Privacy Policy

Last updated: September 18, 2026

This policy describes what data Nightwards processes, why, and how you can access or delete it.

1. Data Controller

Responsible for data processing under the Swiss Federal Act on Data Protection (revFADP) and, for users in the EU, the GDPR:

2. What Data We Process

Nightwards works without an account or login. On first launch, your device generates a random, pseudonymous device ID and stores it in your device's Keychain. This device ID – not your name or Apple ID – is the key under which any server-side data is stored.

Pseudonymous Device ID

• A random UUID, generated and stored locally in your device's Keychain
• The only link between your device and any data stored on our servers
• No name, email address, or account is attached to it

Dream Recordings & Transcripts

• During your morning dream log, you record up to 30 seconds of audio
• The recording is sent to our own backend (Railway), which forwards it to OpenAI (model whisper-1) for transcription
• The audio itself is never stored on our servers – only the resulting text (transcript) is saved
• An optional second AI step (OpenAI gpt-4o-mini) compares the transcript against your saved motifs; the response is a yes/no flag only, no further analysis

Journal Backup

So that your journal is not lost when you reinstall the app, we store the text of your entries encrypted under your device ID on our server (Railway). Entries you delete individually remain there until you choose "Delete my data".

Wish Sentence

The sentence that glows on your Lock Screen is stored server-side, encrypted with AES-256-GCM, so we can send you the matching push notification.

Future Memory: scene, image, and profile details

• From your intention sentence, an AI step (OpenAI, model gpt-4o-mini) creates a short scene that is spoken to you inside the meditation. For this, the sentence is decrypted and sent to OpenAI
• On request, an image is created from it (OpenAI, model gpt-image-2). The scene and the intention sentence are sent for this
• You may voluntarily state how you describe yourself and which age group you are in. These two details go into the image instruction only, so that the person shown is not guessed. You can leave both blank
• The generated image is stored on your device and, until deletion, on our server

Speech Playback

So that your sentence and your scene can be read aloud to you, the respective text is sent to ElevenLabs and turned into speech there (see section 5). No recording of your own voice is sent there.

Session Metadata

Timestamps, duration, and completion status of your evening sessions, along with lucid and motif-match flags from your dream logs, are stored under your device ID in a PostgreSQL database (Railway).

Push Tokens

For Live Activity features like the Wish Glow (WishGlow) on your Lock Screen, we store your device's push token (Apple APNs).

Purchase Status

Whether your subscription is active is managed by Apple and RevenueCat. We only see your subscription status, never payment data (see section 5).

Feedback

Via the feedback field in Settings, you can voluntarily send us a message. The feedback text is stored pseudonymously under your device ID in our database and does not leave it. Please don't include sensitive information in your feedback.

Analytics

PostHog (EU) records pseudonymously how the app is used and derives an approximate location from the IP address – never content such as your sentence, your entries, or images.

Location

For sunrise and sunset, our server roughly estimates your region from your IP address (via ip-api.com). Nothing is stored.

Local-only (never leaves your device)

• The SQLite database with your moments and settings
• The dream audio files themselves
• Photos from your library that you use in the Studio
• A proof photo you attach after a fulfilled manifestation, and an image of your own that you use instead of the generated one – both stay on the device and are never transmitted
• Screen Time / Family Controls data, if you enable App Shield (Apple's own framework)

3. What We Use the Data For

• App functionality: evening sessions, dream log, Wish Glow on the Lock Screen, night-sky view
• Transcription: turning your dream recording into text (OpenAI)
• Motif matching: optional yes/no comparison against your saved motifs (OpenAI)
• Future Memory: creating the scene and – on request – the image for it (OpenAI)
• Speech playback: reading your sentence and your scene aloud (ElevenLabs)
• Subscription management: checking your purchase status (Apple, RevenueCat)
• Product improvement: pseudonymous usage data (PostHog)
• Advertising measurement: finding out which of our ads led to an install (Meta, TikTok) – only with your explicit consent

We do not sell your data and we do not build profiles for third parties. What we measure is solely whether an install came from one of our ads – see section 11. Your dream recordings, transcripts, your sentence, your name and your email address never enter it.

