Privacy Policy

This Privacy Policy explains how personal data is handled when you use the Reverie mobile app (the "App") and the website at reverieapp.ai (the "Website"), together the "Service". A journal holds some of the most personal things a person writes, so we have tried to describe how your data is handled in plain language.

1. Who we are

Reverie ("Reverie", "we", "us", "our") operates the Service and is the party responsible for your personal data (the "data controller" or "data fiduciary" under some laws). For any privacy question, request, or complaint, contact us at hi@reverieapp.ai.

2. Summary

3. Data we collect

3.1 Account and profile data

• Sign-in: you can use Reverie with Google Sign-In or without signing in (an anonymous account). With Google Sign-In we receive your name, email address, profile photo, and, where your Google account provides it, phone number.
• Anonymous accounts: if you do not sign in, your data is still synced to our servers under a random account ID. Because we cannot link that ID to you, we may be unable to restore or locate this data if you uninstall the App or change devices.
• Profile details: device language, country, time zone, account creation and last login times, referral information, entry counts, and streaks.
• Onboarding answers: what you tell us during set-up, such as your reasons for journaling, journaling experience, gender, age range, general mood, goals, and reminder times. These answers are also used to personalise AI responses (see Section 5).

3.2 Journal content

• The titles and text of your entries, moods, activities, tags, word counts, and entry language.
• Photos, videos, and audio recordings you attach to entries.
• Voice recordings you make for voice-to-text, and the resulting transcripts.
• Search queries you type inside the App.

Journal content can reveal sensitive information, for example about your health, mental state, relationships, beliefs, or sexual orientation. We only receive such information if you choose to write or record it.

3.3 Optional data you can switch on

• Location and weather: if you attach a location to an entry, we store its coordinates, place name, and the weather conditions at that time.
• Physical activity: if you grant the activity-recognition permission, the type of motion detected (for example walking) may be saved with an entry.
• Google Fit: if you connect Google Fit, the App reads activity data such as steps, distance, calories, activity sessions, and related location samples to display alongside your journal.
• Camera, microphone, and media access: used only when you take or attach photos, videos, or audio.

These are controlled by your device permissions and App settings, and you can turn them off at any time.

3.4 Data the Service generates about you

• AI analysis of each entry: a suggested title, topics, feelings, sentiment, related psychological concepts, and an entry type (for example emotional, celebratory, factual, or an entry that suggests you may be in crisis).
• Weekly insights and other reflections surfaced to you, plus any feedback you give on them.
• A long-term memory profile: facts and themes the AI has inferred about you from your entries and onboarding answers (such as goals, recurring themes, coping strategies, and preferences), used to make later responses more relevant.
• Search embeddings: numerical representations of your entries that let the App search your journal by meaning.

3.5 Purchase data

Subscriptions are purchased through Google Play. We do not receive or store your payment card details. We receive your subscription status, product, purchase and renewal dates, and purchase identifiers.

3.6 Device, usage, and diagnostic data

• Device model, operating system, App version, language, country, IP address, and identifiers such as the Firebase installation ID, push-notification token, and the Android advertising ID.
• How you use the App: screens viewed, buttons tapped, features used, and events such as saving an entry.
• Crash reports, performance traces, and error logs.
• Install-referrer information that tells us which web page or campaign led to an install.

4. How we use your data

• To provide the Service: store and sync your journal, transcribe audio, generate reflections and insights, and search your entries.
• To personalise AI responses using your past entries, memory profile, and onboarding answers.
• To manage subscriptions and unlock paid features.
• To send reminders and notifications you have enabled, and service emails such as a welcome message.
• To understand how the Service is used, measure where installs come from, and improve features.
• To find and fix bugs, keep the Service secure, and prevent abuse.
• To answer support requests and comply with legal obligations.

We do not use your journal content to train our own AI models, and we do not sell it or use it to show you third-party advertising.

5. AI processing

AI analysis is a core part of Reverie and happens automatically: when you save or edit an entry, it is analysed using the AI services below. There is currently no setting to keep an entry in the App while excluding it from AI analysis.

