Privacy policy

Last updated September 9, 2026 · Applies to the Dreamlock app and this website.

Dreams are the most private thing a person has. Dreamlock is designed so that we never hold a copy of yours: no account, no dream database, nothing kept on our servers after your card is written. This page describes what the app and this website do with data, in plain language, including the two outside services that help write and paint your cards.

The app

• No accounts. Dreamlock has no sign-up, no email field, and no user database. We do not know who you are.
• Your voice stays on the phone. Dream recordings are captured and turned into text on the device. Audio is never uploaded.
• Dream text is processed, not stored. To write your dream card, the transcribed dream text is sent over an encrypted connection to our server (a small relay hosted on Vercel), which forwards it to the language model that writes the card and returns the result. Our server keeps no copy and no logs of dream text: it is discarded the moment your card is returned, and the same is true when you ask a question about your dreams. It is never used for advertising and never used to train any model.
• Who processes it. Two outside providers do the actual work, and only they see the text of a single request: Anthropic (the Claude model that writes your card and answers your questions) and OpenAI (the image model that paints it, which receives only a short scene description, never your full dream). Both process requests under their API terms, which do not allow training on your data; both may retain a request for a limited period for abuse monitoring under those terms. Nothing that identifies you travels with the request: no name, no email, no device identifier, no account, because none exist.
• Your vault lives on your device. Dreams, cards, and paintings are stored on your iPhone, protected by iOS data protection and locked behind Face ID / passcode.
• iCloud sync (Plus, optional, off by default) stores an encrypted copy in your iCloud account under your Apple ID. It never touches our servers.
• Purchases are handled by Apple. We receive no payment details.

This website

• Hosted on Vercel. Pages are static reading material; the site never receives dream content of any kind.
• Analytics. Every page loads two measurement scripts: Ahrefs Web Analytics, which is cookieless and reports only aggregate page views, and Google Analytics 4, which uses Google's cookies and identifiers to count visits and, for us, only in aggregate. Neither is used for advertising. If you block scripts, the site works exactly the same.
• Fonts are loaded from Google Fonts, so Google sees the request for the font files.
• No advertising trackers, no data sale.

Questions

Write to hello@dreamlock.app. Mail to that address is delivered through Resend, our email provider, and forwarded to the owner's inbox; we keep it only as long as the conversation needs. If this policy changes, the date above changes with it.