Privacy Policy

Last updated: 15 October 2026

In Hypnori you describe your dream and receive an interpretation in return. This policy explains, as plainly as we can, which information goes where along the way.

Your interpretations are prepared from the classical dream-interpretation literature with the support of AI.

In short

You don't need to give a name, email address or phone number to write a dream.
Signing in is optional. Without signing in, we know you only by a random install number the app generates; if you sign in, we don't store your name, email address or photo (section 2).
Google Analytics (Firebase) is used for usage statistics and Google AdMob for ads; your dream is never sent to these companies (sections 3 and 7).
You can delete a dream whenever you like; its text is deleted from the server right away together with its interpretations, and only backups may keep it for up to 5 more weeks (section 9).

1. Data controller

İrfan Bostancı
Email: hypnori@uzman.org

2. What information we collect

All of this information is collected only through the app, electronically and by automated means.

What you write

Your dream's text
The interpreter you choose for your dream
Your like, if you liked an interpretation

What we derive from it

Your dream's interpretation and the symbols extracted from the text for it
The rejection reason, if the automatic check rejected your dream
The moment you gave your explicit consent

What the app sends on its own

Install number. A random number created when you first open the app. It is not your device's identifier or an advertising ID. Your dreams are tied to this number.
Submission number. A random number given to each dream.
Your time zone, app language, platform (iOS or Android), app version, the dream's character count and the time it was sent.
If you watch an ad to open the rest of an interpretation, the fact that the ad was watched and that dream's number are recorded on our server.

What goes to Google

For ads (Google AdMob): your device's advertising ID, device type, system version and the country Google derives from your IP address. If you unlock the rest of an interpretation with an ad, also your install number and that dream's random number, to confirm the ad was watched (section 3).
For usage statistics (Google Analytics for Firebase): usage events such as a screen being opened or a dream being sent, device type, system version and your device's advertising ID. These events contain no dream text.

If you search the dictionary

The word you search for is sent to the server but is not linked to your install number and is not stored. Only a daily total count of searches is kept.

If you turn on notifications

Your device's notification token and your notification preference.

If you sign in

You can sign in with your Google or Apple account; signing in is optional.
During sign-in, Google or Apple sends us a document that confirms your identity. From it we store only your account's number at that company; we don't store your name, email address or photo.
Which company you signed in with, the moment the account was created, the app language and the moment your session was last used.
Your dreams are still tied to the install number and aren't moved to your account. If you sent a dream while signed in, only that fact is kept with the dream.

Server logs

The IP address a request came from, its time and the address requested are kept in the web server's standard log and deleted within 30 days at the latest.

Error logs

If an error occurs on the server, its technical details are recorded. Dream text and IP addresses never reach these logs.

What stays on your device

Your dreams and interpretations are also kept in the app's data on your phone so they open without an internet connection; they are removed from the phone when you delete the app. If your phone's own backup is on, this data may also end up in your backup.

3. What we don't collect

Location, contacts, photos and the microphone are outside the app's scope. We don't sell your data.

The app shows Google AdMob ads. When loading an ad, Google processes technical information such as your device's advertising ID under its own privacy policy. We don't use your dream or your interpretation for ads and don't pass them to Google. When you unlock the rest of an interpretation with an ad, your install number and that dream's random number go to Google so that it can confirm to our server that the ad was watched, and come back to our server with that confirmation; we don't use them to select ads.

4. What we process and why

Information	Purpose	Legal basis
Dream text, chosen interpreter, interpretation and symbols	Preparing the interpretation and showing it to you	Explicit consent (a dream may contain information about beliefs or health)
Install and submission number, time zone, language, character count, rejection reason	Showing you your dreams, limiting abuse	Performance of a contract, legitimate interest
Your like	Seeing which interpretations are liked	Legitimate interest
Time consent was given	Being able to demonstrate your consent	Legal obligation
Notification token	Letting you know your interpretation is ready	Consent
Sign-in data (your account's number at Google or Apple, sign-in method, session)	Recognising your Plus membership	Performance of a contract
Advertising ID and ad measurement	Showing ads, usage statistics	Consent (in the EU and the UK through the consent form), legitimate interest in other countries
Usage events	Improving the app, spotting errors	Legitimate interest (consent in the EU)
An interpretation you report and the reason	Reviewing the reported interpretation, preventing inappropriate content	Explicit consent (you start the report)
Server logs (IP, time)	Security, preventing abuse	Legitimate interest

Our legitimate interest is keeping the service secure and fair, preventing abuse and improving the interpretations.

The dream text and the technical information sent with it are needed for the interpretation; without them no interpretation can be prepared. Turning on notifications and signing in are optional; you can send dreams without either.

5. About your dream text

The dream text is free text; you decide what to write. We recommend not writing the names, phone numbers or addresses of people in your dream; the interpretation doesn't need them. What you write about your beliefs, health or sex life may include special categories of personal data. That is why dream texts are shown only to you: the system has no way to make a dream public, and other users can't see your dream.

This is why we ask for your explicit consent when you send your first dream. If you don't give consent, your dream isn't sent and no interpretation is prepared; the rest of the app is unaffected. You can withdraw your consent at any time by deleting your dreams in the app or by writing to us; withdrawing doesn't affect processing carried out before that.

