Privacy policy

Last updated October 8, 2026 · Applies to the Dreamlock app and this website, including its free dream interpreter.

Dreams are the most private thing a person has. Dreamlock is designed so that we never hold a copy of yours: no account, no dream database, nothing kept on our servers after your card, or your web reading, is written. This page describes what the app and this website do with data, in plain language, including the outside services that help write and paint your cards.

The app

• No accounts. Dreamlock has no sign-up, no email field, and no user database. We do not know who you are.
• Your voice stays on the phone. Dream recordings are captured and turned into text on the device. Audio is never uploaded.
• Dream text is processed, not stored. To write your dream card, the transcribed dream text is sent over an encrypted connection to our server (a small relay hosted on Vercel), which forwards it to the language model that writes the card and returns the result. Our server keeps no copy and no logs of dream text: it is discarded the moment your card is returned, and the same is true when you ask a question about your dreams. It is never used for advertising and never used to train any model.
• Who processes it. Two outside providers do the actual work, and only they see the text of a single request: Anthropic (the Claude model that writes your card and answers your questions) and OpenAI (the image model that paints it, which receives only a short scene description, never your full dream). Both process requests under their API terms, which do not allow training on your data; both may retain a request for a limited period for abuse monitoring under those terms. Nothing that identifies you travels with the request: no name, no email, no device identifier, no account, because none exist.
• Your vault lives on your device. Dreams, cards, and paintings are stored on your iPhone, protected by iOS data protection and locked behind Face ID / passcode.
• iCloud sync (Plus, optional, off by default) stores an encrypted copy in your iCloud account under your Apple ID. It never touches our servers.
• Purchases are handled by Apple. We receive no payment details.

This website

• Hosted on Vercel. Almost every page is static reading material. The dream dictionary search, the dream symbol finder and the other free tools run entirely in your browser and send nothing you type. The one exception is the dream interpreter, which sends the dream you write to be read; what happens to it is described below.
• Analytics. Every page loads two measurement scripts: Ahrefs Web Analytics, which is cookieless and reports only aggregate page views, and Google Analytics 4, which uses Google's cookies and identifiers to count visits and, for us, only in aggregate. Neither is used for advertising, and neither ever receives what you type into a tool or the dream interpreter. If you block scripts, the site works the same (the dream interpreter needs its own script to run).
• Fonts are loaded from Google Fonts, so Google sees the request for the font files.
• No advertising trackers, no data sale.

The free dream interpreter on this website

The dream interpreter (/tools/dream-interpreter and its editions in other languages) reads one dream a day for free, with no account. Unlike the rest of the site, it has to send your dream somewhere to read it. This is the whole path.

• What is sent, and only when you ask. When you press the button, the text you wrote (at most 1,500 characters) and the language of the page go over an encrypted connection to our server on Vercel. It checks the request, finds the dream symbols in the text, and passes the text with the dictionary entries for those symbols to our relay (also on Vercel), which sends them to Anthropic. Anthropic's Claude model writes the reading, and it travels back the same way to your browser. Nothing is sent while you type.
• Not stored, not logged. Neither our server nor our relay keeps a copy of your text or of the reading, and neither writes them to a log. Our logs record only that a reading was requested, the page language, the outcome, the number of tokens used and how long it took. The reading exists only in your open page: close or reload it and it is gone.
• Anthropic. Anthropic processes the request under its commercial API terms, which do not allow it to train its models on the request; it may retain a request for a limited period to monitor for abuse, under those terms. Nothing that identifies you travels with the text: no name, email, account or device identifier.
• The daily allowance uses hashed IP addresses. To keep the reader free at one reading a day, and within a daily spending cap, our server counts requests per IP address. The address is never stored: it is combined with a random value that is replaced every day and hashed (HMAC-SHA-256), and only that hash and a count are kept in a small counter database (Upstash Redis, run for us through Vercel). The hashes, the counts and the daily value expire after two days.
• Bot protection. The interpreter page runs Vercel BotID, an invisible check that the request comes from a real browser and not an automated script. It works from signals in the browser and may set a short-lived cookie for that check; it is not used for advertising or tracking across sites.
• In your browser. The page remembers only the date of your last reading, in your browser's local storage, so it can tell you when your next free reading is available. The shareable card is drawn in your browser and saved or shared from your own device; it is never uploaded to us.
• When a text mentions self-harm, the page shows free support lines instead of a reading. If the browser recognises it first, the text is not sent at all.
• No account, no advertising, no sale. Nothing from the interpreter is used for advertising, sold, or joined with anything else we hold. We hold nothing else.

Questions

Write to hello@dreamlock.app. Mail to that address is delivered through Resend, our email provider, and forwarded to the owner's inbox; we keep it only as long as the conversation needs. If this policy changes, the date above changes with it.