Privacy Policy
Last updated: October 2026
1. What We Collect
When you use Dreams & Stars, we collect the following information:
- Account data: Your name, email address and Clerk account identifier, provided or created when you sign up.
- Reading input: Dream descriptions, any submitted voice transcript, mood, life context, vivid details and the name you enter for AI interpretation.
- Birth data: Date of birth, birth time (optional), birth city/country, focus and mood are used for astrology readings and saved with their reading history. A separately saved website birth profile can include resolved coordinates and time zone.
- Reading history: AI-generated interpretations saved to your account.
- Purchase data: Stripe processes website payments. Apple StoreKit and RevenueCat process iOS credit purchases. We store purchase/event identifiers, products and credit-grant records linked to your account; we do not store your card details.
- Usage data: Credit balance, reading counts, session metadata, authenticated signup/purchase events, and website interactions with paywalls, pricing and checkout. Our backend also records operational information such as request outcomes and AI usage costs.
- Support communications: Information you choose to send when contacting support or reporting a concern. The iOS report action opens an email draft; it does not automatically send or attach your reading or account details.
2. How We Use Your Data
Your data is used exclusively to:
- Generate personalised AI dream and astrology interpretations, using your submitted details and relevant prior reading context.
- Save your reading history to your account dashboard.
- Manage your credit balance and payment transactions.
- Measure and improve the account, reading, and purchase experience.
- Improve the quality and accuracy of our AI interpretations over time.
- Send account-related communications, including welcome emails through Resend and payment-provider receipts, and respond to support requests.
We do not sell your data. We do not use your dream content for advertising.
3. Third-Party Services
Dreams & Stars integrates with the following trusted third-party services:
- Anthropic API: Our backend sends your reading input to Anthropic's Claude AI: name, dream text or submitted transcript, mood/context, and astrology birth details and calculated chart information as relevant. Prompts may also contain recent reading excerpts, their saved dream/birth details and recurring dream symbols to personalize the result. Before delivery, the generated reading is sent to a separate automated Claude safety review. That review can receive personal details repeated in the generated text. The iOS app asks permission before each reading; declining does not send that reading for AI processing. Provider retention depends on the applicable API agreement and settings; we do not promise zero retention. See Anthropic's API retention information.
- OpenStreetMap Nominatim: When you enter a birth place for a chart, the place text you type is sent to this public geocoding service to find its coordinates and time zone. No name or account is attached to the request.
- Clerk: Handles authentication (sign-up, sign-in, session management). See Clerk's Privacy Policy.
- Supabase: Stores account information, reading inputs/results, credits, purchase events, first-party product events and operational records.
- Stripe: Processes website payments. We never see or store your card details. See Stripe's Privacy Policy.
- Apple StoreKit and RevenueCat: Process and validate iOS credit purchases. RevenueCat receives your Clerk account identifier and purchase history so transactions can be associated with the correct balance. Our backend receives verified purchase events to grant credits. See RevenueCat's Privacy Policy.
- Apple speech recognition: Optional iOS voice input uses Apple's speech-recognition service, which may process audio remotely. Microphone and speech permissions are requested when used. We do not save an audio file or upload recordings to our backend; the transcript becomes text you can review and submit. Typing is always available.
- Resend: Sends account welcome and operational emails and handles related contact/audience records.
- Vercel: Hosts the website and API; request and error logs support operation, security and troubleshooting.
- Analytics services: Google Analytics, Microsoft Clarity, Yandex Metrica, and PostHog help us understand traffic and site interactions. Yandex Metrica and PostHog are activated only after you allow analytics cookies; Yandex Metrica may then use session replay, which is set up not to record what you type and not to show the content of the signed-in app. With website analytics enabled, PostHog may associate your Clerk account identifier, name and email with your site activity. This is separate from anonymous server-side AI measurements. PostHog is hosted in the EU. Separately, PostHog receives anonymous technical measurements of our AI requests (their size, duration and whether they succeeded) from our servers whatever your cookie choice; they never contain your text, your birth details or your account.
- Google AdSense: We display ads served by Google. Google may use cookies to serve ads based on your prior visits to this and other websites, activated only if you allow marketing cookies. You can opt out of personalized advertising in Google Ads Settings.
The website analytics and advertising integrations described above are not embedded in the native iOS app. Backend operational records and sanitized AI measurements still apply when the app uses our API. Links opened in a browser are subject to that website's cookie controls.
4. Data Retention
We retain account data and reading history while your account is active. Account deletion removes the primary account and reading records and the Clerk identity. When deletion is requested in the iOS app, it also attempts to clear that account's local cache and warns if cleanup fails. Our backend attempts removal from the Resend audience.
Deletion does not erase every financial, security or provider record. Payment events are retained with a hash-derived replacement for the account identifier, and a deletion audit fingerprint is recorded. Payment-provider transaction records, operational logs and backups may have separate retention. Deleting your account does not itself delete the RevenueCat customer record or request an Apple refund. Contact us for questions or requests concerning retained data; provider retention is subject to the applicable service policies and obligations.
5. Your Rights
You have the right to:
- Access: Request a copy of all personal data we hold about you.
- Delete: Delete your account in the iOS app under You → Danger Zone → Delete Account, or use the website account settings. You may also request deletion of personal data by contacting us; the retention qualifications above apply.
- Export: Request an export of your reading history in a portable format.
- Correct: Update incorrect personal information via your account settings.
- Object: Object to specific uses of your data.
To exercise these rights, contact us at contact@dreamandstars.com.
6. Cookies
Dreams & Stars uses essential cookies for authentication and session management. We also use the analytics technologies described above to measure traffic, content engagement, and site interactions. Advertising cookies (Google AdSense) are used to serve and, where permitted, personalize ads. Yandex Metrica, PostHog, and advertising cookies are controlled through Cookie Preferences.
7. Children
Dreams & Stars is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us at contact@dreamandstars.com.
8. Contact
For privacy-related questions or to exercise your rights, contact us at: contact@dreamandstars.com