Privacy at ViDream.

We collect only the data needed to provide, protect and improve the parts of ViDream you use.

We use personal data to create and secure accounts; synchronise profiles and dream libraries; provide AI, social, messaging and notification features; answer support requests; prevent abuse; maintain reliability; and meet legal obligations.

Depending on the activity and applicable law, we rely on performance of our agreement with you, our legitimate interests in running a safe and reliable service, your consent for optional features, or a legal obligation. You can withdraw consent at any time without affecting earlier processing.

When you ask ViDream to interpret, categorise or visualise a dream, the content needed for that request follows a two-stage process: Anthropic processes the request to analyse or interpret the dream and produces a visualisation prompt; that prompt is then sent to getimg.ai to generate the dream visualisation or image. Results can be inaccurate and are intended for reflection and creativity, not medical, psychological or professional advice.

Anthropic processes API data as a processor under its commercial terms and does not use data sent through its commercial products to train its generative models unless the customer expressly opts in. Anthropic's documented API default is global routing, meaning inference may run in any available geography; its data-residency controls can restrict inference to US-based infrastructure when configured. Where required for a transfer from the EU or EEA, our agreement with Anthropic includes a Data Processing Addendum and Standard Contractual Clauses.

Private dreams are not used to train ViDream or a third party's general-purpose AI model without your explicit permission. We may use de-identified operational information to evaluate safety, quality and reliability where the data can no longer reasonably identify you.

Dream content can reveal special categories of personal data under Article 9 GDPR, including information about mental health, sexual orientation, religious or philosophical beliefs, political opinions or other sensitive aspects of a person's life. We apply a heightened standard of protection to this content and ask for your explicit consent when you create an account before you submit this type of content to ViDream.

You may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn, but may mean that features which require us to process sensitive dream content are unavailable.

ViDream's AI may analyse patterns, emotions and categories in dreams. This may involve profiling within the meaning of the GDPR. It does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you under Article 22 GDPR; its results are intended only to provide the feature you request.

You can opt out of AI analysis and profiling in your settings. If you opt out, the related AI features will not analyse new dream content.

Dreams are private by default. Content becomes visible to other people only when you publish it, send it or otherwise choose to share it. Your profile and activity are shown according to your privacy settings and actions.

Supported private conversations use end-to-end encryption for message content. ViDream still processes limited metadata needed to deliver messages, maintain device sessions, fight abuse and keep the service secure. Recipients can save or share content they receive, so only send what you are comfortable sharing.

We share data only when needed: with people you choose to interact with; with providers supporting cloud hosting, authentication, storage, notifications, AI, media, security and support; or where required by law. Our current AI processing providers are Anthropic, which analyses and interprets dream content and creates the visualisation prompt, and getimg.ai, which receives that prompt to generate the dream visualisation or image. getimg.ai processes data in accordance with their published terms; location details are being confirmed directly with the provider. Other current categories include Google/Firebase infrastructure, sign-in providers and media services such as GIPHY.

Firestore is hosted in the Google Cloud multi-region eur3 and the primary Firebase Cloud Storage bucket is hosted in the EU multi-region. Google acts as our data processor under the GDPR while ViDream is the data controller. Firebase's Data Processing and Security Terms and, for applicable services, the Cloud Data Processing Addendum include Standard Contractual Clauses for international transfers. Providers may also process data in other countries. We may transfer data during a merger, financing or sale, subject to appropriate confidentiality and notice requirements.

We keep account and content data while your account is active or as needed to provide requested features. When you request account deletion, you have 31 days to cancel the process by signing in again. During that period, the deletion process is paused and reversible. If you do not sign in within 31 days, we permanently delete your account and its associated content.

After permanent deletion, we retain only the minimum data needed for legal purposes, such as disputes, accounting obligations or security, for a further 90 days; it is then completely deleted. Logs and support data linked to a deletion request follow the same 31-day cancellation and 90-day legal-retention logic where appropriate. Other logs and support records may have different, minimum retention periods where their purpose, security risk or legal obligation requires it.

We use technical and organisational safeguards including access controls, encryption in transit and, where applicable, encryption at rest or end to end. No system is completely secure, so please use a strong password and protect access to your devices.

Depending on where you live, you may request access, correction, deletion, restriction, objection or portability of your personal data, withdraw consent, and complain to a data-protection authority. You can change many profile, privacy and notification settings directly in ViDream.

You can request account deletion from the available account controls or contact us. We may need to verify your identity before completing a request and may retain limited data where the law permits or requires it.

For users in the EU/EEA: the GDPR gives you rights of access, rectification, erasure, restriction, objection, data portability and withdrawal of consent. You may lodge a complaint with the supervisory authority competent for your place of residence.

For users in Canada: we process personal information in accordance with the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Residents of British Columbia may also be subject to the British Columbia Personal Information Protection Act (PIPA), and may make a complaint to the Office of the Privacy Commissioner of Canada.

For users in California/USA: the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA) provide rights to know what personal information is collected, request deletion, opt out of the sale or sharing of personal information (the “Do Not Sell or Share My Personal Information” right), and receive non-discriminatory treatment for exercising those rights. ViDream does not sell personal information, so no sale or sharing opt-out is currently required.

Users in other regions are provided the same core protections described above, regardless of specific local requirements.

If a personal-data breach occurs, we will notify the relevant supervisory authority in accordance with the requirements of the applicable jurisdiction, including within 72 hours where required by GDPR, and inform affected users when the law requires it.

ViDream is not intended for children under 13 and we do not knowingly collect their personal data. If local law requires a higher minimum age, that age applies. People under 18 should use ViDream with permission from a parent or legal guardian where required. Contact us if you believe a child has provided data unlawfully.

The website uses necessary cookies or local storage for sign-in, language, security and preferences. Optional technologies are used only as described in our Cookie Policy and, where required, after your choice.

The apps may request access to notifications, camera, photos, microphone or speech features when you choose a function that needs them. You can refuse or later change permissions in your device settings, although the related feature may then be unavailable.

We may update this policy as ViDream, the law or our providers change. We will update the date above and provide additional notice in the website, app or by email when a change materially affects your rights or how we use data.