Privacy Policy
This policy explains how Yusuf Dreams (package com.yusuf.dreams) processes your data. The app is run by an independent developer at shedmerr101@gmail.com. We do not sell personal data or dream content. This is the same text shown on the website and inside the app.
Data we process — local journal
Dream text, interpretations, symbols and notes are stored in an encrypted SQLCipher database on your device and excluded from Android backup. The full journal is not uploaded to our servers. You can delete one dream or wipe the journal in the app.
Interpretation and chat
When you request a reading or follow-up question, the text and needed context travel over an encrypted connection to Firebase Cloud Functions and then to DeepSeek to generate the result. We do not ordinarily archive request or result text on our server. If you tap Report, the reported content and reason are sent for review with your consent.
Sharing via link
If you choose to share an interpretation, we create a temporary public link on the Yusuf Dreams website that shows an optional title and the interpretation text only — not the dream text. The share is kept for a limited time and then expires. Anyone with the link can read the published interpretation.
Optional account
If you create or sign in with Firebase Authentication we process your user ID, email and authentication data needed to link purchases, entitlements and deletion across devices. We do not store a readable password.
Operations, purchases, analytics and ads
We process a random install ID hashed with SHA-256, App Check tokens, and quota/abuse counters. For Google Play purchases: product ID, entitlement state, purchase token, order ID and expiry dates for verification and fraud prevention. General usage events and crashes via Firebase Analytics and Crashlytics without dream text. Google Mobile Ads may process device/ad identifiers, approximate IP and ad interactions according to your consent and settings.
Speech, read-aloud and notifications
Optional voice input uses on-device speech recognition; we do not store an audio recording. The speech provider may process audio under your device settings and policy. Optional read-aloud (TTS) of an interpretation uses your device speech engine; we do not upload the text to a separate speech server for this feature. Notification permission is optional and used for local reminders and, when enabled, cloud push or in-app announcements; those messages are operational or promotional titles and bodies and do not include your dream text.
Journal lock and optional encrypted backup
You may enable a journal lock that relies on your device lock or biometrics through the operating system; biometric data stays on the device and is not sent to us. An optional encrypted backup creates a password-protected file that you keep on your device or wherever you save it. We do not store that password and cannot recover the file if you forget it.
Why we process data
To deliver readings, chat, journal, account and purchases; apply quotas, verify purchases, restore entitlements and prevent fraud; show and measure ads when allowed; improve stability; and respond to reports, support or deletion requests. We rely on performing the service you request, consent where required for ads, legitimate interest in security, and legal obligations for transactions.
Service providers and transfers
We use Google Firebase, Google Play Billing, Google AdMob and DeepSeek. They act as processors or service providers under their policies and may process data in other countries with available safeguards. We do not share dream content with advertisers for personalized ad selection.
Ads and privacy choices
The app uses Google's UMP consent platform and does not request ads until consent allows it. You can open Ad privacy choices in Settings when required. Ads may be personalized or non-personalized based on your region and consent. An ad-free pass stops Yusuf Dreams ads for the stated period and does not add readings. Without a subscription: one free deep reading per install, then one extra deep reading per week via three rewarded ads when available.
Security
HTTPS in transit, SQLCipher encryption, Android Keystore for keys, Firebase App Check and Play Integrity, server-side Google Play verification, and limits on text length and request rate. No security measure is absolute; we minimize data and apply risk-appropriate controls.
Retention and deletion
Local journal until you delete it or uninstall. Interpretation/chat text is transient with no ordinary server archive. Operational counters are deleted 90 days after last activity. AI reports after up to 180 days or account deletion. Account and entitlement data until account deletion. Purchase records: raw tokens removed after consumption; inactive records removed after up to 24 months, with limited pseudonymous audit data only as needed for replay prevention or legal duties.
Your choices and rights
You can delete a dream or the local journal, delete the account and related server data in Settings, submit an external deletion request from the website, change ad consent, disable notifications/microphone in system settings, and request access, correction or objection where the law grants it. Deleting the account does not cancel Google Play billing.
Children
The app is not directed to children under 13 or under the minimum age required in their country. If you learn a child provided data without authorization, contact us to delete it.
Changes and contact
We publish material updates here and change the effective date. We may show an in-app notice when needed. For privacy, access or deletion: shedmerr101@gmail.com — mention Yusuf Dreams and package com.yusuf.dreams, and do not send dream text unless required for your request.