Privacy Policy

• A dream is sensitive, and we treat it that way. We process it only to write your reading, and only after you agree.
• Dreams from readings you have not saved or paid for are deleted automatically after 7 days.
• Our AI provider is OpenAI (USA). It does not use your dream to train its models and may keep it for up to 30 days to monitor abuse.
• We never sell your data, never put dream text into analytics or advertising tools, and never run advertising pixels on pages where you write or read a dream.
• Analytics and advertising cookies run only if you accept them, and you can change your choice at any time.
• You can export or delete your data whenever you like.
• Insights (pattern analysis of your journal) and sharing a dream anonymously in the community are both off until you turn them on.

[TO FILL: legal name of the operating entity] ([TO FILL: identification code]), [TO FILL: registered address, Georgia], runs Pillowtea and is the controller of your personal data.

For privacy questions and requests, write to [TO FILL: contact email].

Our representative in the EU (GDPR Article 27): [TO FILL: EU representative, or write that none is appointed yet]. Our representative in the UK: [TO FILL: UK representative, or write that none is appointed yet].

• Your dream and its context: the text you write, your quiz answers (such as how you felt), the dream date, and a first name if you choose to give one.
• The reading, report or painting generated for you, and the dream-night moon phase.
• Your email address and account settings, and your journal if you keep one.
• Order details from our merchant of record: product, amount, currency, country, status and email. Never your card number.
• Technical data: IP address, browser type, and an anonymous session id kept in a cookie.
• Records of your consents (for example to processing your dream, to automatic renewal, or to marketing emails) and when you gave them.
• Usage events such as which quiz step you reached, only if you accept analytics. They never contain dream text, email or free text.
• Messages you send us.

A dream can reveal something about your health, sexuality, beliefs, relationships or grief. Under the GDPR and the Georgian Law on Personal Data Protection this can be special category data. That is why we ask for your explicit consent before we process a dream. You can withdraw it at any time; this does not affect processing that already happened.

We do not use dreams for advertising, profiling or training AI models. No person at Pillowtea reads your dream to produce a reading. Stored data is accessed only when you ask us to (for example in a support request) or when the law requires it.

• To write your reading: your explicit consent (GDPR Articles 6(1)(a) and 9(2)(a)).
• To provide your account, journal and purchases: our contract with you (Article 6(1)(b)).
• To keep the service safe and affordable, for example rate limits, abuse prevention and spending limits: our legitimate interest (Article 6(1)(f)). IP addresses used for this are kept only briefly.
• Product analytics and advertising measurement: only your consent (Article 6(1)(a)).
• Accounting, tax and other legal duties: legal obligation (Article 6(1)(c)).
• Emails about your reading, login and purchases are part of the service. Marketing emails are sent only with your separate consent, and each one has an unsubscribe link.

Readings, reports and paintings are generated by AI models from OpenAI. Before a reading is written, the dream passes OpenAI's automated moderation, so that we can show help lines if it suggests someone may be at risk (see our Safety page).

We send OpenAI only what the reading needs: the dream, your answers, the chosen lenses and your language. Never your email or payment details. Under OpenAI's API terms, data sent through the API is not used to train its models by default, and OpenAI may keep it for up to 30 days to monitor abuse before deleting it.

Readings are generated automatically, but no decision with legal or similarly significant effects on you is made by automated means.

Insights are off until you turn them on. Turning them on is a separate, explicit consent (GDPR Article 9(2)(a)), apart from the consent you give for a reading, and you can withdraw it at any time.

When Insights are on, an OpenAI model reads each dream in your journal once and writes a short private card about it: the catalog symbols it found, the kinds of themes, feelings and settings, whether it seemed a nightmare, a lucid or a recurring dream, the people in it as short labels (for example "my mother" or "a stranger"), and a one-line summary without names. Cards are stored encrypted, and only you see what they contain.

The Insights page counts these cards together with what you entered yourself, such as mood, flags and tags. If you ask for a written report, the AI receives only those counts and a limited number of one-line summaries, never your full dream text and never the people labels. Reports are stored encrypted in your account.

Turning Insights off deletes every card and report at once. Deleting a dream deletes its card. Cards and reports are never used for advertising or to train AI models, and they never appear in anything you share.

Nothing you write is public unless you choose to share a reading. Before anything is shown, an AI model removes names, places, workplaces, schools, ages, contact details and other identifying details from a copy of the text, and you see exactly what will be public. You then confirm that you want it shown publicly and that you are 18 or older. This is your explicit consent to publishing it (GDPR Article 9(2)(a)), and you can withdraw it by deleting the post.

What others can see: the anonymized text you approved, a title and a quote line from your reading, the language, the day it was shared (never the time), the catalog symbols, the mood, a randomly chosen animal instead of a name, and your country only if you allow it and enough other people from that country have shared too. What they never see: your name, email or account, your full reading, or any link between your posts.

To keep the community safe, every post is checked by automated tools (OpenAI moderation and our own rules) before it appears, and it may be reviewed by a person on our team. A post can be published, shown blurred as sensitive, held for review or not shared. When we restrict a post, we tell you why in My shared dreams, and you can reply to contest the decision. We keep a record of moderation decisions, including automated scores (numbers, never text), for [TO FILL: e.g. 12 months after the decision]. Legal basis: our legitimate interest in a safe service and our duties under laws such as the EU Digital Services Act (Article 6(1)(f) and 6(1)(c)).

