1. What we collect

• Account info: email, display name, optional profile fields (gender, marital status, location, bio).
• Dreams: the text or audio you submit, plus any AI interpretation and generated images/videos.
• Usage events: timestamps and types of AI calls (text/image/video/voice) for billing and rate-limiting. No prompt content stored in this table.
• Auth metadata: from your Google account (avatar, name) if you sign in with Google.
• Consent choices: whether you allow your dreams to be used to improve Roya's AI, when you chose, and the version of the wording you agreed to.
• Sessions with interpreters: the dream you choose to share with an interpreter, your message, your conversation and their answer; for paid sessions, what you paid and how (the payment provider never gives us your card details); for video calls, when the call took place, its recording and its written transcript.

2. What we don't collect

• We don't sell your data — ever.
• We don't run third-party advertising trackers on the app.
• We don't use your dreams to improve our AI unless you turn that on in Profile → App Settings → Privacy Mode (see section 3).

3. Who processes your data

To deliver the service, Roya sends what each task needs to the AI provider its administrators have chosen for that task. Today these are Xiaomi (MiMo) for text — interpretations, the chat assistant and Dream Studio — with Z.AI (GLM) as a fallback; Qwen models hosted by NVIDIA for images; Google (Veo) for video; and OpenAI for voice conversations. For a reading, Roya sends your dream, the context you chose and the optional profile details you filled in to tailor it (gender, marital status and what you wrote about your life situation) — never your name or e-mail. Messages in conversations with human interpreters are also checked by Roya's AI for abuse. Hosting, database and file storage run on Supabase; payments run through the payment provider you choose at checkout (such as Lemon Squeezy, PayPal or Stripe). Dreams you have not published are private: the Roya team opens one only to support you, and each opening is recorded. A human interpreter reads a dream only if you share it with that interpreter, who then sees the dream, its AI reading and context, its pictures and videos, your display name, your message and your conversation. After the answer the dream stays visible to the interpreter until you hide it; your message and the conversation remain visible to the interpreter. Hiding a dream hides it from every interpreter you shared it with and makes it private if it was published. Pictures and videos made for a dream are stored as files at addresses that are hard to guess, but anyone who already has such an address can still open the file after the dream is hidden or made private; we are moving them to private storage. Improving the AI: this is off unless you turn it on in Profile → App Settings → Privacy Mode. If you do, Roya uses the text of your dreams, their AI readings, the context you chose and the month they were written, including dreams written before you turned it on, to test and improve how Roya's AI interprets dreams. Your account, name, e-mail, profile details, photos and videos are not used, although a reading may mention what you wrote in your profile; e-mail addresses, phone numbers and links are removed from the text automatically wherever they can be recognised, but names you write inside a dream are not, and no entry carries a reference back to you. This relies on your explicit consent: we record each choice (what, when and which wording) and delete those records with your account. Turning it off stops any further use; what has already been used cannot be taken back out. Video calls with interpreters run on Daily (daily.co), which carries the call and stores its recording; the recording is deleted 30 days after the call, or later only while a complaint about that call is still open. During a call, each person's own microphone is transcribed by OpenAI; the audio is not kept by Roya, and the written transcript is kept in both people's history. Only Roya staff handling a complaint about that session can open its recording or its transcript, and each opening is recorded.

4. Your rights

• Access & a copy: from Profile → History you can see every dream you've recorded; for a copy of your data, write to us at the address at the end of this page.
• Deletion: delete any dream individually, or your entire account from Profile → Settings.
• Correction: edit profile fields any time.
• EU/UK users have additional rights under GDPR/UK GDPR — write to us to exercise them.

5. Security

All traffic is TLS-encrypted. Database access is gated by row-level security. Other members can see your display name, photo, location, bio, when you joined and whether you are an interpreter; they cannot read your e-mail, your other profile details or the dreams you have not published, except a dream you choose to share with an interpreter. Service-role keys are kept server-side only. API keys for AI providers are stored encrypted and accessible only by admins.

6. Children

Roya is not directed at children under 13 (16 in the EU). If you believe a minor signed up, contact us and we'll delete the account.

7. Changes

If we update this policy materially, we'll notify you in-app. The “Last updated” date above always reflects the current version.

8. Contact

privacy@roya.cam for any data request.