Privacy Policy
Your dreams are the most personal thing you can write down. This page explains exactly what we hold, why, and how to get rid of it.
Who is responsible
The data controller is Neuravoid, a French société par actions simplifiée whose registered office is at 50 avenue des Champs-Élysées, 75008 Paris, France. For any question about this policy or about your data, write to privacy@reverist.app.
What we collect
| Data | Why |
|---|---|
| Email address | To create and secure your account, and to contact you about the service. |
| Account identifier | To attach your dreams to you and nobody else. |
| Voice recordings | To transcribe what you said on waking. Stored privately and served only through short-lived signed links. |
| Dream text, reflections and generated images | This is the service. It is your journal. |
| Subscription status | To unlock what you paid for. We never see your card details. |
| Crash and performance data | To find and fix defects. |
| Usage events | To understand which parts of the app are used. Never sold, never used for advertising. |
| Push token | To send the morning reminder, only if you allow notifications. |
We ask your year of birth once to confirm you are at least sixteen. We do not store it. Only a yes or no answer stays on your device.
We do not track you across other apps or websites. There is no advertising identifier, no advertising network, and no data broker.
Why we are allowed to hold it
- Performance of our contract with you, for your account, your journal, transcription, reflection, image generation and subscription management.
- Our legitimate interest, for security, fraud prevention, and fixing crashes.
- Your consent, for push notifications and usage analytics, which you can withdraw at any time in the app settings or in your device settings.
- Our legal obligations, for accounting and tax records relating to your purchases.
Who processes it for us
We use a small number of specialist providers. They act on our instructions and may not use your data for their own purposes.
| Provider | Role |
|---|---|
| Supabase | Database, authentication and private file storage, hosted in the European Union. |
| Railway | Application server hosting. |
| OpenAI | Speech to text transcription of your recordings. |
| Anthropic | Generation of the written reflection on your dream. |
| Replicate | Generation of the image inspired by your dream. |
| RevenueCat | Subscription state, on top of Apple and Google billing. |
| Apple and Google | Payment, billing and refunds. They are independent controllers for that. |
| Sentry | Crash reporting. |
| PostHog | Product analytics, on European infrastructure. |
| Expo | Delivery of push notifications. |
Some of these providers are established in the United States. Those transfers rest on the European Commission's standard contractual clauses, together with the safeguards each provider publishes.
Your dream content is never used to train anyone's models.
How long we keep it
Your journal stays as long as your account exists, because that is the point of a journal. Voice recordings are kept so that you can listen back to them, and are deleted with the dream they belong to. Crash and analytics data are kept for up to twelve months. Records relating to purchases are kept for ten years, as French accounting law requires.
When you delete your account, we erase your dreams, recordings, images and profile. Backups holding residual copies are rotated out within thirty days.
Your rights
Under the General Data Protection Regulation you may ask for access to your data, correction of it, erasure of it, a portable copy of it, restriction of its processing, or object to processing based on our legitimate interest.
Two of these are immediate and need no request. In the app settings you can export everything in a machine-readable file, and you can delete your account outright. For anything else, write to privacy@reverist.app. We answer within one month.
If you believe we have mishandled your data, you may complain to the Commission Nationale de l'Informatique et des Libertés, the French supervisory authority, at cnil.fr.
Children
Reverist is not intended for anyone under sixteen. We ask for confirmation of age before an account is created. If you believe a child has given us data, write to us and we will remove it.
Security
Traffic is encrypted in transit. Recordings and images sit in a private store and are reachable only through links that expire. Access to production data is limited to what is needed to run the service.
Changes
If this policy changes in a way that affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.