Privacy Policy

StudioD24 is the data controller responsible for the processing of your personal data when you use the Dreamala Service.

Contact Email: support@dreamala.com

Information You Provide to Us:

When you create an account or use the Service, you may provide personal data including your name, email address, and dream-related information such as dream descriptions, timestamps, keywords, summaries, and other related information you choose to record.

Information We Collect Automatically:

When you use the Service, we may automatically collect certain technical and usage information such as device type, browser type, IP address, timestamps, and interactions with the Service.

How We Use Your Information:

We use your personal data to operate and provide the Service, including storing dream logs and generating AI-based images from dream descriptions. We also use personal data to maintain system security, provide customer support, communicate with you about your account, and improve the performance and reliability of the Service.

Under the EU General Data Protection Regulation (GDPR), we process personal data under the following legal bases:

Contract: Processing is necessary to provide the Service you request, including account creation, dream logging, and AI image generation.

Legitimate Interests: Processing necessary to operate, secure, and improve the Service, including monitoring system performance and preventing abuse.

Consent: Where required, such as for certain cookies or marketing communications.

Legal Obligation: Processing required to comply with applicable laws and regulatory requirements.

The Service uses artificial intelligence systems to generate images based on dream descriptions you submit.

Your dream descriptions may be temporarily processed by automated systems to generate images. These processes are necessary for providing the core functionality of the Service.

AI-generated outputs may vary and may not always accurately represent the dream description provided.

We retain personal data only for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

Dream-related data and account data may be retained for up to 2 years after your last account activity.

After this period, your personal data may be deleted or anonymized unless retention is required for legal, regulatory, or legitimate business purposes.

Prior to automatic deletion due to inactivity, we may notify you via email and provide the opportunity to delete your data.

We may use cookies and similar technologies on our website to maintain login sessions, analyze usage, and improve the Service.

You can control cookies through your browser settings. Some features of the Service may not function properly if cookies are disabled.

We do not sell your personal data.

We may share personal data with trusted service providers who process data on our behalf in order to operate the Service. These providers act as data processors under GDPR and are contractually required to protect your information.

Third-party processors may include:

Payment Processing: Stripe processes subscription payments. Payment details are handled directly by Stripe and are not stored by us.

Analytics: Mixpanel helps us understand how users interact with the Service. Analytics data may include device and usage information.

Infrastructure and Database Hosting: Jazz Cloud provides database infrastructure and stores data in EU data centers.

Website Hosting: Vercel hosts our website infrastructure.

Email Delivery: Resend is used to send account and service-related emails.

Where personal data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place as required by GDPR.

These safeguards may include Standard Contractual Clauses approved by the European Commission or reliance on providers that participate in recognized data protection frameworks.

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction.

These measures include encrypted data transmission using industry-standard protocols such as TLS, access controls, and secure infrastructure practices.

Despite our efforts, no internet-based service can guarantee absolute security.

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.

Right to Rectification: You may request correction of inaccurate or incomplete personal data.

Right to Erasure: You may request deletion of your personal data in certain circumstances.

Right to Restriction: You may request restriction of processing under certain conditions.

Right to Data Portability: You may request a copy of your data in a structured, commonly used format.

Right to Object: You may object to certain types of processing based on legitimate interests.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at support@dreamala.com. We will respond within one month as required by applicable law.

If you believe your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.

In Finland, the relevant authority is the Office of the Data Protection Ombudsman.

You can review and update certain account information through your account settings.

You may unsubscribe from optional email communications using the unsubscribe link included in those messages.

You may request deletion of your account and associated data by contacting support@dreamala.com.

If you have questions about this Privacy Policy or about how your personal data is handled, please contact us at:

support@dreamala.com