Privacy Policy

Dreams are some of the most personal data there is. This policy explains, in plain language, what WorldWithin collects, why, and what we will never do with it. The short version: your journal is stored in the EU, offline entries are encrypted on your device, our analytics never see dream content, and we do not run ads or sell data.

Who is responsible

WorldWithin is operated by The Dream Company UG (haftungsbeschränkt), Berlin, Germany (see the Impressum for full details). For any privacy question or request, contact thorge@worldwithin.app.

What we collect

• Account data. When you sign up we store your email address and, if you use Sign in with Apple or Google, the basic profile our authentication provider (Clerk) receives from them. We use this to sign you in and to contact you about your account.
• Your journal. Dream entries, titles, moods, lucidity ratings, and conversations with Aria are stored in our database, hosted by Supabase on servers in Frankfurt, Germany (EU).
• Usage analytics. We record anonymous product events (for example: a dream was saved, a streak was reached) through PostHog and error reports through Sentry, both configured for EU data residency. These events contain counts, identifiers, and technical metadata only. They never contain dream titles, content, symbols, moods, or transcripts, and this exclusion is enforced in code and covered by automated tests.
• Purchases. Subscriptions are processed by Apple or Google and managed through RevenueCat. We never see your payment details.

The AI providers we use

Three features rely on external AI services. In each case, the data is sent from our servers for processing only. None of these providers use your data to train their models, and we do not train models on your dreams either.

• Aria and symbol detection. Aria’s replies, symbol extraction, and pattern observations are generated by Claude (Anthropic). The relevant dream text is sent to Anthropic’s API and the response is returned to your journal.
• Voice transcription. If you use voice capture, your audio recording is sent to Deepgram to be transcribed into text for your entry.
• Dream images. If you generate an image for a dream, a text prompt derived from that dream is sent to fal.ai to create the image.

Offline capture and device storage

You can write dreams without an internet connection. Offline entries are held in an encrypted queue on your device, with the encryption key stored in your phone’s secure keystore, and are uploaded when you are back online. Signing out removes the journal data stored on the device.

What we never do

• No advertising, and no advertising trackers.
• No selling or renting of your data to anyone.
• No session recording or screen replay in the app.
• No reading of your dream content for analytics.

Your rights

Under the GDPR you can request access to your data, correction, deletion, or a portable export at any time. Deleting your account removes your journal from our database. Write to thorge@worldwithin.app and we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority; for Berlin that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If this policy changes in a way that matters, we will note it in the app and update the date at the top of this page.