Last Updated: March 26, 2026
This Privacy Policy explains how Magnolia Labs Limited, operating as DreamDump™ ("we," "us," or "our"), collects, uses, stores, and protects your information when you use the DreamDump™ mobile application ("App"). DreamDump™ provides AI-powered dream journaling and analysis services designed to support self-reflection and personal wellness.
For EEA/UK users, DreamDump acts as the data controller of your personal information. Contact: magnolia.labs.ai@gmail.com.
Your privacy matters to us. We designed DreamDump to keep your dream data as private as possible — your dreams are stored locally on your device, not on our servers.
Safety Event Metadata: When our automated systems detect potentially distressing patterns in dream submissions, we log limited metadata for safety auditing and regulatory compliance purposes. This metadata includes: timestamps, risk level classifications (e.g., 'elevated' or 'crisis'), the type of safety signal detected (e.g., 'suicidal ideation,' 'self-harm reference'), and whether crisis resources were displayed. We do not log the text of your dreams, AI responses, or any personally identifiable content in connection with these safety events.
Dream journal entries may contain sensitive personal information, including private thoughts, emotions, descriptions of personal experiences, and information that may relate to mental or emotional health, sexual life, religious beliefs, or other categories classified as special category personal data under applicable privacy laws. We treat all dream content with heightened care and use it only to provide the App's core functionality (AI analysis and pattern tracking). Dream content is never used for advertising, marketing, behavioral profiling, or sold to third parties.
Your dream journal entries, conversation history with Drift (our AI dream companion), symbols, themes, pattern data, and weekly dream card cards are stored locally on your device using on-device storage. This data does not leave your device except when sent for AI analysis (see Section 3).
When you use any AI-powered feature — including "Analyze Dream," Drift chat, weekly dream summaries, weekly dream card readings, symbol interpretations, or theme readings — your dream content is sent to Google's Gemini AI API for processing. Here is how this works:
Before your dream text is sent to the Google Gemini API, DreamDump's automated safety systems scan the text for patterns that may indicate distress or crisis content. This scanning is performed solely to determine whether to display crisis resources alongside the AI analysis. The scanning is performed on our backend proxy server and does not store, log, or transmit your dream text beyond what is necessary for the AI analysis request.
We use your information to:
We do not use your information to:
If you are located in the European Economic Area or the United Kingdom, we process your personal information on the following legal bases:
Special Category Data: Dream journal entries may contain information relating to your mental or emotional state, health, sexual life, religious beliefs, or other categories classified as special category personal data under GDPR. Where such data is processed, this is based on your explicit consent under Article 9(2)(a) GDPR. We obtain your explicit consent to process special category data when you create an account and are presented with a clear consent notice describing how your dream content is processed. You may withdraw this consent at any time by ceasing to use the App or deleting your account. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.
DreamDump does not engage in automated decision-making that produces legal or similarly significant effects under Article 22 GDPR. AI-generated dream interpretations are informational and symbolic only and do not constitute decisions affecting your legal rights, financial status, or access to services.
We do not use dream content to build advertising profiles, make behavioral predictions, detect emotional states, or infer conditions. Dream content is processed solely to generate symbolic interpretations for self-reflection.
We partner with the following third-party services to operate the App. Each is bound by their own privacy policies:
| Service | Purpose |
|---|---|
| Apple Sign In | Authentication |
| Google Sign In | Authentication |
| Google Gemini API | AI dream analysis |
| RevenueCat | Subscription management |
| Apple App Store | Payment processing |
| Google Play Store | Payment processing |
| Datamuse API | Dream symbol word association (dream symbols only, no personal data) |
We do not share personally identifiable information with any third parties beyond what is necessary to provide the services listed above. These service providers act either as independent data controllers or as data processors on our behalf, pursuant to data processing agreements where required under applicable law.
When you subscribe to DreamDump Premium, RevenueCat processes and manages your subscription on our behalf. The data shared with RevenueCat includes:
RevenueCat does not receive your dream content, journal entries, or Drift conversations. For details on how RevenueCat handles your data, see their Privacy Policy.
DreamDump uses the Datamuse API (api.datamuse.com) to expand dream symbol vocabulary — for example, finding words associated with a symbol like "tsunami." The data sent to Datamuse includes:
DreamDump includes engagement features designed to surface interesting patterns in your dream journal:
When you delete your account through the App's Settings, all locally stored data (dreams, conversations, patterns, preferences) is permanently erased from your device. Your authentication credentials are removed, and we request deletion of your account data from our authentication provider.
Depending on your location, you may have the following rights regarding your personal information:
To exercise any of these rights, use the in-App account deletion feature or contact us at the email address below.
If you are a California resident, you have the following additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:
To submit a CCPA/CPRA request, contact us at the email address below.
If you are located in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local supervisory authority if you believe your data has been processed in violation of applicable data protection laws.
We have not appointed a Data Protection Officer because we do not engage in large-scale systematic monitoring or large-scale centralized processing of special category data. All dream content is stored locally on your device, not on our servers. For all privacy-related inquiries, please contact us at magnolia.labs.ai@gmail.com.
DreamDump is intended only for individuals aged 18 and older. DreamDump is not directed to children and is not designed for use by minors. We do not knowingly collect, process, or analyze personal data from individuals under the age of 18. If we become aware that such data has been collected, we will delete it promptly along with any associated account.
By creating an account, you represent and warrant that you are at least 18 years of age. If you are under 18, please do not use DreamDump. Parents and guardians: if you believe a child under 18 has created an account, please contact us at magnolia.labs.ai@gmail.com and we will delete their account and data promptly.
We implement reasonable measures to protect your information:
No system is 100% secure. We encourage you to keep your device updated, use a device passcode, and keep your sign-in credentials secure.
In the unlikely event of a data breach affecting your personal information, we will notify affected individuals and relevant supervisory authorities as required by applicable law. Because dream content is stored locally on your device and not on our servers, the risk of a breach affecting your dream data is minimal.
When you use AI analysis features, your dream text is transmitted to Google Gemini servers, which may be located outside your country of residence. Where data is transferred outside your jurisdiction (including outside the EEA/UK), we rely on the European Commission's Standard Contractual Clauses (SCCs) and supplementary safeguards implemented by our service providers to ensure adequate protection of transferred data. For details on Google's international transfer safeguards, please refer to their privacy documentation.
We may update this Privacy Policy from time to time. Significant changes will be communicated through the App. The "Last Updated" date at the top of this policy indicates the most recent revision. Your continued use of the App after changes indicates acceptance of the updated policy.
If you have any questions about this Privacy Policy or how your data is handled, please contact us at:
Email: magnolia.labs.ai@gmail.com