Data policy

What we collect

• Your email address — to log you in and send you sign-in codes.
• Your password — stored scrambled (hashed), never as plain text.
• A username you choose — it doesn’t have to be your real name.
• A yes or no that you’re 18 or over — not your birthday or age.
• Your region and first language, if you add them — both optional, set in my account. Your region puts crisis resources for your country first; your language gives the AI a little context.
• What you write — your dreams, journal entries, and dhiyo’s readings and replies.
• Notes dhiyo keeps about you — the things that keep coming up in your writing, so readings build on what came before. They aren’t shown in the app. Email us and we’ll send you all of them, correct them, or wipe them.
• Safety and pattern signals — like images that keep recurring in your dreams, and a check for signs of serious distress. If you turn the AI off, this check is off too.
• Your plan — free trial, free, or dhiyo plus, and how many AI replies you’ve used this month.
• A small usage record — like when the app was opened and for how long. Never anything you wrote — not even words you typed and deleted.
• A notification token — only if you turn reminders on.

What we don’t collect

Your real name, birthday, exact location, phone number, contacts, photos, files, or your face or fingerprint (those stay on your phone).

Voice recordings. If you speak instead of typing, the audio is turned into text and then deleted. We never store recordings.

Who else handles your data

We don’t sell your data, and there are no ads. These companies help us run dhiyo. They handle data under their own terms:

• OpenAI — writes readings and replies, and turns speech into text. Gets your writing or audio and a random code — never your name or email.
• Anthropic — runs safety checks. Gets your writing and a random code.
• Supabase — runs our database and servers.
• Hostinger — sends our emails, like sign-in codes.
• Google Firebase — delivers reminders, if you turn them on. Reminders never include what you wrote.
• RevenueCat — handles subscriptions. Gets a random account code and which plan you’re on — never your writing, name, or email.
• Apple and Google — if you download dhiyo or subscribe through their app stores.

Most of these companies are in the US. When your data goes there from the EU, the UK, or Switzerland, it is protected by the standard contracts those places approve.

How it’s kept safe

Your name and email are stored in one place. Your writing is stored in another, under a random code. The only link between them is kept locked away on its own, and the AI only ever sees the writing side.

Everything is encrypted while it travels and while it’s stored on our servers, and your writing never goes into our logs. It is not end-to-end encrypted — the AI has to read your writing to reply to it. No system is perfectly secure, and we only describe what is in place today.

How long we keep it

For as long as your account is open.

When you delete your account, you have 30 days to change your mind. After that, your writing, readings, account details, and the link between them are erased. A small deletion record with nothing personal in it is kept for up to 120 days, then removed.

We keep anonymous totals — like how often a type of image shows up across everyone’s dreams — which can’t be traced back to you. We may keep some information longer if the law requires it.

Download your data

In the app, go to my account → your data → export my data. You get a file with your account details, the consents you gave, your dreams, your journal entries, the feelings you added, and your own messages in every conversation.

For a full copy of everything we hold about you, including the notes dhiyo keeps, email dhiyo@dhiyo.net. We’ll send a code to your account’s email to check it’s you first.

Delete your account and data

1. Open dhiyo and go to my account → your data → delete account.
2. Type DELETE to confirm.
3. You have 30 days to sign back in and undo it. After that, everything is permanently erased.

Can’t get into the app? Email dhiyo@dhiyo.net from the address on your account and ask us to delete it. We’ll send a code to that email to check it’s you, then delete it for you.

You can also delete a single dream or journal entry at any time, without deleting your account.

Your rights

Depending on where you live — for example the EU, the UK, India, or California — you have the right to see, correct, delete, and take a copy of your data, and to complain to your data protection regulator. The Privacy Policy lists these in full.

Questions

Email dhiyo@dhiyo.net. dhiyo is run by Tantransha LLP, India.