Back to Home

Privacy Policy

Last updated: March 1, 2026

1. Who We Are (Data Controller)

This Privacy Policy explains how Big Deck IT LTD ("we", "us", or "our") collects, uses, and protects your personal data when you use the DreamAlly mobile application and related services (the "App"). Our website is DreamAlly.app.

Big Deck IT LTD is the data controller for personal data processed through the App.

Address: Office 4080, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom Email: support@dreamally.app

2. What Data We Collect

We collect the following categories of personal data:

  • Account information: your email address and account credentials (stored securely and not in plain text), plus any optional profile details you provide.
  • Dream journal content: dream entries you submit, any tags or metadata you add (such as dates and categories), and the AI-generated interpretations returned to you.
  • Payment information: processed by Stripe. We do not store your full card number; Stripe handles card data and payment authentication.
  • Technical and usage data: for example your IP address, device and browser/app information, approximate location derived from IP, app usage events, and crash or error logs.

3. Special Category Data (Sensitive Data)

Your dream entries may contain special category data (for example, information that may reveal health-related information, sexual life or orientation, religious or philosophical beliefs, or other highly personal information).

By using DreamAlly and submitting dream entries, you give explicit consent for us to process any special category data contained in your entries for the purpose of providing AI-powered dream interpretation and related App functionality.

You can withdraw consent at any time by deleting relevant entries and/or deleting your account. Withdrawal will not affect processing that occurred before you withdrew consent.

4. How We Use Your Data (Purposes and Legal Bases)

We process personal data for the following purposes:

  • We use account information to create and manage your account and provide the core App functionality. This is processed primarily on the basis of performance of a contract (providing the service you request).
  • We use dream journal content to generate and display interpretations, store your journal, and provide features like history, search, and insights (where available). This processing is based on performance of a contract, and where special category data is involved, your explicit consent.
  • We use payment-related information (via Stripe) to administer subscriptions and prevent fraud. This is processed on the basis of performance of a contract and legal obligation (for example, accounting/tax requirements), and Stripe may also process some data as an independent controller for its own compliance purposes.
  • We use technical data to maintain security, debug, monitor performance, and improve reliability. This is typically processed on the basis of our legitimate interests in operating a secure, stable service.
  • We may process data to comply with applicable law, enforce our terms, or respond to lawful requests. This is processed on the basis of legal obligation and/or legitimate interests (and where necessary, establishment, exercise, or defence of legal claims).

5. AI Processing (Core Feature)

AI interpretation is a core feature of DreamAlly. When you submit a dream entry, your entry is automatically processed by an AI provider to generate your interpretation.

If you do not want your dream content processed by an AI provider, you should not use DreamAlly for dream interpretation features.

We aim to minimise the data sent for AI processing to what is needed to generate the interpretation, and we contractually require our providers to protect personal data.

6. Third Parties We Share Data With (Processors)

We use trusted third-party service providers to help us operate DreamAlly. These providers process personal data on our behalf under contracts that require appropriate security and confidentiality.

Key providers include:

  • OpenAI (AI processing): receives dream entry content you submit for the purpose of generating interpretations.
  • Supabase (database/backend hosting): stores and serves App data such as accounts and dream content.
  • Netlify (hosting/content delivery): may process IP address and technical request data when you access web-hosted components (if applicable).
  • Stripe (payments): processes subscription payments and related billing information.

Because vendors can change over time, we may add or replace service providers. We will keep this Privacy Policy accurate and up to date and will notify users of material changes where required by law.

7. International Data Transfers

Some of our service providers may process data outside the UK. Where personal data is transferred internationally, we use appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, and/or transfers to jurisdictions recognised as providing adequate protection, as applicable.

You can contact us at support@dreamally.app to request further information about the safeguards used for specific transfers.

8. Data Retention

We keep personal data for as long as necessary to provide DreamAlly and for legitimate and lawful business purposes.

Dream entries and associated account data are generally retained until you delete them or delete your account.

We retain certain billing and transaction records for longer periods where required for legal, tax, or accounting reasons.

Technical logs (such as security and error logs) are retained for a limited period appropriate to security and troubleshooting, then deleted or anonymised.

9. Your Rights (UK GDPR)

Subject to applicable law and certain exceptions, you have rights including the right to request access to your data, rectification, erasure, restriction of processing, and data portability, and the right to object to processing based on legitimate interests. Where we rely on consent, you also have the right to withdraw consent at any time.

To exercise your rights, email support@dreamally.app. We will respond within one month (and may extend by up to two further months where permitted, depending on complexity and volume).

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) (see `https://ico.org.uk`).

10. Security

We implement appropriate technical and organisational measures designed to protect personal data, such as encryption in transit, access controls, and operational security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your login credentials and for any activity under your account.

11. Children, Changes and Contact

DreamAlly is not intended for children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact support@dreamally.app and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will take appropriate steps to notify you (for example, in-app notice), and we will update the “Last updated” date at the top.

If you have questions or requests about this Privacy Policy or how we process personal data, contact:

Big Deck IT LTD Office 4080, 182-184 High Street North, East Ham, London, E6 2JA support@dreamally.app