Dream Meaning — Privacy Policy

2 About this app & the developer

Dream Meaning is a multilingual AI dream-interpretation app. It generates readings across traditions (for example Ibn Sirin / Swapna Shastra / Universal) in six languages, helps you keep a private dream journal, and is designed for entertainment and personal reflection.

The app is developed and operated by Itqano (the Android application package is com.itqano.dreammeaning). When this policy says “we”, “us” or “our”, it means Itqano as the developer and operator of Dream Meaning.

3 The short version (TL;DR)

• ✗ We do NOT collect your name, email, phone number, age, gender, or location.
• ✗ There is no account and no login.
• ✓ Your dream journal is encrypted on your device.
• ✓ Dream text is sent to our server only to generate your reading, is passed to our AI provider, and is then discarded — it is never stored.
• ✓ You can erase everything instantly with Profile → Erase all data.

4 Information we do NOT collect

We do not collect personally identifiable information (PII). Specifically, we do not collect or require:

• Name, email address, phone number, or any contact details.
• Date of birth, age, or gender.
• Precise location (the app does not request GPS).
• An account, password, or login of any kind.
• An advertising identifier linked to your dream content — your dream text is never associated with any advertising ID by us.

Because there is no account, none of your journal data is ever tied to an identity we hold about you.

5 Permissions the app requests and why

• Network (INTERNET) — required to call our AI backend so we can generate your reading. The app needs an internet connection; there is no offline interpretation.
• Microphone (RECORD_AUDIO) — optional, for on-device speech-to-text so you can dictate your dream instead of typing. The audio is processed on your device and never leaves the device; only the resulting text transcript is sent (see Section 7 & 9).
• Biometrics — optional, only if you personally enable the journal lock. Authentication is performed entirely on-device by the operating system; no biometric data is ever collected or transmitted.

You can decline any optional permission and continue using the app (for example, by typing instead of speaking).

6 Data stored on your device

The following is stored locally on your device and is never automatically synced to any server:

• Your selected language and tradition.
• Your credit balance and transaction history (used for the in-app economy).
• Your encrypted dream journal, protected at rest with SQLCipher (AES-256 encryption).
• App settings, including the biometric journal-lock toggle and your last-opened tab.

All of this data lives only on your device until you choose to remove it.

7 Data we transmit (and how it’s used)

When you request a dream interpretation, the following is sent over a secure HTTPS connection to our backend proxy at https://rupcharcha.com/dreammean:

• The dream text (typed or transcribed from speech).
• Your selected language and tradition.
• An anonymized device ID that the app generates itself (it is not a hardware identifier and is not tied to your identity).

Our backend forwards the dream text to our AI provider (see Section 8) to generate your reading and immediately discards it. Our server never stores the dream text.

What our backend logs do (and do not) contain

For rate-limiting, cost-control, and reliability, our backend keeps short-lived operational logs that contain only:

• timestamp, language, tradition, and a feature tag;
• the AI provider used, latency, and success/failure;
• cache hit/miss, estimated cost, and the anonymized device ID;
• a hashed cache key.

These logs never contain the dream content itself. This is enforced by design: the request body is read, forwarded, and released without being persisted.

8 AI providers

Interpretations are generated by third-party AI models accessed exclusively through our proxy (no API keys are ever shipped inside the app). The current providers are:

• Primary: Google Gemini (gemini-2.5-flash-lite).
• Fallback: Z.AI / Zhipu (glm-4-flash-air), used if the primary is unavailable.

To generate your reading, your dream text is processed by these providers under their own privacy practices (see Google’s and Z.AI/Zhipu’s privacy policies). The provider’s output is returned to you and written into your local journal; the text is not retained on our servers.

To personalise results, the app may include recent dream context (symbol patterns) only within your own device’s session — this context is derived from your local journal and is never used to build a profile about you.

9 Speech recognition

Voice input uses Android’s on-device speech services via the speech_to_text plugin. Your spoken audio is processed locally on the device; only the resulting text transcript is transmitted to our backend as described in Section 7. The raw audio is not uploaded.

10 Advertising

To keep a free tier available, the app may show ads through Google AdMob (app-open, interstitial, rewarded, and banner formats).

• For users in the EEA / UK, we use Google’s User Messaging Platform (UMP) to request your consent before showing personalized ads.
• AdMob may use a device advertising ID and coarse location in accordance with Google’s privacy policy.
• Rewarded ads are always optional and are never required to use the app — typing and viewing readings remains available.
• You can change or withdraw your consent at any time in your device’s ad-privacy settings.

11 In-app purchases

The Day Pass and Week Pass are sold through Google Play Billing and are processed by Google. We receive only purchase-verification signals (such as whether a pass is valid) — we never receive your payment-card or billing details.

12 Fonts

The app loads typefaces via Google Fonts (the google_fonts package), which may fetch font files from Google’s servers. No personal information about you is sent with these font requests.

13 Analytics & crash reporting

No analytics or crash-reporting SDK is active in the current build. If one is added in the future, any crash breadcrumbs will be stripped of dream content before being sent, so your journal remains private.

14 Children

Dream Meaning is a general-audience app and is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children and we do not perform behavioral advertising targeting of children. The app is rated Everyone / PEGI 3+.

15 Data security

• Your dream journal is encrypted at rest with AES-256 via SQLCipher.
• Your credit balance is protected by an HMAC tamper-checksum; any externally modified balance is detected and reset.
• All network traffic is HTTPS only — there is no plaintext fallback.
• Provider API keys and other secrets are kept server-side and are never bundled in the app.
• The device identifier used for rate-limiting is self-generated and anonymized, not a hardware identifier such as an IMEI or Android ID.

16 Data retention & deletion

All of your data lives on your device until you remove it. To erase everything immediately, use Profile → Erase all data, which clears your journal, credits, and settings in one step.

Because we hold no server-side dream content and no account, deleting the app (or clearing its data on your device) is the complete erasure of your information — there is nothing further to delete from our servers.

17 Your rights

Depending on where you live (for example under the GDPR / UK GDPR), you may have rights such as access to, correction of, or deletion of personal data. Because we hold no personal data about you, exercising these rights is as simple as clearing the app’s data on your device (Profile → Erase all data, or uninstalling).

18 International data transfers

To generate your reading, your dream text may be processed by our AI providers (such as Google or Z.AI/Zhipu) in regions or countries outside your own. These transfers are governed by the providers’ own terms and privacy commitments.

19 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the app or for legal reasons. When we do, we will revise the “Last updated” date above; the updated policy takes effect from that date. Continued use of the app after a change indicates your acceptance of the revised policy.

20 Contact

If you have any questions about this Privacy Policy or your data, you can contact the developer and operator of Dream Meaning:

Itqano
Email: support@itqano.com
Website: https://itqano.com