Privacy Policy — DreamCrane

Effective date: 2026-07-28 Last updated: 2026-08-27

Who we are

DreamCrane is a mobile application that turns a spoken dream into an image and keeps it in a private diary. It is published by ALEKSEI SHELEP, an Individual Entrepreneur registered in Georgia, doing business as Sabai Deep.

• Contact: support@sabaideep.com
• Website: https://sabaideep.com

For the purposes of the GDPR and similar laws, we are the data controller for the data described below.

TL;DR

• You can use DreamCrane without giving us your name or email. By default the app creates an anonymous account tied to your device.
• Your dream text and the images generated from it are stored on our servers, so your diary survives a reinstall — that is the point of the app. They are private to you unless you explicitly share a dream to the Dreamers’ Club.
• Your voice recording is not kept. It is sent for transcription, turned into text, and deleted right after.
• Making a picture out of a dream means sending it to AI services run by other companies (Soniox, OpenAI, fal.ai/xAI). The app names them and asks your permission before the first time, and you can withdraw that permission in Settings.
• No advertising, no advertising identifiers, no behavioural tracking, no sale of data. We do not build profiles about you. Anonymous product analytics are asked for on first launch and can be switched off at any time.
• You can delete everything from inside the app at any time.

Data we collect

Account data

• Anonymous account (default). When you first open the app we create an account identified by a random identifier, together with a device identifier generated by the app. No name, email, or phone number is involved.
• Signed-in account (optional). If you use Sign in with Apple or Google Sign-In, we receive and store the stable user identifier issued by that provider, the email address it returns (with Apple’s Hide My Email this is a random relay address), and, when the provider supplies it, a display name. We never receive your password.
• Attached to the account: your subscription plan and its expiry, your credit balance, and creation/update timestamps.

Dream content

• The transcript of what you said (this becomes the dream’s text), the automatically derived title, and the date.
• The images generated from it, and the video if you choose to animate a dream.
• The interpretation text, if you ask for one (it is cached so the same dream is not re-interpreted).
• Whether you have chosen to share that dream to the Dreamers’ Club, and the likes it has received.

This content is stored so your diary persists between sessions, devices, and reinstalls. It is not shown to other users unless you switch sharing on for a specific dream.

Voice recordings

The audio you record is uploaded to our server over an encrypted connection and passed to our speech-to-text provider. As soon as the text comes back, our server deletes both the uploaded audio file and the transcription job from that provider. We do not write the audio to our database or keep a copy of it. What remains is the text.

Usage and limits

To enforce fair limits and prevent abuse we store counters: how many dream images you generated on a given day, how many speech-recognition requests you made that day, and when your monthly Pro credits were last granted.

Purchase data

If you buy a subscription or a credit pack, the payment itself is processed by Apple or Google. We never see your card details. We use RevenueCat to manage entitlements: it receives your account identifier and the transaction metadata (which product, when, trial or renewal, whether it was cancelled or refunded) and passes purchase events to our server so that we can unlock features and add credits.

Technical and security records

• An append-only security log of account events (sign-in, token refresh, token reuse, account deletion) which includes the IP address, user agent, device identifier, and timestamp. We keep it to detect account theft and abuse.
• Server logs for operating and debugging the service.
• Error diagnostics. If error reporting is enabled in a given release, technical crash and error context (device model, OS version, app version, stack trace and the account identifier) is sent to Sentry. This is used to fix bugs, not to profile you.

Content moderation

Before an image is generated, the dream text is checked automatically against a moderation service to block prohibited content. This is a technical check of the text; the result is not stored as a profile.

Notifications

The morning reminder is scheduled by your device’s own operating system. It involves no server and no data leaves your phone; the chosen time is stored locally. If a future release offers remote notifications (for example “your video is ready”), enabling them stores a push token linked to your account, which is deleted when you turn them off or delete your data.

What we do not do

• No advertising, no ad networks, no advertising identifiers (IDFA, Android Advertising ID).
• No behavioural analytics or tracking across other apps and websites.
• No selling, renting, or sharing of your data with data brokers.
• No access to your contacts, photo library, calendar, or precise location.
• No use of your dreams to train our own models. (Our providers process them only to return a result to you — see the next section.)

AI services we send your dream to

Turning a spoken dream into a picture is not something that happens on your phone. To do it, our server sends parts of your dream to AI services operated by other companies. We ask for your permission before any of this happens — the app explains, in its own interface, what is sent and to whom, and you agree to it with an explicit tap. You can withdraw that permission at any time in Settings → Privacy → Sending dreams to AI services; after that the app asks again before it sends anything.

