APP PRIVACY
Your dreams are yours.
This page explains how the Hypnic app uses your data. For measurement on the website, see the website privacy page.
Last updated: 17 October 2026
Who is responsible?
Data controller: Furkan Mersinli (sole proprietorship, Türkiye). Contact: [email protected].
Hypnic is built by Furkan Mersinli. For any question about your data, write to [email protected].
What data do we collect?
- Account
- Your email address and account ID. If you sign in with Apple or Google, they may also share your name.
- Voice recording
- When you speak, the recording is sent to be turned into text. It is not kept after that.
- Your dreams
- Dream text, the emotions you chose, the date, and Hypnic’s interpretation.
- Dream memory
- People, places and symbols from your dreams, and the corrections you make to them.
- Follow-up answers
- Your answers to the questions asked after an interpretation.
- Monthly summary
- The monthly summary and trend text made from your dreams.
- Profile
- Age range, gender and the city you type; app language and time zone. We do not read your device location.
- Preferences
- Your AI, research and statistics choices, with their dates. Your reminder time stays on your device only.
- Crash reports
- If the app crashes, a technical report is sent. It contains no dream text, email address or name.
- Usage statistics
- Only if you turn them on in Profile: counts of events such as “a dream was recorded”. A random ID is used and it is not linked to your account. Off by default.
- Support purchases
- If you support Hypnic in the app: the size you chose, the quantity, the platform (iOS or Android), the store transaction ID, whether the store confirmed the purchase, and the date. Apple or Google takes the payment; we never see your card details.
- Usage counters
- How many interpretations you used within the free limit, and the daily AI cost of your requests. Only numbers and dates; no dream text.
Why do we use it?
- To keep your dream journal and sync it across your devices.
- To turn your voice into text, interpret your dream, ask follow-up questions and prepare the monthly summary.
- To protect your account, find errors and limit abuse.
- To send sign-in code, welcome and export emails.
- For research, only with your separate permission (see below).
- To record support purchases for accounting, apply the free limit and keep AI costs under control.
We process the data needed to provide the service on the basis of our contract with you, and the data for AI, research and statistics on the basis of your explicit consent. We do not use your dreams for advertising and we do not sell them. The app has no ads.
We keep support purchase records to meet our accounting obligations. We use usage counters on the basis of our contract with you, to apply the free limit and keep the service running.
AI
AI features need your permission. If you allow them, the following is sent to OpenAI: your voice recording (to turn it into text); your dream text, the age range, gender and city in your profile, and relevant parts of earlier dreams and follow-up answers (for the interpretation and follow-up question); the titles and summaries of your dreams (for the monthly summary).
Requests go through Cloudflare AI Gateway, which does not log their content. OpenAI does not use this data to train its models; it may keep it for up to 30 days to monitor abuse.
You can turn the permission off at any time in Profile > Privacy and your data. While it is off, you save dreams by writing them and nothing is sent to AI. An interpretation is not a diagnosis.
Which providers do we use?
- OpenAI
- Transcription, interpretation, follow-up questions and the monthly summary. United States.
- Clerk
- Sign-in and account: your email address and sign-in codes. United States.
- Cloudflare
- Servers, database (European Union), AI gateway and email sending.
- Resend
- Backup email sending if Cloudflare email fails. Sent from Ireland.
- Sentry
- Crash reports. European Union (Frankfurt).
- PostHog
- Usage statistics, only if you turn them on. European Union.
- Apple, Google
- Payment for support purchases (App Store, Google Play), under their own terms. We only receive the store’s confirmation of the purchase.
These companies process data only on our behalf and on our instructions. Transfers to the United States rely on the standard contractual clauses in the providers’ data processing agreements. We may also share data with authorities when the law requires it.
Where and how do we store it?
Data linked to your account is kept in Cloudflare’s database in the European Union. All data is encrypted on disk, and every connection is encrypted with HTTPS. Your dream text, follow-up answers, memory corrections and monthly summaries are also encrypted with our own key.
A copy also stays on your phone. You can remove it with “Delete all data on this device” in Profile.
Only the data controller can open a private admin panel. For each account it shows the email address, the profile and totals such as the number of dreams, AI cost and support purchases. It does not show dream content; the only exception is an AI answer you report to us for review.
How long do we keep it?
- Dreams, interpretations, memory, profile
- Until you delete them or delete your account.
- Voice recording
- Not kept. Deleted once it is turned into text.
- Data you delete
- Deleted from our servers within 24 hours. It can stay in backups for up to 30 days, then it is removed automatically.
- Export file
- Not stored; it is built again for each download. The download link stays open for 7 days.
- Crash reports
- Up to 90 days.
- Usage statistics
- Up to 1 year.
- Records at OpenAI
- Up to 30 days.
- Consent records
- Even after your account is deleted, the consent type, your choice, the text version and the date stay; no content stays. This record shows that we really had your consent.
- Support purchase records
- Kept for accounting until you delete your account, then deleted. Apple or Google keeps its own purchase record.
- Usage counters
- Until you delete your account; deleted with it.
Download or delete your data
Profile > Privacy and your data > Download my data: your dreams, interpretations, memory, profile and support purchases are put into one JSON file.
You can delete a single dream from the Journal. You delete your account and all your data with Profile > Delete my account. Details are on the account deletion page.
You have the right to access, correct, delete and move your data, to object to its use and to withdraw your consent. Write to [email protected]; we answer within 30 days at the latest. You can complain to the data protection authority in your country.
Research permission
Research contribution is a separate permission and is off by default. If you do not give it, the app works the same way.
If you give it, identifying details are removed from your dreams: names of people and places are hidden, dates are reduced to the month and cities to the region. Age range, gender and city can be added at a coarse level. Voice recordings, email addresses, names and account IDs are never included.
Verified research institutions will reach this data only through a logged access interface. Groups of fewer than 6 people are not shown, and data about a single person cannot be requested. Today no institution has access; we will update this page before access starts. These steps reduce the risk; they do not remove it.
When you turn the permission off in Profile, your dreams leave new queries within 24 hours. Aggregate results already published do not change. If you delete your account, your research records are deleted too. Details: for researchers.
Age limit
Hypnic is for people aged 18 and over. If we learn that an account belongs to someone under 18, we delete it.
Changes
If the way we use your data changes, we update this page first. If a new permission is needed, we ask for it in the app.