Privacy Policy

Dreams are some of the most personal data there is. This policy explains, in plain language, what WorldWithin collects, why, who else sees it, and what we will never do with it. The short version: your journal is stored in the EU, offline entries are encrypted on your device, our analytics never see dream content, three AI providers process your entries only to deliver the features you use, and we do not run ads or sell data.

Who is responsible

WorldWithin is operated by The Dream Company UG (haftungsbeschränkt), Niederbarnimstraße 14, 10247 Berlin, Germany (see the Impressum). It is the controller for the processing described here. For any privacy question or request, write to support@worldwithin.app.

What we collect

• Account data. Your email address and, if you sign in with Apple or Google, the name and email those services pass on. Sign-in is handled by Clerk, our authentication provider. We use this data to sign you in, to keep your journal attached to you, and to contact you about your account.
• Your journal. Dream entries (title, text, date, emotions, mood on waking, lucidity and vividness ratings, tags, nightmare and recurring flags, day residue, techniques used), the tags and details Aria suggests for them, dream images you generate, your conversations with Aria, and Aria’s notebook: short notes she keeps about recurring themes, associations, and preferences you mention, so she can remember them later.
• Your intentions. The answers you give during onboarding (what brings you here, how well you recall dreams, what you hope to find) and your daily check-ins, including mornings with no recall. These drive your streak and how Aria talks to you.
• Profile photo. Optional. If you pick one from your photo library, we store only that image.
• Voice recordings. If you dictate a dream, the audio is sent to our transcription provider and turned into text. We do not keep the audio.
• Purchases. Subscriptions are sold by Apple or Google and managed through RevenueCat. We receive your purchase status and history, never your payment details. Your account id and email are attached to your RevenueCat record so a purchase can be restored on a new phone.
• Product analytics. We record product events (for example: a dream was saved, a streak milestone was reached, the paywall was shown) through PostHog. Events are tied to your account id and email so we can count real people, and they carry technical metadata such as device model, operating system, app version, language, and an approximate location derived from your IP address. They never contain dream titles, content, tags, moods, or transcripts. This exclusion is enforced in code and covered by automated tests.
• Crash and error reports. When something breaks, Sentry receives a technical report: the error, the app version, device model and operating system, and your account id so we can reproduce the problem. No dream content and no screen recordings.

The AI providers we use

Three features rely on external AI services. In every case the data leaves our servers only to produce the result and comes straight back into your journal. We do not train models on your dreams.

• Aria and dream suggestions: Anthropic (Claude).The relevant dream text, your conversation with Aria, and Aria’s notebook are sent to Anthropic’s API to generate her replies and her optional suggestions for tags and details. Anthropic does not use API data to train its models and may hold it briefly for abuse monitoring under its own policies.
• Voice transcription: Deepgram. Your audio recording is sent to Deepgram and returned as text. Every request carries Deepgram’s model-training opt-out, so your voice is not used to improve their models.
• Dream images: fal.ai. When you ask for an image, Aria first writes a short visual prompt from your entry. Only that prompt is sent to fal.ai, not your dream text. The generated image is stored in your journal, in a private bucket only you can open.

Where your data lives

Your journal, images, and Aria’s notebook are stored by Supabase on servers in Frankfurt, Germany. Analytics (PostHog) and crash reports (Sentry) are configured for EU data residency. Clerk (sign-in), RevenueCat (subscriptions), Anthropic, Deepgram, and fal.ai process data in the United States. For those transfers we rely on the European Commission’s standard contractual clauses and, where a provider is certified, the EU-US Data Privacy Framework.

Why we are allowed to process it

We process your account and journal to provide the service you signed up for (Art. 6(1)(b) GDPR). Dream entries can reveal sensitive things about you, such as health, beliefs, or relationships. You decide what to write, and by saving an entry and asking Aria about it you explicitly consent to that processing (Art. 9(2)(a) GDPR); you can withdraw by deleting the entry or your account. Product analytics and crash reports rest on our legitimate interest in keeping the app working and understanding how it is used (Art. 6(1)(f) GDPR); you can object at any time by writing to us.

Patterns across dreamers

Aria identifies recurring symbols, themes, and moods in your entries. That is how the app works: it is what lets Aria notice a pattern you have not spotted yourself. We may also use those symbols, themes, and moods, never the text of your dreams, to produce statistics about dream patterns in general, and to show you how your own patterns compare with other dreamers.

If we ever share such a statistic publicly, it will be aggregated so that no individual can be identified, and we will apply a minimum group size before publishing any figure. We will never publish, quote, or paraphrase the text of a dream, yours or anyone else’s. We do not sell this data and we do not give it to advertisers.

Dream Circles

If you join a circle, the other members see your name, profile photo, when you joined, your total dream and lucid-dream counts, which days you logged, and whether you logged today and whether it was lucid. Your dream entries, conversations, moods, and tags never cross to another user. Nothing is shared until you join, and leaving a circle stops the sharing.

On your device

You can write dreams without an internet connection. Offline entries are held in an encrypted queue on your device, with the key in your phone’s secure keystore, and are uploaded when you are back online. A copy of your journal is cached on the device so it opens instantly. Reminders and reality checks are scheduled locally and never leave the phone. Home screen widgets read a small summary (your streak) from app storage. Signing out removes all of this from the device.

How long we keep it

Your journal stays as long as your account exists. Deleting your account, from Profile in the app or by email, permanently removes your entries, images, conversations, Aria’s notebook, your profile, and your sign-in identity at Clerk; database backups are overwritten within 30 days. Crash reports expire after 90 days. Product analytics are pseudonymous; the analytics profile that links them to you is deleted together with your account.

What we never do

• No advertising, and no advertising trackers.
• No selling, renting, or brokering of your data.
• No session recording or screen replay in the app.
• No third-party analytics on your dream content: Sentry and PostHog never receive it.
• No training of AI models on your journal.

Children

WorldWithin is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe we have, contact us and we will delete it.

Your rights

Under the GDPR you can request access to your data, correction, deletion, restriction, a portable export, and you can object to processing based on legitimate interest. Deletion is built into the app; for everything else, write to support@worldwithin.app and we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority; ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

Changes

If this policy changes in a way that matters, we will note it in the app and update the date at the top of this page.