4. Legal Basis

For users in Switzerland, processing is based on the revFADP, in particular contract performance (Art. 31 para. 2 lit. a revFADP). For users in the EU, the GDPR applies: core functionality (sessions, dream log, transcription, subscription) relies on contract performance (Art. 6 para. 1 lit. b GDPR); pseudonymous product analytics and the secure operation of the app rely on our legitimate interest (Art. 6 para. 1 lit. f GDPR) in a working, secure app. Advertising measurement relies solely on your consent (Art. 6 para. 1 lit. a GDPR, Art. 31 para. 1 revFADP), which you give through the iOS prompt "Allow this app to track your activity across other companies' apps and websites" and can withdraw at any time.

5. Data Processors

We use the following service providers who process data on our behalf. Appropriate data processing agreements are in place with each of them.

Hosting & Database

Transcription & Motif Matching (AI)

Speech Playback

Subscription Management

Product Analytics

Advertising Measurement (only with your consent)

Neither service below receives any dream recordings, transcripts, your sentence, your name or your email address. Without your consent to the iOS tracking prompt, your device's advertising identifier is not read (see section 11).

Purchase Handling & Push Delivery

6. International Data Transfers

OpenAI, RevenueCat, Railway, and ElevenLabs process data in the US – a country without a level of data protection recognized as adequate by Switzerland. Transfers rely on Standard Contractual Clauses (SCCs) or, where the provider participates, the Swiss-U.S. Data Privacy Framework. PostHog is hosted exclusively in the EU – no international transfer occurs there. Meta Platforms Ireland and TikTok Technology Limited are based in Ireland but also process the advertising measurement data outside the EU, on the basis of their Standard Contractual Clauses. This transfer only happens if you consented to the tracking prompt.

7. Retention Period

• Audio: never stored on our servers – processed only during transcription, then discarded
• Transcripts, session metadata, wish sentence, push token: until you delete them (see section 9)
• Feedback: until deletion – removed along with "Delete my data"
• Local data on your device: remains until you delete it or uninstall the app

8. Your Rights

You have the right to:

• Access the data stored under your device ID
• Correct inaccurate data
• Delete your data (see section 9)
• Restrict processing
• Port your data (export on request)
• Object to processing
• Complain to a supervisory authority (see section 12)

For requests, contact info@dreamr.ch. Since we don't have accounts or logins, we may ask for a few extra details in email requests (e.g. approximate usage period, device type) to help us locate your data.

9. Deleting Your Data

In the app, go to Settings → "Delete my data" to delete, with one tap, all data stored on our servers under your device ID as well as all local data on your device. You can also request deletion by emailing info@dreamr.ch.

10. Security

Transmission is encrypted (TLS). The wish sentence, affirmations, and journal texts are additionally encrypted server-side with AES-256-GCM. Your device ID is kept securely in your device's Keychain.

11. Cookies and Advertising Measurement

This website uses no cookies, no trackers, and no analytics.

Inside the app there are two separate things. First, the pseudonymous product analytics via PostHog in the EU (see sections 2 and 5) – unrelated to advertising. Second, advertising measurement via Meta and TikTok: it answers whether an install came from one of our ads.

For that, iOS asks you once after onboarding ("App Tracking Transparency"). Without your consent your device's advertising identifier (IDFA) is neither read nor transmitted. Attribution then runs only through Apple's SKAdNetwork, which works without reference to an individual person. You can change your answer at any time: iOS Settings → Privacy & Security → Tracking.

12. Right to Complain

Users in the EU may additionally contact the competent data protection authority in their country of residence.

13. Changes

Changes to this policy will be reflected on this page with an updated date. Last updated: September 18, 2026.