Privacy Policy

Who is responsible

Sebastian Bjelkemyr, operating Dream as a private individual in Sweden, is the data controller for the processing described here. For privacy questions or requests, email support@trydream.app.

Information and purpose

Google sign-in

When you choose Google sign-in, Google supplies your verified email address and a stable Google account identifier. Dream uses them to create or recognise your account, keep accounts separate and authenticate your session. Dream stores your email, a hashed form of the Google identifier, its own account identifier, account creation time and session records. Dream does not receive your Google password.

Sign-in requests only the openid and email permissions. It does not access your Gmail messages, contacts, Drive files or calendars. The Google sign-in tokens are used to verify the response; they are not kept as ongoing access to your Google services.

Your writing and account

Guest drafts, titles and recovery copies stay in this browser until you choose to transfer them to an account or download them. Cloud saving processes the notes, attachments, tags, sections, versions, comments, calendar entries and preferences you choose to save, together with change history and records needed to identify and recover saves. We use this information to provide your workspace, synchronise it, preserve history and provide exports.

Optional features

• AI assistance. Where enabled, a request sends your prompt and the source material included for that request to the AI service you connect. Responses and interaction history can be saved in your workspace. Proactive suggestions require a separate opt-in and may use relevant workspace sources and recorded activity. You choose whether to apply a suggestion.
• Google Calendar. Where enabled, connecting a calendar is separate from sign-in. Dream requests read-only access to your calendar list and events to show events from the calendars you select. This includes calendar names, event titles, times, locations and links. Connection credentials are stored for continued access and can be removed by disconnecting. Dream does not edit your Google calendars.
• Usage history. Disabled by default. If you enable it, Dream records activity such as opening notes, searches and selections, including time, source references and search result counts. These activity records do not contain your search text or a copy of selected text. Turning it off stops new collection; contact us to request deletion of records already held.
• Notifications. If available and enabled on your device, Dream stores the device’s push subscription and uses a push delivery service to send the reminders you request.

Optional providers and features are used only when the relevant service is available and you enable or request it. You can disconnect Google access in Dream where available and through your Google Account connections. Disconnecting stops further access; it does not automatically erase information already saved in Dream.

Support, security and any payments

If you contact support, we receive your email address and the information you send. Requests to the website also involve network information such as an IP address and browser request details; these are used to deliver the service, diagnose failures and prevent abuse. If paid plans are offered and you choose one, the payment provider processes the payment details and Dream receives the billing identifiers and subscription status needed to manage access. Google sign-in alone creates no payment.

Why processing is permitted

We process account details, requested features, saved work and related support to provide the service you request (GDPR Article 6(1)(b)). Optional usage history and proactive suggestions rely on your consent (Article 6(1)(a)); you can withdraw it in Account without affecting earlier lawful processing. Essential security and abuse prevention rely on our legitimate interest in protecting the service and its users (Article 6(1)(f)). Information required by applicable law, such as any legally required transaction records, is processed under Article 6(1)(c).

You can use guest drafts without giving Dream a Google identity. A verified identity is necessary for a connected account. Optional permissions are not a condition of ordinary writing. Dream does not make solely automated decisions with legal or similarly significant effects on you.

Who receives information

Information is shared as needed to deliver the feature you use, protect the service, answer your request, or meet a legal obligation. Google handles authentication and any separately authorised Calendar connection. Support correspondence is handled through Apple iCloud Mail. Cloud features also involve the infrastructure and storage providers running them; optional features involve the AI, notification or payment provider you choose to use. Contact support@trydream.app for the current recipients relevant to your account.

Dream does not sell your personal information or use Google user data for advertising. Your Google sign-in identity is used for authentication and account administration, not model training. Dream’s use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable. Optional AI requests are separate: the provider receives the material included in the request and applies its own data policies.

Google, Apple and optional providers may process information outside the EU/EEA. Google describes its adequacy decisions and standard contractual clauses in its data transfer frameworks; Apple describes its transfer safeguards in the Apple Privacy Policy. Contact support@trydream.app for the countries and safeguards applicable to any additional recipient involved in your account, and how to obtain a copy. Hosting in Europe does not mean that every connected provider processes data only in Europe.

For Google’s own processing, see the Google Privacy Policy.

How long information is kept

• On your device. Browser drafts and recovery copies remain until you remove them, complete their transfer or clear the browser’s site data. Signing out or deleting a cloud account does not erase copies or exports on your devices.
• Your account. Saved work and its change history remain while your account is kept, so you can return to it and export it. An expired trial or subscription does not automatically erase your work. Removing a note from the current view may leave earlier content in its saved history.
• Sessions and connections. The sign-in flow expires after ten minutes and the normal sign-in session after seven days. Optional connection credentials remain until disconnected, revoked or no longer needed. Signing out ends the current Dream session.
• Support and security. Records are kept for as long as needed to resolve the request or incident and any necessary follow-up or legal obligation, then deleted or minimised.

You can request account erasure through Account where available or by contacting support@trydream.app. Erasure covers active account material subject to applicable legal exceptions. Retained recovery backups and required financial records are not necessarily erased immediately. Recovery copies follow the retention period of the backup service in use; deletion records may be kept to prevent erased accounts from being restored. We will explain any retained categories, reason and applicable period when handling your request.

Cookies and local storage

These public information pages do not set cookies or load third-party scripts. The Dream app uses essential sign-in cookies and local browser storage for drafts, recovery and preferences. Sign-in cookies are limited to the Dream site and protected from access by page scripts. Dream does not use advertising cookies on these pages. Google and other connected services may use their own cookies on their sites.

Your choices and rights

Depending on the circumstances, you may request access, correction, erasure, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of processing before withdrawal.

Email support@trydream.app. We may need proportionate information to verify your identity. We normally respond within one month; if the law permits extra time, we will explain why within that month. You can complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), or your local supervisory authority.

Changes to this policy

The date above identifies this version. We will update this page when our processing changes and provide additional notice before a material new use of your information. Where consent is required, a policy update does not replace your choice.