Dreamr Quest

Privacy Policy

Last updated: October 25, 2026

This translation is provided for convenience; in case of any discrepancy, the French version prevails.

Dreamr Quest takes your privacy seriously. This policy explains what data we collect, why, who we share it with, and how you stay in control of it.

1. Who is responsible for your data

Dreamr Quest is published by Peninsu Labs, a French simplified joint-stock company with a single shareholder (SASU) with a share capital of €50, registered with the Paris Trade and Companies Register (RCS) under number 131 602 724, whose registered office is at 47 rue Vivienne, 75002 Paris, France. Peninsu Labs is the controller of your data (“we” in this policy). For any question: privacy@dreamr.quest.

2. Data we collect

Account: your email address, and your first name if you choose to give it. Three ways to sign in, your choice: Sign in with Apple, your Google account, or a 6-digit code sent to your address. With Apple or Google, we only use your email address and your name, and we never see your password. If you sign in with Apple and choose to hide your email, we only receive the relay address provided by Apple.
Dreams: the text of your dreams and your reflections, the emotion you choose and your night when you log it (its duration, read from Health if you allow it, and its quality), as well as your favorites and your tags, stored on our servers.
Voice recordings: when you tell a dream out loud, it is transcribed on your iPhone first. If the on-device model isn’t available yet, the recording is sent to our server to be transcribed (see §4). We don’t store it: once we have the text, only the text is kept.
Usage data: number of analyses, streaks and streak savers, unlocked badges. To count your streaks on your own calendar, we also keep your iPhone’s time zone (for example “Europe/Paris”), sent with each dream.
Purchases: subscription status and bonus credits, with no banking information stored (payments are handled directly by Apple).
Crash reports: when the app crashes or freezes, iOS gives it a technical report: app and iOS versions, iPhone model, the part of the code involved. The app sends it to us without your identity or any content of your dreams, only so we can fix the problem.

3. Why we use it, and on what legal basis

To provide the app (account and sign-in, journal, transcription, readings of your dreams, personal statistics visible only to you, subscription): this is necessary for the contract between us when you use Dreamr Quest (Article 6(1)(b) GDPR).
Your dreams and your night may reveal sensitive information (health, private life, beliefs). We only process them with your explicit consent (Article 9(2)(a) GDPR), which the app asks for before your first dream: consent for us to keep your dreams and your reflections, for their text to be sent to Anthropic for analysis, and, if you dictate a dream your iPhone can’t transcribe on its own, for its audio to be sent to OpenAI for transcription. iOS also asks for your permission before reading anything from Health. You can withdraw your consent at any time (in iOS Settings for Health, or by deleting your dreams or your account), without affecting what was done before.
To fix crashes, using the technical reports described above: our legitimate interest in keeping the app working (Article 6(1)(f) GDPR).
To reply to you when you write to us: our legitimate interest in handling your request.
Reminders, if you turn them on, are local notifications: no data is sent to us.

What is required, and what isn’t. You need an email address (or an Apple or Google account) to create your account, and the consent above to save and analyze your dreams: without them, the app can’t work. Everything else is optional: your first name, the emotion, your night, access to Health, tags, dictation (you can type your dreams). If you don’t provide them, you only miss the features that use them: without Health, for example, the length of your night isn’t filled in automatically.

We don’t sell your data and we don’t run ads. The readings of your dreams are ideas to reflect on: no decision about you is ever made automatically.

4. Who receives your data

We never sell, rent or share your data for commercial or advertising purposes. The following providers are involved only to make the app work, on our behalf (processors):

Anthropic (Claude; Anthropic, PBC, United States) — receives the text of your dreams, and of your recent reflections, to produce the analysis. Your reflections help connect a new dream to what you have already written, for a more accurate reading.
OpenAI (Whisper; OpenAI Ireland Ltd and its affiliates in the United States) — receives the audio of your recordings, only when the transcription couldn’t be done on your iPhone, and only for the time it takes to turn it into text.
Railway (Railway Corporation, United States) — hosts our servers and our database.
Resend (Resend, Inc., United States) — receives your email address to send you your sign-in code, if you choose that way to sign in. It also delivers crash reports to our mailbox; they contain neither your identity nor your dreams.
Zoho Mail — receives the messages you send us at contact@dreamr.quest or privacy@dreamr.quest. They are hosted in the European Union.

Anthropic and OpenAI use this data only to answer our requests, and don’t use it to train their models: that is what the terms of their API access, which we use, provide. Anthropic deletes the text it receives and its answers within 30 days, unless it must keep them longer to comply with the law or because content violates its usage policy (up to two years in that case): its retention rules. OpenAI’s transcription service doesn’t keep the audio it receives, unless the law requires it: its retention rules.

If you want to avoid sending any audio, type your dreams instead of dictating them: typed text never goes through a transcription service.

If you sign in with Apple or Google, or subscribe through the App Store, Apple and Google process the data they need on their own behalf, under their own privacy policies.

5. Transfers outside the European Union

Anthropic, OpenAI, Railway and Resend are American companies: your data may be processed in the United States. These transfers are covered by the EU–U.S. Data Privacy Framework certification for Anthropic and Resend, and by the European Commission’s standard contractual clauses included in the data processing agreements of Anthropic, OpenAI and Railway. You can get a copy of these safeguards by writing to privacy@dreamr.quest.

6. Retention

Your data is kept as long as your account is active. You can delete your account and all your data at any time from the Profile tab in the app: deletion is permanent and erases your dreams from our servers.

Crash reports are not linked to your account: they are kept until the problem is identified and fixed, then deleted. The messages you send us are kept for three years after our last exchange.

7. Security

Communications between the app and our servers are encrypted with HTTPS/TLS. Session tokens are stored in the secure iOS Keychain.

8. Your rights

Under the GDPR and the French Data Protection Act, you can at any time access your data, correct it, erase it, get it back in a reusable format (export from the Profile tab), ask us to restrict its processing, object to processing based on our legitimate interest, withdraw your consent, and set instructions for what happens to your data after your death. To exercise these rights or for any question: privacy@dreamr.quest. We reply within one month.

You can also lodge a complaint with the CNIL, the French data protection authority, or with the authority of the country where you live.

9. Minimum age

Dreamr Quest is for people aged 16 and over.

10. Changes

If this policy changes substantially, you will be notified in the app. The date of the last update is shown at the top of this page.

Privacy · Terms · Legal notice

English · Français · Español