• Your voice recording → Soniox. Converts speech to text. We delete the uploaded file and the transcription job as soon as the text comes back, unless you have switched on the optional voice archive.
• The text of your dream → OpenAI. An automated moderation check, rewriting the dream into a description for the image model, and — only when you ask for one — the interpretation.
• The image description, and the generated image when you make a video → fal.ai and, through it, xAI. Generates the picture and the video for Bring to life.
• The text of your dream → Anthropic. May be used instead of OpenAI to write the interpretation.

No account identifier, name, email address or device identifier is sent with any of this. These services receive the content of the dream and nothing else about you.

Each of them acts as our processor: they may use the content only to produce the result they return to us, they are not permitted to use it to train their models, and they are bound by written terms that require a level of protection for your data equivalent to the one described in this policy.

Other service providers

To run the rest of DreamCrane we share the minimum necessary data with:

• Cloudflare (R2) — stores and delivers the generated images and videos.
• RevenueCat — manages subscriptions and credit purchases, as described above.
• Apple and Google — sign-in, billing, and app distribution.
• Sentry — error diagnostics, when enabled.
• PostHog — anonymous product analytics: which screens are opened and where generation fails, tied to your account identifier only. No dream text, interpretation or recording is ever sent to it, and there is no session recording. We ask you about this on first launch and collect nothing until you agree; you can change your mind at any time in Settings → Privacy.
• Vultr — hosting for our application server and database.

Each of these providers processes data under their own privacy terms and only on our instructions for the purpose described. Some of them are located outside your country, including in the United States; where required, transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent mechanism.

Legal bases (GDPR)

• Performance of a contract — creating your account, transcribing your dream, generating and storing images, handling subscriptions.
• Legitimate interests — security logs, abuse prevention, content moderation, error diagnostics, and keeping financial records of purchases.
• Consent — sending your dream to the AI services listed above, product analytics, sharing a dream to the Dreamers’ Club, keeping voice recordings in the voice archive, and enabling notifications. You can withdraw any of these at any time in the app: AI processing and analytics in Settings → Privacy, Club sharing on the dream itself, notifications in Settings → Notifications.

The Dreamers’ Club (sharing)

Dreams are private by default. A dream appears in the shared feed only if you turn on Show in Club for that specific dream, or if you have otherwise consented to it being featured. Shared dreams are displayed without your name or any account identifier — the image, the date, and a like count. You can switch sharing off again at any time, which removes it from the feed.

How long we keep data

• Dreams, images, videos and interpretations — until you delete them or delete your account.
• Anonymous accounts — an anonymous account that shows no activity for 90 days is deleted automatically, together with its dreams and media.
• Security log entries — for the life of the account; deleted with it.
• Purchase records — records of purchase events (an identifier, the product, and the timestamp) are kept for accounting, tax, and fraud-prevention purposes even after you delete your account. They contain no dream content.

Deleting your data

Open Settings → Delete my data in the app. This deletes your account and, in one operation, your dreams, their transcripts and interpretations, the generated images and videos (including the copies stored with our media provider), your likes, your usage counters, and your session and notification tokens. The only thing retained is the purchase record described above.

You can also write to support@sabaideep.com and we will do it for you.

Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy of it in a portable form. Most of this you can do directly in the app; for anything else write to support@sabaideep.com and we will respond within 30 days.

Note that for anonymous accounts we have no way to link a request to a specific account without information from the device itself, so we may be unable to identify your data from an email alone.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

Children’s privacy

DreamCrane is not directed at children under 13 (or under the age of digital consent in your country, which may be up to 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has used the app in a way that needs our attention, contact us and we will delete the account.

AI-generated content

Images, videos, and interpretations in DreamCrane are generated by artificial intelligence from the words you speak. They do not depict real people, places, or events, and images shared out of the app carry a mark indicating their origin. Interpretations are offered for reflection and curiosity only and are not medical, psychological, or therapeutic advice.

Security

Traffic between the app and our servers is encrypted with TLS. Access tokens are short-lived, refresh tokens are stored only as hashes and are rotated on every use with reuse detection, and requests are rate limited. No system is perfectly secure, but we keep the surface small: we hold dream text and images, and almost nothing else about you.

Changes to this policy

If we update this Privacy Policy we will change the “Last updated” date above. Substantive changes will also be communicated in the app.

Contact

Questions about this Privacy Policy can be sent to:

support@sabaideep.com

Jurisdiction

This Privacy Policy is governed by the laws of Georgia, where the publishing entity is registered.