1. Who is responsible for your data
Quies's data controller is [LEGAL NAME], at [BUSINESS OR MAILING ADDRESS], in [COUNTRY]. For privacy questions or requests, contact [PRIVACY CONTACT EMAIL]. [CONFIRM: whether a data protection officer or local representative is required.]
2. Dreams and voice capture
Your saved dreams, artwork, and journal preferences are stored on your device. Online features process some information as described below.
Voice capture uses your phone's built-in speech recognition with your permission. Supported languages and whether audio is processed on your phone or online depend on your device and its speech service. Quies requests on-device recognition on supported iPhones and does not collect voice audio on its servers or save it as an audio file.
You can edit the recognized text, type instead of speaking, and manage microphone and speech recognition permissions in device settings. [VERIFY: speech-service audio retention and temporary-audio behavior on supported devices.]
Dreams and interpretation preferences may reveal sensitive information about you or other people, including health, beliefs, or relationships. Avoid unnecessary identifying details before using online features. [DECIDE: safeguards and any explicit consent required for sensitive information.]
If you share a dream image, your phone sends the image and its displayed title and date to the app or destination you select. That destination handles the shared copy under its own practices.
3. Accounts and online features
Sign-in associates your journal and online features with your account. Account information can include your account identifier, email address, name if supplied, and sign-in sessions. We also keep plan status, trial dates, usage allowances, and account restrictions. [VERIFY: required sign-up fields and enabled sign-in methods in the released service.]
AI illustrations and interpretations process your dream text and relevant choices with our AI provider. These may include a title, custom style instructions, appearance details, requested image changes, or interpretation preferences. Automatic illustrations and interpretations can run after capture when enabled in Settings. Turn those options off to request generation manually.
Generated artwork is stored online for delivery to your app, even if journal backup is off. The app also saves artwork with your local dream entry.
Premium weekly reflections process dream keywords and interpretation preferences to describe patterns across your journal. These reflections can update automatically while the app is active. The service keeps the resulting reflection and information about the dreams already included.
Image-generation prompts and images are subject to safety filters. Requests involving offensive, graphic, or other restricted content may be blocked.
Premium account backup is optional. If you enable it, we store journal text, dates, tags, interpretations, artwork, custom styles, and journal preferences with your account. Updates run while the app is active. You can turn backup off or delete the online copy in Settings. Turning it off alone does not delete an existing copy. Backup is not end-to-end encrypted, so Quies and its storage providers can process stored content to operate the service.
The mobile app uses PostHog to record screen visits, app lifecycle events, and selected actions, such as saving a dream or requesting an illustration. These records include device and app information and may be linked to your account identifier. Journal text, audio, artwork, titles, tags, and interpretations are excluded from these analytics. Screen recordings and automatic touch capture are disabled.
[CONFIRM: the legal basis and any required consent or opt-out for mobile analytics. The current app has no analytics preference control.]
4. Website, waitlist, and support
Our hosting provider may process technical information, such as your IP address, to deliver and protect the website. [VERIFY: additional hosting logs and their retention.]
If you accept optional website analytics, PostHog records page visits and download or waitlist actions. We exclude form contents, URL query strings, and referring pages from these events. Analytics does not start before acceptance. You can reject it or change your choice through Analytics choices in the footer.
Your browser remembers the analytics choice in local storage. Website analytics identifiers are kept in memory rather than persistent cookies or browser storage. Website session recording and automatic click capture are disabled.
If you join the Android waitlist when signup is available, we use your email address and consent record to send a launch notification. [CHOOSE: the email service, retention period, and unsubscribe or deletion process before enabling signup.]
If you contact support, we process your message and contact details to respond. Please avoid sending private dreams unless they are needed to resolve your request. [CONFIRM: support address, email provider, and retention period.]
5. Why we process data
We process information to provide account access, generate requested AI content, store and restore enabled backups, enforce plan allowances, protect the service, diagnose failures, improve app usability, and answer support requests. Website analytics and waitlist notifications use your consent.
[DECIDE: the legal basis for each other purpose, including account and AI features, backup, mobile analytics, security, and support. Document any legitimate interests and any separate conditions needed for sensitive information. Device permission and acceptance of terms do not authorize every use of data.]
The app automatically checks plan eligibility and usage limits, and AI safety filters can reject generation requests. [REVIEW: whether any automated processing has legal or similarly significant effects and what review or challenge rights apply.]
6. Providers and international transfers
We use the following providers for the current service. [VERIFY: the final provider list and production configuration before release.]
- Clerk handles account sign-in and related account information. Clerk privacy information.
