Your dreams stay close.

Your journal

Dream entries, recordings, photos, sketches, reflections, generated artwork, and personalisation answers are stored on your device. Oniryn does not require a journal account. We do not sell personal information, serve advertising, or track you across other companies’ apps and websites.

Cloud reflection and artwork

Cloud features are off until you allow them. When you request a cloud reflection or illustration, Oniryn sends the selected dream text through an Oniryn Cloudflare Worker to OpenAI. Dream conversation replies and summaries go directly from the Worker to OpenAI, without Cloudflare AI Gateway, with OpenAI response storage disabled. One-shot reflections and illustrations still use Cloudflare AI Gateway. A reflection may also include personal context or a later note that you chose to share. Artwork requests do not include your photos, recordings, or whole journal.

Oniryn disables AI Gateway prompt and response logging. One-shot generation processes submitted text in memory and may retain an encrypted result for up to one hour. Dream conversations submit only the selected dream and its replies; their durable job inputs and responses are held in Oniryn’s Cloudflare service for up to one hour to recover interrupted work, then removed. They are not an encrypted cloud journal. Saved conversations remain in your device journal or optional encrypted backup. This is not end-to-end encryption of AI processing. OpenAI and the Worker necessarily see content while generating it. Cloudflare and OpenAI process requests to deliver and protect their services under their terms. OpenAI states that API data is not used to train its models unless the API customer opts in. Read the Cloudflare privacy policy and OpenAI privacy policy.

Voice, photos, and device security

Microphone and speech-recognition access are used only when you choose voice capture. In the updated voice experience, transcription runs strictly on your device using Apple speech models. A model download may require internet access, but the recording is never uploaded for transcription. Unsupported devices or languages retain audio so you can retry or write instead. Photo access is limited to items you select. Face ID or passcode authentication is handled by your device, and Oniryn does not receive biometric data. Reminders are optional local notifications.

Membership

Apple handles payment. RevenueCat processes purchase history, subscription status, a pseudonymous app user ID, paywall interactions, and technical information needed to validate purchases and restore access. Oniryn does not send your name, email, journal content, or onboarding answers to RevenueCat as customer attributes. Read RevenueCat’s privacy policy.

Optional encrypted journal sync

If you enable sync, Oniryn encrypts the journal, including media, on your device using AES-256-GCM before storing it in Cloudflare R2. A recovery key is kept in your device Keychain and is shown for you to keep privately. The encryption key is not sent to the server. A separate key derived for vault access is sent over HTTPS. Anyone with your recovery key can access the vault; we cannot recover a lost key. The server sees encrypted size, upload time, a random vault identifier, and service identity. The current limit is 128 MB per encrypted archive. Concurrent edits preserve copies; permanent deletion wins over an older offline copy. Delete the cloud copy in Settings to disable that vault for every device. Removing the app alone does not delete the cloud vault.

Service security and usage

Apple App Attest verifies app installations. We store the attested public key, pseudonymous service and purchase identifiers, session expiry, request identifiers, and usage counts to validate membership and enforce allowances. We do not put dream text in operational logs. These records are separate from your encrypted journal. Contact support if you need help removing service records; deleting the vault removes its encrypted journal content.

Retention and your choices

Local journal content and saved cloud results remain until you delete them. You can export your journal, delete entries, empty Recently Deleted, and remove the app’s local data. Exports go only to the destination you choose. Device or computer backups may include app data according to your backup settings. Removing Oniryn does not cancel an Apple subscription or delete copies you exported. Cloudflare and OpenAI may retain limited operational or abuse-monitoring records under their terms.

Contact

For privacy questions or requests, email marcvallverdu@gmail.com. Please do not include private dream content unless you choose to share it.

Website analytics (separate from the app)

This website uses the existing Remarcable VC Umami service for anonymous aggregate page views and basic actions, such as an App Store link click, a template download, or printing a template or checklist. We send only the public page path and a bounded placement label for these actions. Query strings and URL fragments are removed; external referrers are reduced to their origin. No analytics cookies or app tracking SDK are added by this website.

Dream text, titles, dates, moods, other template values, and checklist choices are never included in analytics events. The free tools do not upload or automatically save your entries. Analytics does not turn a website click into a verified download or identify an App Store customer. Contact the privacy email above with questions. This section describes the website only and does not change the app processing described above.