Privacy.
What we collect, why we collect it, and what you can change.
Who we are and how to contact us
Dreamgraph is operated by an Australian sole trader based in New South Wales. This policy explains how we handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
For any privacy question, correction, access request or complaint, write to privacy@getdreamgraph.com. We aim to reply within 30 days.
What we collect
We collect only what the product needs, and most of it is optional.
- Your account email address and password, handled by our authentication provider. We never see your password.
- Where you dream: a city and country you type in, and how you want your matches grouped (city, country or global). You can also set a different city and country on an individual dream.
- Optional details about you, all of which can be left blank: first name, date of birth or age band, gender, birth city, birth country, nationality, heritage, ethnicity, blood type, relationship status, profession, whether you have children, and life events in the past year.
- Optional entries about your own children that you choose to add: a first name, a birth year, or neither.
- The dreams you write, with the date you assign them and the time you logged them.
- Your preferences: excerpt sharing, softened themes, muted themes, and your three connection alert channels.
- Technical basics: an authentication session stored in your browser, and, if you turn push notifications on, the push subscription details your browser provides.
Sensitive information
Ethnicity, heritage and blood type are sensitive information under Australian privacy law. Blood type is also health information.
We collect these three only with your express consent, given by ticking the consent box beside those fields. They are always optional, they are used only for aggregate cohort matching, they are never displayed to anyone, and you can clear them at any time in Settings. Clearing them never requires consent.
How we use it
- Theme extraction and moderation. The text of each dream is sent to our AI provider, which returns the central themes and a moderation assessment. A numerical representation of the text is also generated so similar dreams can be compared.
- Aggregate pattern analysis. Themes are counted by date, region and cohort so the observatory can show what a region dreamed.
- Anonymous excerpts. If excerpt sharing is on, short snippets of your processed dreams may appear in collective views without your name or any identifying detail. You can switch this off in Settings at any time.
- Connection alerts, in the app, by email and by push notification. Each channel has its own toggle in Settings, and every alert email carries an unsubscribe link.
- A research baseline. Alongside real dreams we hold a labelled synthetic corpus, written by us and informed by published dream research, used to work out what is normal. Synthetic entries are tagged as such and are never anyone's real dream.
Who processes it
- Supabase, for the database and authentication.
- Anthropic, for AI classification and moderation of dream text.
- Lovable, which hosts the application, provides the embedding service, and delivers our email from our verified sending domain.
- Your browser vendor's push service, if you turn push notifications on.
- Google, for aggregate website analytics on getdreamgraph.com, described in the cookies and analytics section below.
Some of these providers store or process data outside Australia, including in the United States. By using Dreamgraph you consent to that overseas handling.
Privacy floors
No pattern is shown until at least five separate dreamers are in it. That applies to regional patterns and to every cohort slice, and it is the reason you will sometimes see a quiet sky rather than a small, identifying result.
Matches are always anonymous. You may be told that a number of dreamers shared a theme with you. You are never told who they are, and they are never told who you are.
Your choices and rights
- Access the personal information we hold about you, on request.
- Correct anything that is wrong. Your profile, your dreams and their dates and locations are all editable in the app.
- Clear any optional field, including the sensitive ones, in Settings.
- Turn excerpt sharing off, and turn any alert channel off.
- Mute individual themes, and soften distressing themes in what you see.
- Delete an individual dream in your journal.
- Ask us to delete your account and the data attached to it by writing to privacy@getdreamgraph.com.
If you are unhappy with how we have handled your information, write to us first. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Security
Data is encrypted in transit and at rest by our infrastructure providers. Access to the database is controlled by row level security, so your dreams and your profile are readable only by your own signed-in account and by our server-side processing. Sensitive fields are additionally protected by the consent rule described above, enforced in the database itself.
No online service can promise perfect security, and we do not hold any security certification.
How long we keep it
We keep your account, your dreams and the patterns derived from them for as long as your account exists, because the record is the product. Aggregate theme counts are kept as part of the research record. When you ask us to delete your account, we delete your profile, your dreams and their derived rows, and your alerts. Aggregate counts that no longer identify you may remain.
Cookies and analytics
Dreamgraph stores your authentication session in your browser so you stay signed in. That is the only thing we need to put on your device to run the app itself.
On getdreamgraph.com we also use Google Analytics 4 to understand aggregate usage: which pages are viewed, device and browser information, and an approximate region derived from your IP address. Google Analytics sets cookies on your device, including the ones in the _ga family, and the data is processed by Google LLC in the United States.
We use analytics only to see how the site is used. We do not use it for advertising, we have not turned on Google signals or ads personalisation, we do not send it your account identity, and we never sell analytics data. Analytics does not run on preview or development versions of the app, so nothing you see while we are building is measured.
You can read Google's privacy policy, install the Google Analytics opt-out browser add-on, or block cookies in your browser settings. Blocking analytics cookies does not affect how Dreamgraph works.
We run no advertising and no third party trackers beyond the above.
Changes to this policy
If we change how we handle personal information, we will update this page and the date at the top of it. Please check back here from time to time.