• Google Gemini API (Google LLC) generates entry analysis, reflections, insights, the memory profile, and search embeddings. We use Google's paid API service; under Google's terms for that service, content processed through it is not used to train Google's models.
• Google Cloud Speech-to-Text converts your voice recordings to text.
• Google Cloud Translation translates text where needed.

The AI also checks whether an entry suggests you may be in crisis so that it can respond more carefully. This is an automated language classification, not a clinical assessment, and no person is alerted. AI output can be inaccurate, incomplete, or inappropriate, and is not medical, psychological, or professional advice.

6. Analytics and diagnostics

We use third-party tools to understand how the Service is used and to fix problems. They receive:

• Identity: when you are signed in, your name, email address, profile photo link, account ID, and device language are attached to your profile in our analytics, crash-reporting, install-measurement, and subscription tools.
• Usage events: the events described in Section 3.6. Some events include AI-derived labels about an entry, such as its type, topics, feelings, sentiment, and related psychological concept, as well as word-count ranges.
• Diagnostics: crash reports, performance traces, and error logs from the App and our servers.

We use this data only for debugging, reliability, and product improvement.

7. Who we share data with

We share personal data with service providers that process it on our behalf, and otherwise only as described here.

• Google (Firebase and Google Cloud): authentication, database and file storage, server hosting, data warehousing, push notifications, in-app messaging, remote configuration, app-integrity checks, Firebase Analytics, Crashlytics, Performance Monitoring, the Gemini API, Speech-to-Text, and Translation.
• Google Play: subscription billing.
• RevenueCat: subscription management (receives your account ID, name, email, and purchase data).
• Mixpanel: product analytics for the App and the Website.
• Sentry: error and performance monitoring for the App, our servers, and the Website.
• Kochava and Tenjin: install attribution and marketing measurement. They receive device identifiers including the Android advertising ID, App events, and the profile details described in Section 6.
• MailerSend: delivery of service emails.
• Google Analytics: Website analytics.

We may also disclose personal data:

• For legal reasons: where required by law or valid legal process, or where necessary to protect the rights, safety, or security of users, the public, or the Service.
• In a business transfer: if the Service is sold, merged, or transferred, your data may pass to the new operator, who must continue to honour this policy or notify you of changes.
• At your direction: when you export or share an entry. If you create a public share link for an entry (where that feature is available), anyone with the link can view it.

We do not sell your personal data.

8. Cookies and the Website

You can read the Website without an account. When you visit, the following tools load automatically and use cookies or your browser's local storage:

• Google Analytics 4: sets cookies to measure visits, pages viewed, and clicks (for example on the Google Play button).
• Mixpanel: uses local storage to record page views and clicks.
• Sentry: reports errors and performance data. If an error occurs, Sentry may record a replay of that browsing session on the Website to help us fix it.

These tools receive your IP address, browser and device details, referring page, and your interactions with the Website. When you tap a link to Google Play, we add a tag identifying the page you came from so we can tell which pages lead to installs.

The Website does not currently offer an in-page cookie preference tool. You can block or delete cookies and local storage in your browser settings, use a content blocker, or install the Google Analytics opt-out add-on. The Website works normally without them.

9. Storage and security

• Your journal is stored on your device and on our cloud servers.
• Data is encrypted in transit and encrypted at rest using our cloud provider's standard encryption.
• You can protect the App on your device with a passcode or biometric lock.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security. If a data breach affects you, we will notify you and the relevant authorities where the law requires.

