Privacy Policy — DreamCrane

Effective date: 2026-07-28 Last updated: 2026-07-28

Who we are

DreamCrane is a mobile application that turns a spoken dream into an image and keeps it in a private diary. It is published by ALEKSEI SHELEP, an Individual Entrepreneur registered in Georgia, doing business as Sabai Deep.

• Contact: support@sabaideep.com
• Website: https://sabaideep.com

For the purposes of the GDPR and similar laws, we are the data controller for the data described below.

TL;DR

• You can use DreamCrane without giving us your name or email. By default the app creates an anonymous account tied to your device.
• Your dream text and the images generated from it are stored on our servers, so your diary survives a reinstall — that is the point of the app. They are private to you unless you explicitly share a dream to the Dreamers’ Club.
• Your voice recording is not kept. It is sent for transcription, turned into text, and deleted right after.
• No advertising, no advertising identifiers, no behavioural tracking, no sale of data. We do not build profiles about you.
• You can delete everything from inside the app at any time.

Data we collect

Account data

• Anonymous account (default). When you first open the app we create an account identified by a random identifier, together with a device identifier generated by the app. No name, email, or phone number is involved.
• Signed-in account (optional). If you use Sign in with Apple or Google Sign-In, we receive and store the stable user identifier issued by that provider, the email address it returns (with Apple’s Hide My Email this is a random relay address), and, when the provider supplies it, a display name. We never receive your password.
• Attached to the account: your subscription plan and its expiry, your credit balance, and creation/update timestamps.

Dream content

• The transcript of what you said (this becomes the dream’s text), the automatically derived title, and the date.
• The images generated from it, and the video if you choose to animate a dream.
• The interpretation text, if you ask for one (it is cached so the same dream is not re-interpreted).
• Whether you have chosen to share that dream to the Dreamers’ Club, and the likes it has received.

This content is stored so your diary persists between sessions, devices, and reinstalls. It is not shown to other users unless you switch sharing on for a specific dream.

Voice recordings

The audio you record is uploaded to our server over an encrypted connection and passed to our speech-to-text provider. As soon as the text comes back, our server deletes both the uploaded audio file and the transcription job from that provider. We do not write the audio to our database or keep a copy of it. What remains is the text.

Usage and limits

To enforce fair limits and prevent abuse we store counters: how many dream images you generated on a given day, how many speech-recognition requests you made that day, and when your monthly Pro credits were last granted.

Purchase data

If you buy a subscription or a credit pack, the payment itself is processed by Apple or Google. We never see your card details. We use RevenueCat to manage entitlements: it receives your account identifier and the transaction metadata (which product, when, trial or renewal, whether it was cancelled or refunded) and passes purchase events to our server so that we can unlock features and add credits.

Technical and security records

• An append-only security log of account events (sign-in, token refresh, token reuse, account deletion) which includes the IP address, user agent, device identifier, and timestamp. We keep it to detect account theft and abuse.
• Server logs for operating and debugging the service.
• Error diagnostics. If error reporting is enabled in a given release, technical crash and error context (device model, OS version, app version, stack trace and the account identifier) is sent to Sentry. This is used to fix bugs, not to profile you.

Content moderation

Before an image is generated, the dream text is checked automatically against a moderation service to block prohibited content. This is a technical check of the text; the result is not stored as a profile.

Notifications

The morning reminder is scheduled by your device’s own operating system. It involves no server and no data leaves your phone; the chosen time is stored locally. If a future release offers remote notifications (for example “your video is ready”), enabling them stores a push token linked to your account, which is deleted when you turn them off or delete your data.

What we do not do

• No advertising, no ad networks, no advertising identifiers (IDFA, Android Advertising ID).
• No behavioural analytics or tracking across other apps and websites.
• No selling, renting, or sharing of your data with data brokers.
• No access to your contacts, photo library, calendar, or precise location.
• No use of your dreams to train our own models. (Our providers process them only to return a result to you — see the next section.)

Service providers

To run DreamCrane we share the minimum necessary data with the following processors:

• fal.ai — receives the dream text to generate the image, and the generated image to animate a video. Does not receive your account or contact data.
• Soniox — receives the audio recording to transcribe it. Both the file and the transcription job are deleted by us immediately after.
• OpenAI — receives the dream text for the automatic moderation check and, if you request one, to write the interpretation.
• Anthropic — may be used instead of OpenAI as the interpretation provider, receiving the same dream text.
• Cloudflare (R2) — stores and delivers the generated images and videos.
• RevenueCat — manages subscriptions and credit purchases, as described above.
• Apple and Google — sign-in, billing, and app distribution.
• Sentry — error diagnostics, when enabled.
• Vultr — hosting for our application server and database.

Each of these providers processes data under their own privacy terms and only on our instructions for the purpose described. Some of them are located outside your country, including in the United States; where required, transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent mechanism.

Legal bases (GDPR)

• Performance of a contract — creating your account, transcribing your dream, generating and storing images, handling subscriptions.
• Legitimate interests — security logs, abuse prevention, content moderation, error diagnostics, and keeping financial records of purchases.
• Consent — sharing a dream to the Dreamers’ Club, and enabling notifications. You can withdraw either at any time in the app.

The Dreamers’ Club (sharing)

Dreams are private by default. A dream appears in the shared feed only if you turn on Show in Club for that specific dream, or if you have otherwise consented to it being featured. Shared dreams are displayed without your name or any account identifier — the image, the date, and a like count. You can switch sharing off again at any time, which removes it from the feed.

How long we keep data

• Dreams, images, videos and interpretations — until you delete them or delete your account.
• Anonymous accounts — an anonymous account that shows no activity for 90 days is deleted automatically, together with its dreams and media.
• Security log entries — for the life of the account; deleted with it.
• Purchase records — records of purchase events (an identifier, the product, and the timestamp) are kept for accounting, tax, and fraud-prevention purposes even after you delete your account. They contain no dream content.

Deleting your data

Open Settings → Delete my data in the app. This deletes your account and, in one operation, your dreams, their transcripts and interpretations, the generated images and videos (including the copies stored with our media provider), your likes, your usage counters, and your session and notification tokens. The only thing retained is the purchase record described above.

You can also write to support@sabaideep.com and we will do it for you.

Your rights

Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive a copy of it in a portable form. Most of this you can do directly in the app; for anything else write to support@sabaideep.com and we will respond within 30 days.

Note that for anonymous accounts we have no way to link a request to a specific account without information from the device itself, so we may be unable to identify your data from an email alone.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

Children’s privacy

DreamCrane is not directed at children under 13 (or under the age of digital consent in your country, which may be up to 16 in the EEA). We do not knowingly collect personal data from children. If you believe a child has used the app in a way that needs our attention, contact us and we will delete the account.

AI-generated content

Images, videos, and interpretations in DreamCrane are generated by artificial intelligence from the words you speak. They do not depict real people, places, or events, and images shared out of the app carry a mark indicating their origin. Interpretations are offered for reflection and curiosity only and are not medical, psychological, or therapeutic advice.

Security

Traffic between the app and our servers is encrypted with TLS. Access tokens are short-lived, refresh tokens are stored only as hashes and are rotated on every use with reuse detection, and requests are rate limited. No system is perfectly secure, but we keep the surface small: we hold dream text and images, and almost nothing else about you.

Changes to this policy

If we update this Privacy Policy we will change the “Last updated” date above. Substantive changes will also be communicated in the app.

Contact

Questions about this Privacy Policy can be sent to:

support@sabaideep.com

Jurisdiction

This Privacy Policy is governed by the laws of Georgia, where the publishing entity is registered.