APP PRIVACY

Your dreams are yours.

This page explains how the Hypnic app uses your data. For measurement on the website, see the website privacy page.

Who is responsible?

Data controller: Furkan Mersinli (sole proprietorship, Türkiye). Contact: [email protected].

Hypnic is built by Furkan Mersinli. For any question about your data, write to [email protected].

What data do we collect?

Why do we use it?

We process the data needed to provide the service on the basis of our contract with you, and the data for AI, research and statistics on the basis of your explicit consent. We do not use your dreams for advertising and we do not sell them. The app has no ads.

We keep support purchase records to meet our accounting obligations. We use usage counters on the basis of our contract with you, to apply the free limit and keep the service running.

AI

AI features need your permission. If you allow them, the following is sent to OpenAI: your voice recording (to turn it into text); your dream text, the age range, gender and city in your profile, and relevant parts of earlier dreams and follow-up answers (for the interpretation and follow-up question); the titles and summaries of your dreams (for the monthly summary).

Requests go through Cloudflare AI Gateway, which does not log their content. OpenAI does not use this data to train its models; it may keep it for up to 30 days to monitor abuse.

You can turn the permission off at any time in Profile > Privacy and your data. While it is off, you save dreams by writing them and nothing is sent to AI. An interpretation is not a diagnosis.

Which providers do we use?

These companies process data only on our behalf and on our instructions. Transfers to the United States rely on the standard contractual clauses in the providers’ data processing agreements. We may also share data with authorities when the law requires it.

Where and how do we store it?

Data linked to your account is kept in Cloudflare’s database in the European Union. All data is encrypted on disk, and every connection is encrypted with HTTPS. Your dream text, follow-up answers, memory corrections and monthly summaries are also encrypted with our own key.

A copy also stays on your phone. You can remove it with “Delete all data on this device” in Profile.

Only the data controller can open a private admin panel. For each account it shows the email address, the profile and totals such as the number of dreams, AI cost and support purchases. It does not show dream content; the only exception is an AI answer you report to us for review.

How long do we keep it?

Download or delete your data

Profile > Privacy and your data > Download my data: your dreams, interpretations, memory, profile and support purchases are put into one JSON file.

You can delete a single dream from the Journal. You delete your account and all your data with Profile > Delete my account. Details are on the account deletion page.

You have the right to access, correct, delete and move your data, to object to its use and to withdraw your consent. Write to [email protected]; we answer within 30 days at the latest. You can complain to the data protection authority in your country.

Research permission

Research contribution is a separate permission and is off by default. If you do not give it, the app works the same way.

If you give it, identifying details are removed from your dreams: names of people and places are hidden, dates are reduced to the month and cities to the region. Age range, gender and city can be added at a coarse level. Voice recordings, email addresses, names and account IDs are never included.

Verified research institutions will reach this data only through a logged access interface. Groups of fewer than 6 people are not shown, and data about a single person cannot be requested. Today no institution has access; we will update this page before access starts. These steps reduce the risk; they do not remove it.

When you turn the permission off in Profile, your dreams leave new queries within 24 hours. Aggregate results already published do not change. If you delete your account, your research records are deleted too. Details: for researchers.

Age limit

Hypnic is for people aged 18 and over. If we learn that an account belongs to someone under 18, we delete it.

Changes

If the way we use your data changes, we update this page first. If a new permission is needed, we ask for it in the app.