If you report an interpretation to us with Report this interpretation in the app, we read that dream and its interpretation to review it. This happens only at your request and only for the dream you report; the report window tells you so before you send it.

6. How the interpretation is prepared

Interpretations are prepared automatically by software running on our own servers. We read your dream only if you report an interpretation or write to us about an issue (see section 5). The interpreters' names in the app are noms de plume and don't belong to any real person. Interpretations are for entertainment and reflection; they are no substitute for medical, legal or financial advice.

Before your dream is passed to the interpreter, it goes through an automatic check; the check may reject text it finds unsuitable and tells you so. Apart from whether the interpretation is written and whether new submissions are accepted, the automatic check has no other consequence for you. The check can get it wrong. If you think a dream was rejected by mistake, you can write to hypnori@uzman.org and ask for the decision to be reviewed by a person.

7. Who we share it with

Google (AdMob and Firebase Analytics): for ads and usage statistics. Google's privacy policy: https://policies.google.com/privacy, ad settings: https://adssettings.google.com
Sentry (error tracking, EU servers): if the app crashes or an error occurs, an error report (device model, operating system, app version, where the error happened) is sent. Your dream text and device ID are never part of this report.
Google and Apple (sign-in): if you sign in, these companies confirm your identity. We don't give them your dream or your interpretation.
Google (Firebase) and, on iPhone, Apple: if you have turned on notifications, to deliver the notification to your phone. Notifications don't contain dream text.
Hetzner Online GmbH: the company that hosts our servers.

We don't share it with anyone else. We don't sell your data; we don't use your dreams or interpretations to select ads.

8. Where your data is processed

Our servers, including those that prepare interpretations, are located in Hetzner Online GmbH's data centers in Germany. Your dreams and interpretations don't leave the European Union.

Google's services are used for ads, usage statistics, notifications and sign-in, and Apple's services for Sign in with Apple and, on iPhone, notifications. Information processed in these services (section 7) is subject to those companies' privacy policies and may also be processed outside the European Union.

9. How long we keep it

Your dream and its interpretation: until you delete them. Your dreams are tied to the install number; if the app doesn't connect to our server at all for 12 months, these dreams and the install record are deleted.
The record that an ad was watched, and your like: kept with the dream; when you delete the dream they are deleted too.
When you delete: the dream's text, the symbols extracted from it and all of its interpretations are deleted from the server right away. Only a record trace remains: record number, install number, time, time zone, character count, the rejection reason if any, and the moment explicit consent was given. This trace is kept to prevent abuse and so consent can be demonstrated; it contains nothing from your dream. The trace is deleted after 90 days.
Install record (install number, platform, language, app version, notification preference, time of last connection): deleted if the app doesn't connect at all for 12 months.
Account record (if you have signed in): until you delete your account. When you delete the account, the account record and your sessions are deleted right away; your dreams are not deleted, you can delete them separately.
Session: deleted when you sign out or when it hasn't been used at all for 180 days.
Notification token: deleted within 30 days after you turn notifications off or the token becomes invalid.
Google Analytics data: kept at Google for at most 14 months.
Interpretations you report: the report record (which dream, reason, time) is deleted after 90 days. If you delete the reported dream, its text is deleted right away as usual.
Server logs: up to 30 days.
Error logs: 90 days.
Backups: A dream you delete may remain in backups for up to 5 more weeks; backups are used only to restore data after a loss.

10. How we protect your data

Traffic between the app and our servers travels over encrypted connections.
Error logs contain no dream text and no identifying information.
Access to the servers is restricted by authorisation.

11. Your rights

Under the General Data Protection Regulation (GDPR, Articles 15-22) you have the right to access your personal data and get a copy, to have it corrected if it is wrong, to have it deleted, to restrict its processing, to object to its processing, to receive a copy in a portable format, and not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. Where processing is based on your consent, you can withdraw it at any time.

You can delete your dreams yourself with Delete dreams on this device on the Settings screen in the app; they are deleted from the server too. Because your dreams are tied to the install number, not to your account, and we keep no name or email address, we can't match the dreams on the server to you; the only way to delete them is from inside the app. If you have signed in, you can delete your account with Delete account on the same screen; this doesn't delete your dreams. If you have removed the app from your phone, your dreams are deleted automatically after 12 months (section 9).

You can turn off personalised ads and reset your advertising ID in your phone's ad settings. If you live in the European Union or the United Kingdom, you can change the consent you gave for ads and statistics on the Settings screen in the app.

For any other request, just write to hypnori@uzman.org; we reply within 30 days at the latest. If you aren't satisfied with the outcome, you can lodge a complaint with the data protection authority in the country where you live.

12. Age limit

The app is designed for users aged 18 and over; we don't knowingly collect data from anyone under 18. If we learn that data from someone under 18 has reached us, we delete it; if you notice such a case, you can write to us at the address above.

13. If this policy changes

If we update this policy we change the date above; if a change is significant, we let you know in the app.

14. Contact

İrfan Bostancı, hypnori@uzman.org