Privacy Policy

Last updated: October 17, 2026

Dreams are personal. This policy explains, in plain language, what data Devaneia uses, what for, who it is shared with and how you stay in control.

It covers the Devaneia app for Android and this website. We follow Brazil's General Data Protection Law (LGPD, Law 13,709/2018).

1. Who we are

Devaneia is a dream journal for Android. You tell a dream, by typing or by voice, and get a reading (an interpretation) written by artificial intelligence. If you want, you also get an AI-generated image of the dream.

Devaneia and the processing of your data are the responsibility of the app's developer (the data controller under the LGPD). To talk about privacy, including with our Data Protection Officer ("Encarregado" under the LGPD), write to samilis.contact@gmail.com.

2. What data we use

Using Devaneia without an account

Your first dream works without an account. When you save it, we create an anonymous session tied only to the app on your phone. It has no name or e-mail.

Account

If you sign in with Google, Google shares your name, your e-mail and an identifier for your Google account with us. Sign-in by e-mail with a one-time code may also be available; in that case we use your e-mail. When you accept the terms, we record which version you accepted and when.

Profile (optional)

If you want, you can fill in:

• display name;
• birth date or stated age;
• your chosen zodiac sign and whether readings should consider it;
• nationality;
• profession.

None of this is required. It only helps make readings closer to your life.

Journal content

• the text of your dreams;
• your answers to follow-up questions about the dream;
• the readings;
• symbols and themes extracted from your dreams;
• generated images;
• your feedback on readings.

Dreams are first saved on your phone, in a local database, and then synced to our server.

Technical data

For each call to the AI services, we log technical data: the model used, token counts, cost, duration and outcome. This log does not include the content of your dream.

The app has no ads and no third-party analytics SDKs.

3. Voice

When you tell a dream by voice, Android's own speech recognition turns your speech into text. Whenever possible, this happens on the device. If your phone lacks offline support for the language, Android may use Google's service to transcribe it.

Devaneia only receives the text. We do not store audio.

4. How AI is involved

To create the reading and the image, our server sends the dream text and your answers to OpenAI. OpenAI also runs a safety check on the content (moderation).

Under OpenAI's API terms, data sent through the API is not used to train its models by default. And Devaneia never uses your dreams to train AI models.

5. Why we use data and our legal bases

• Providing the service (keeping your journal, creating readings and images, syncing, running your account and applying free usage quotas). Legal basis: performance of a contract (LGPD art. 7, V).
• Optional profile data and voice input. Legal basis: consent (art. 7, I). You can delete this data or stop using voice at any time.
• Security and abuse prevention (moderation, protection against automated use, technical logs). Legal basis: legitimate interest (art. 7, IX).

Dreams may include sensitive information about health, religion, sex life or other topics. We process this content only to deliver the service you asked for, with the same care at every step.

6. Who we share data with

We do not sell your data. We do not share data for advertising. We only use the providers Devaneia needs to work:

• Supabase: database and file storage, where your journal, profile and images are kept.
• Google Cloud Run: Devaneia's server, which talks to OpenAI.
• OpenAI: creates readings and images and runs safety moderation.
• Google: Google sign-in and, in some cases, the speech transcription done by Android.

We may also share data when required by law or by a competent authority.

7. Where data is stored

The database and files are stored with Supabase in the São Paulo region, Brazil (AWS sa-east-1). Our server runs on Google Cloud Run, also in São Paulo.

OpenAI is located in the United States. So the dream text and your answers are transferred outside Brazil when the reading and the image are created. This international transfer follows article 33 of the LGPD and is necessary to provide the service you asked for.

8. Security

• Each person can only access their own data. The database enforces this with row level security.
• Data is encrypted in transit (HTTPS).
• You can turn on an app lock using your phone's biometrics or PIN. Biometrics never leave the device; Devaneia has no access to them.

No system is completely immune to failures. If a security incident could cause you relevant risk or harm, we will notify you and the ANPD (Brazil's data protection authority), as the law requires.

9. How long we keep data

• With an account: for as long as the account exists. When you delete it, we delete your dreams, readings, images and profile.
• Without an account: anonymous data with no activity is deleted automatically after 180 days.

We may keep something longer only when the law requires it.

10. Your rights

Under the LGPD (art. 18), you can:

• confirm whether we process your data and access it;
• correct incomplete, wrong or outdated data;
• ask us to delete your data;
• ask for data portability;
• know who we share your data with;
• withdraw your consent at any time;
• file a complaint with the ANPD (Autoridade Nacional de Proteção de Dados).

How to delete your account

In the app, go to Perfil > Conta e privacidade > Excluir conta (Profile > Account and privacy > Delete account). This deletes your dreams, readings, images and profile. You can also ask for deletion by e-mail at samilis.contact@gmail.com.

For any other right, write to the same address. We may ask you to confirm the account is yours first.

11. Minimum age

Devaneia is for people aged 18 or older. We do not knowingly collect data from minors. If you know of such a case, write to us and we will delete the data.

12. This website

On this website, we measure visits with Umami, an analytics tool that uses no cookies and does not identify you. It counts page views and general information such as country and browser type.

If you leave your e-mail on the waitlist, we use it only to send Devaneia news. To leave the list, just ask at the contact e-mail.

13. Changes to this policy

We may update this policy as Devaneia changes. When a change is important, we will let you know in the app or on this website. The date at the top shows the last update.

14. Contact

Privacy questions, requests or complaints: samilis.contact@gmail.com.

See also the Terms of Use.