Anyone can report a post. We store the reason and any details the reporter writes, and the reporter's email address only for a notice about illegal content. For reports from people who are not signed in, we keep a one-way code made from the network address and the day, only to stop repeated reports. The author is never told who reported.

You can delete a shared post at any time, from My shared dreams or from the reading, and it disappears at once. Deleting your account deletes your posts and your reactions.

The microphone button uses your browser's own speech recognition (for example Google's in Chrome or Apple's in Safari). Your browser may send your voice to that company's servers under its own privacy terms. We never receive or store audio, only the words that appear in the text box, which you can change before you save. We record that the button was used, never what was said.

A dream you are still typing is kept only in this browser tab until you send or save it, so a reload does not lose it.

The morning reminder is a calendar file made from the time and time zone you pick. We do not store them: your calendar app keeps the reminder.

We use the following service providers. Each processes personal data only on our instructions, under a data processing agreement.

• OpenAI (USA): writes readings and runs safety moderation.
• Supabase: our database for accounts, readings and orders. Region: [TO FILL: Supabase region]. Dream text is stored encrypted.
• Vercel (USA, with servers worldwide): hosts the website.
• Dodo Payments: our merchant of record for all purchases (see the next section).
• [TO FILL: email provider and country]: sends login codes and receipts.
• PostHog (EU cloud): product analytics, only with your consent.
• Meta Platforms (Ireland and USA): advertising measurement, only with your consent and never on pages where dreams are written or shown.

Purchases are sold by Dodo Payments as merchant of record. Dodo is the seller named on your receipt: it takes the payment, handles sales taxes and issues refunds. It processes your payment details under its own privacy policy. We never see or store your full card number.

From Dodo we receive what we need to give you access: order and subscription status, product, amount, currency, country and email address.

Some providers, including OpenAI and Vercel, process data in the USA and other countries outside Georgia, the EU and the UK. For these transfers we rely on the safeguards the law provides, such as standard contractual clauses in our providers' data processing agreements, and, where Georgian law requires it, on the consent you give before your first reading.

• Dreams and readings you have not saved or paid for: deleted automatically 7 days after they are created. We keep them this long so you can unlock a reading you have started.
• Saved dreams and readings (your journal): until you delete them or your account.
• Insight cards and written reports: until you turn Insights off, delete the dream or the report, or delete your account.
• Shared posts: until you delete them or your account, or until we remove them under the Community rules.
• Moderation decisions and reports about posts: [TO FILL: e.g. 12 months after the decision].
• Your account: until you delete it. Deleting your account deletes its dreams, readings and journal.
• Orders and invoices: for as long as tax and accounting law requires ([TO FILL: period required by Georgian tax law]). A dream is never part of an order.
• The anonymous session cookie: 30 days.
• Rate limit and security records, including IP addresses: [TO FILL: e.g. up to 30 days].
• Analytics events: [TO FILL: PostHog retention setting].
• At OpenAI: up to 30 days, as described above.

We use a few strictly necessary cookies without asking. Analytics and advertising cookies are used only if you accept them. You can change your choice at any time with the Cookie settings button on this page.

• lang: remembers your language (1 year, necessary).
• td_sid: an anonymous session id that keeps your quiz answers and reading together (30 days, necessary).
• td_consent: remembers your cookie choice (6 months, necessary).
• ph_ cookies and local storage: PostHog analytics (up to 1 year, only with analytics consent).
• _fbp and _fbc: Meta advertising measurement (up to 90 days, only with advertising consent, only on checkout pages).

Until you choose, and whenever you reject, nothing is sent to PostHog or Meta.

You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw any consent at any time.

Many of these you can do yourself in your account: export your data, delete a dream, or delete everything. For anything else, write to [TO FILL: contact email]. We answer within one month.

Your export comes in three formats: a complete data file (JSON), and a readable dream book of your dreams and readings as a web page (HTML) or as plain text (Markdown).

You can also complain to a data protection authority: in Georgia, the Personal Data Protection Service (pdps.ge); in the EU, the authority in your country; in the UK, the Information Commissioner's Office (ico.org.uk). We would be grateful for the chance to put things right first.

Pillowtea is for people aged 18 and over. We do not knowingly process data about anyone younger. If you believe a minor has used Pillowtea, write to [TO FILL: contact email] and we will delete the data.

Data travels encrypted (HTTPS). Stored dream text is encrypted at rest with a key kept separately from the database. Access to production data is limited to the people who run the service. If a data breach is likely to put you at risk, we notify the supervisory authority within 72 hours where the law requires it, and we tell you without undue delay.

Some US state laws, such as Washington's My Health My Data Act, may treat what a dream reveals about your mental or physical health as consumer health data. We collect it only to write the reading you ask for, with your consent. We share it only with the processors listed above for that purpose, we never sell it, and you can access or delete it as described under Your rights.

We do not sell or rent personal data. We do not share it for advertising beyond the limited advertising measurement you can accept in cookie settings, which never includes dreams. We do not use your dreams to train or fine-tune AI models, and we would ask for new, separate consent before any such use.

When we change this policy we update the date at the top. For important changes we tell you on the site or by email before they apply, and if a change needs your consent, we ask again.