10. Retention and deletion

• While your account exists: we keep your account data, journal content, attachments, and AI-generated data. We do not currently delete inactive accounts automatically.
• Deleting an entry: when you delete an entry in the App it is removed from your journal, but a copy may remain on our servers until you ask us to erase it or you have your account deleted.
• Voice-to-text audio: recordings made only for transcription are not added to your entry, but may be kept on our servers for a limited period for processing and diagnostics. Audio you attach to an entry is kept like any other attachment.
• Deleting your account: in-App account deletion is not yet available. To delete your account, email hi@reverieapp.ai from the email address linked to your account. If you use Reverie without signing in, tell us in your email and we will work with you to identify your account. Within 30 days of verifying your request we will delete your account, profile, journal entries, attachments, transcripts, and AI-generated data from our servers.
• Third-party records: analytics, diagnostic, and measurement records already sent to the providers in Section 7 are not erased individually as part of that process; they are kept for those providers' standard retention periods and then deleted. Purchase records may be kept as required for tax, accounting, and legal purposes.

Uninstalling the App does not delete data stored on our servers and does not cancel a subscription.

11. Your choices and rights

• Export: use Settings, then Backup, then "Export my data" in the App. Exporting your whole journal at once in the App may require a subscription; you can always request a copy of your data free of charge by emailing us.
• Correct: edit your entries and profile in the App, or ask us to correct data you cannot change yourself.
• Delete: see Section 10.
• Permissions: turn location, microphone, camera, activity recognition, notifications, and Google Fit on or off in your device or App settings.
• Advertising ID: reset or delete your advertising ID in your Android settings.

Depending on where you live, you may also have the legal rights below. To use any of them, email hi@reverieapp.ai. We will respond within the time the law requires (generally one month) and may need to verify your identity first. We will not treat you differently for exercising a right.

11.1 European Economic Area, United Kingdom, and Switzerland

You have the right to access, correct, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). We rely on these legal bases:

• Performance of a contract: providing the Service you asked for, including storage, sync, AI analysis, and subscriptions.
• Consent: for sensitive information (such as health-related information) that you choose to include in your journal, and for optional features you switch on such as location, microphone, activity recognition, Google Fit, and notifications. You can withdraw consent by removing the content, turning the feature off, or asking us to delete your data.
• Legitimate interests: analytics, install measurement, diagnostics, security, and improving the Service, where these are not overridden by your rights.
• Legal obligation: where we must keep or disclose data by law.

The AI analysis in Reverie produces reflections and insights for your own use; we do not use it to make decisions that have legal or similarly significant effects on you.

11.2 India

Under Indian data protection law you have the right to access information about your personal data, to have it corrected or erased, to withdraw consent, to nominate another person to exercise your rights if you die or become incapacitated, and to have grievances addressed. Send grievances to the Grievance Officer, Reverie, at hi@reverieapp.ai. If we do not resolve your grievance, you may be able to complain to the Data Protection Board of India.

11.3 United States

Depending on your state, you may have the right to know what personal information we collect, to access, correct, or delete it, to obtain a portable copy, and to appeal a refusal of your request. The categories we collect, the purposes, and the recipients are described in Sections 3 to 7. We do not sell personal information. We disclose device identifiers and usage data to the measurement providers in Section 7 so that we can measure our own marketing, not so that others can advertise to you. Some of the data we hold may be considered sensitive or consumer health data under state law; we use it only to provide the Service as described in this policy.

12. International data transfers

Our servers and service providers may be located outside the country where you live, so your data may be processed in places whose data protection laws differ from yours. Where the law requires safeguards for such transfers, we rely on those made available by our providers, such as the standard contractual clauses in their data processing terms.

13. Children

Reverie is intended only for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has used Reverie, contact hi@reverieapp.ai and we will delete their data.

14. Reverie is not a medical or crisis service

Reverie is a journaling and self-reflection tool. It is not a medical device or a mental-health service, does not diagnose, treat, or cure any condition, and is not monitored by any person. If you are in crisis or thinking about harming yourself or someone else, contact local emergency services or a crisis line right away:

15. Changes to this policy

We may update this policy as the Service or the law changes. We will post the new version here with a new "Last updated" date. If a change materially affects how we handle your data, we will take reasonable steps to let you know before it takes effect, such as a notice in the App or on the Website.

16. Contact

Questions, requests, or complaints about privacy: hi@reverieapp.ai.