- OpenAI processes dream content and relevant preferences for AI illustrations, interpretations, and reflections. OpenAI data controls.
- Cloudflare hosts the website and online services and stores online journal content, artwork, and account records. Cloudflare privacy information.
- PostHog processes usage analytics and technical error reports. The current integration uses its EU service. PostHog privacy information.
Voice recognition is provided by Apple on iPhone or the speech service installed on your Android device. See Apple's speech and dictation privacy information or your Android speech provider's notice.
OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. [VERIFY: Quies's provider account settings before making an unconditional no-training statement.]
Providers may process information outside your country. Using an EU analytics service does not establish that all processing stays in the EU. [CONFIRM: actual processing locations, applicable transfer safeguards, and how to obtain a copy. Review provider agreements and add any payment, email, or support providers used at launch.]
[DECIDE AND VERIFY: whether data is sold, shared for advertising, or disclosed for purposes beyond operating the service, including legally required disclosures.]
7. Retention and deletion
Local journal entries remain on your device until you delete them or remove the app's data. Copies you share, export, or include in device backups have their own retention periods.
Online backup keeps one current journal rather than past versions. A successful update replaces that copy. Turning backup off or losing Premium access does not itself delete it. Deleting the online backup removes its journal records and turns backup off on that phone, but leaves your local journal and separately stored artwork. Other phones with backup enabled can upload again.
Incomplete backup uploads and temporary restore sessions expire after 24 hours and are scheduled for cleanup. [VERIFY: cleanup in the released service.]
Delete account removes your sign-in account, online journal records, stored artwork, plan and usage records, and the account's local journal on the phone performing deletion. It has no recovery period in the app. If cleanup is interrupted, the service retries unfinished steps. Other offline phones, shared copies, screenshots, and device backups cannot be erased remotely.
Existing PostHog analytics and diagnostic reports remain after account deletion. A deletion-completion event records the account identifier and completion details without journal content. Technical error reports exclude dream text, prompts, audio, and authentication credentials. [DEFINE AND VERIFY: analytics and diagnostic retention, including how remaining account-linked records are handled after deletion.]
OpenAI's standard abuse-monitoring policy permits retention of request content for up to 30 days, with exceptions for legal or safety needs. Our interpretation requests disable saved responses, which does not remove separate abuse-monitoring retention. OpenAI data controls. [VERIFY: account-specific settings and exceptions.]
Provider recovery copies can remain after live data is deleted. [CONFIRM: the applicable recovery window, provider deletion deadlines, and handling of deleted records during recovery. Set retention periods for stored artwork, accounts, support messages, waitlist emails, and other operational records.]
8. Your choices and rights
You can edit or delete local dreams, type instead of using voice capture, manage device permissions, and switch automatic illustrations and interpretations off in Settings. Sharing a dream image is optional. [CONFIRM: a full-journal export and a way to disable automatic weekly reflections.]
In Settings, eligible Premium users can open Backup & restore to enable backup or restore a journal. Delete my online backup deletes the online journal copy without deleting local dreams. You can delete an existing online backup even if you are no longer Premium.
To delete your account, open Settings, then Account, then Delete account and confirm. This is separate from deleting a local dream, deleting only an online backup, or cancelling a store subscription.
You can withdraw website analytics consent through Analytics choices in the footer. Withdrawal stops future collection; it does not automatically delete events already received. [DEFINE: waitlist unsubscribe and the process for requesting deletion of analytics records.]
Depending on applicable law, you may have rights to access or correct your data, request deletion or a portable copy, restrict processing, or object to certain uses. Where processing relies on consent, you can withdraw it without changing the lawfulness of earlier processing.
Send requests to [PRIVACY CONTACT EMAIL]. Where the GDPR applies, we must respond within one month. Complex or numerous requests can allow an extension of up to two further months, with an explanation within the first month. If there are reasonable doubts about your identity, we may request information needed to verify it. [IMPLEMENT: the monitored contact and request-handling process.]
You may also complain to the data protection authority where you live or work or where an alleged violation occurred. [ADD: the operator's relevant authority and contact link after confirming its country.]
9. Children and policy updates
Quies is intended for people aged 13 and older worldwide, subject to any higher minimum age required by local law. Downloads are subject to the app store's age ratings and parental controls. Quies does not currently verify your age or collect parental consent within the app.
[REVIEW: age and parental consent requirements for worldwide availability, whether the planned app store controls meet those requirements, and how to handle data submitted by an ineligible child.]
[CONFIRM: how material privacy changes are communicated and when additional consent is needed.] The final policy will show its effective date and last update date.