Secure JWT-based tokens with time limits
  • Rate limiting: Per-user limits to prevent abuse

Data Retention

  • Account data: Retained until you delete your account
  • Dreams and images: Retained until you delete them or delete your account
  • Voice recordings: Immediately discarded after transcription; never stored

Your Rights

You have the right to:

  • Access: View all data we store about you within the app
  • Delete: Remove individual dreams or your entire account
  • Correct: Edit your dream transcripts
  • Export: Download your dreams (coming soon)

Account Deletion

When you delete your account, all associated data is permanently removed, including all dreams, generated images, and authentication data. This action is irreversible.

You can delete your account directly in the app: Settings → Delete Account. If you have an active App Store subscription, billing is managed by Apple and does not cancel automatically when your account is deleted. You can manage your subscription from your Apple subscription settings before or after deletion.

GDPR & CCPA

For users in the EU/EEA/UK and California, we comply with applicable data protection regulations including the right to be forgotten, data portability, and the right to withdraw consent. Contact us to exercise these rights.

Children's Privacy

Nebula is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or in-app notification before the changes take effect.

Contact Us

For privacy questions or data requests, contact us at:

contact@nebuladream.app

We aim to respond within 30 days.