Privacy Policy

1. Introduction

This privacy policy explains which personal data we process when you use the Dreavie website and web app, why we do so and what rights you have. We only process data that we need to run Dreavie, or for which you have given us your consent.

2. Controller

3. Legal Bases

Under the GDPR, we process your data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR), e.g. for analytics and marketing cookies or the newsletter. You can withdraw it at any time.
• Contract (Art. 6(1)(b) GDPR), e.g. for your user account, dream analysis and purchases.
• Legal obligation (Art. 6(1)(c) GDPR), e.g. retaining invoices.
• Legitimate interest (Art. 6(1)(f) GDPR), e.g. for the secure operation of our website.
• Explicit consent (Art. 9(2)(a) GDPR) if your dream entries contain sensitive data such as health information.

4. Visiting Our Website

When you visit our website, your browser automatically sends technical data to our server: IP address, date and time, requested page, referring website, browser and operating system. We need this data to deliver the website and keep it secure (legitimate interest). It is stored in log files, not combined with other data and deleted after a short time. Our website is hosted by an external hosting provider that processes this data on our behalf.

5. Cookies

We use technically necessary cookies, for example to keep you logged in. They do not require consent. We only use cookies for analytics and marketing if you agree to them in our cookie banner. You can change your choice at any time. You can also block or delete cookies in your browser, but some features may then no longer work.

6. User Account

To use Dreavie, you log in with your email address and a one-time code that we send you by email, or with your Google account. If you log in with Google, we receive your name, email address and profile picture from Google. We also store the time of registration. We use this data to provide our services and to inform you about important changes. Without an email address, we cannot provide you with an account.

Your account data is stored with our database provider Supabase on servers in the EU. You can change your data or delete your account at any time in your account settings.

7. Dream Analysis and AI

To analyse your dreams and answer your chat messages, we process the content you enter and store it, together with the results, in your account. To make your dream journal searchable, we create text vectors from your entries. Your entries are sent to our AI providers Microsoft (Azure OpenAI Service, Ireland) and OpenAI (Ireland), which process them on our behalf and do not use them to train their models. Photos you upload to scan your dream journal are sent to OpenAI for this purpose. Data may be transferred to the USA.

Dreams can be very personal. Only enter what you are comfortable sharing. You can delete individual entries or your entire account at any time.

8. Purchases and Payment

For purchases and subscriptions, we process the data required to conclude and perform the contract. Payments are handled by Stripe Payments Europe, Ltd. (Ireland); we do not receive your full payment details. Data may be transferred to Stripe, Inc. in the USA. More information: https://stripe.com/privacy

If you also use our mobile app, we sync your subscription status between web and app via RevenueCat, Inc. (USA). For this, we transfer your user ID and purchase data. More information: https://www.revenuecat.com/privacy

If you send us a complaint or a withdrawal (including via our online withdrawal function), we use your details only to process it.

9. Contact

If you contact us by email or via our contact form, we use your details (name, email address, message) only to answer your request and delete them afterwards, unless we are legally required to keep them.

10. Emails and Newsletter

We send our emails via Brevo (Sendinblue GmbH, Berlin, Germany). When you create an account, we transfer your name, email address, language and subscription status to Brevo. This lets us send you emails about your account and subscription as well as information about similar Dreavie services. You can opt out of these information emails at any time via the link in every email.

If you subscribe to our newsletter, you confirm your subscription via a link in an email (double opt-in). Unconfirmed sign-ups are deleted after 14 days. Brevo measures whether emails are opened and which links are clicked, so we can improve our emails. You can unsubscribe at any time via the link in every email.

11. Third-Party Services

We use the following services. Except for Matomo without cookies, they are only activated after you have given your consent in the cookie banner. Where data is transferred to the USA, the provider is certified under the EU-U.S. Data Privacy Framework or the transfer is based on EU standard contractual clauses.

12. Data Retention

We delete your data as soon as it is no longer needed for the purpose it was collected for, for example when you delete your account or withdraw your consent. Data that we are legally required to keep, such as invoices, is retained for the statutory period.

13. Your Rights

You have the right to:

• access the data we hold about you
• have incorrect data corrected
• have your data deleted
• restrict the processing of your data
• receive your data in a portable format
• object to processing based on legitimate interest
• withdraw your consent at any time

Just send an email to office@dreavie.com. You can also lodge a complaint with a supervisory authority, in Austria the Datenschutzbehörde (Barichgasse 40–42, 1030 Vienna).

14. Changes

We update this privacy policy when our services or legal requirements change. The current version is always available on this page.