Dreampin Privacy Policy
This policy explains how Nexilia.ai s.r.o. handles personal data when you use Dreampin, our vision board app. Your boards, photos and settings stay on your device, and we never receive them. The app sends data only to check Premium and to check for app updates. We also receive the emails you send us and, if you allow it, crash reports from Apple.
1. Who is responsible
Nexilia.ai s.r.o. is the controller of your personal data.
- Company
- Nexilia.ai s.r.o.
- Company ID (IČO)
- 09934995
For privacy questions and requests, email [email protected].
2. Data that stays on your device
We do not collect the data in this section, and it never reaches us.
Boards, photos and settings
Your boards, the photos and text on them, your focus areas, your reminder settings and your language choices are stored in the app's storage on your device. Dreampin does not upload them.
They stay there until you delete them or the app. Deleting a board removes it from your boards, but copies of the photos you added can remain in the app's storage until you delete the app. Your device backups may keep app data, depending on your device settings.
If you export or share a board, the app or person you choose receives the image.
Photos and camera
When you choose a photo, Dreampin opens the system photo picker, which gives the app only the photos you pick and no access to the rest of your library. It asks for access to your camera when you take a photo, and for permission to add images to your photo library when you save an exported board. It does not upload your photos. You can change these permissions in your device's Settings at any time.
Reminders
If you turn on reminders, your device schedules them. Dreampin chooses the affirmation for each reminder on your device, and it sends no reminder data to us or to a notification server. The app checks whether notifications are allowed so that it can respect your choice.
3. Data that leaves your device
Premium and purchases
When you buy Premium, you pay Apple through the App Store, or Google through Google Play. We do not receive your payment card details.
Dreampin uses RevenueCat to show the current Premium plans and to check and restore Premium. Each time you open Dreampin or return to it, the app contacts RevenueCat, even if you have never bought Premium. RevenueCat receives:
- an anonymous app user ID that the RevenueCat software creates for your copy of the app
- the products you buy, your transactions and receipts from the store, and whether Premium is active
- technical data that the RevenueCat software sends with each request, such as your device model, operating system version, app version, preferred languages, App Store country, the identifier for vendor that iOS gives to apps from the same developer, and the IP address of your connection
- Why
- To show the current plans, verify your purchase, unlock Premium and restore it on another device. We also use RevenueCat reports on purchases and subscriptions, for example to see how many people subscribe or cancel.
- Legal basis
- Performance of the contract for Premium, Art. 6(1)(b) GDPR, when you have bought Premium. Our legitimate interest in offering Premium and running our business, Art. 6(1)(f) GDPR, for showing plans and checking Premium when you have not bought it, and for the reports.
- How long
- While we need the records to provide and restore Premium. A lifetime purchase needs its record for as long as you may use the app. If you ask us to delete your records, we delete them, unless the law requires us to keep them.
App updates
Each time you open Dreampin, it asks the Expo update service whether a newer version of the app's code is available, and downloads it in the background if there is one. With each check, Expo receives the platform name, the app version, the IDs of the updates on your device, a random identifier that the update software creates on your device, and the IP address of your connection. If the app failed to start after an update, Expo also receives the error message.
- Why
- To deliver fixes and improvements without waiting for a full App Store release.
- Legal basis
- Our legitimate interest in keeping the app working and secure, Art. 6(1)(f) GDPR.
- How long
- Only as long as reasonably necessary to run the update service, as the Expo privacy policy states. We see only totals, such as how many devices received an update.
Crash reports from Apple
If you turn on sharing with app developers in the Analytics settings of your iPhone, Apple shares crash reports and usage statistics for Dreampin with us through App Store Connect.
- Why
- To find and fix problems in the app.
- Legal basis
- Our legitimate interest in keeping the app working, Art. 6(1)(f) GDPR.
- How long
- As long as App Store Connect keeps them.
Support emails
If you email us, we receive your email address, your name if you include it, your message and any attachments.
- Why
- To answer you and to fix the problem you report.
- Legal basis
- Performance of our contract with you, Art. 6(1)(b) GDPR, when your message is about the app or a purchase. Otherwise, our legitimate interest in answering the messages we receive, Art. 6(1)(f) GDPR.
- How long
- Until your request is resolved, and then no longer than 24 months.
Is giving data required?
You do not need an account, and you never have to send us your boards. When your device is online, the app contacts RevenueCat and Expo automatically, as described above. Without the purchase data, we cannot verify Premium, so you can use only the free version.
4. Who receives your data
- Apple and Google process your payment and manage your subscription, and Apple passes on crash reports if you allow it. They act as independent controllers under their own privacy policies.
- RevenueCat, Inc., USA, processes purchase data for us as our processor. See the RevenueCat privacy policy.
- 650 Industries, Inc., USA, which runs Expo, processes update checks for us as our processor. See the Expo privacy policy.
- Cloudflare, Inc., USA, receives emails sent to our nexilia.ai addresses and forwards them to our Gmail mailbox at Google LLC, USA, where we read, answer and store them.
We do not share your personal data with anyone else, unless the law requires it.
5. Transfers outside the EU
RevenueCat and Expo are based in the USA, so they may process your data there. For both, we rely on the EU Standard Contractual Clauses. For RevenueCat, the clauses are part of its data processing addendum. For Expo, they are part of its terms of service, and Expo is also self-certified under the EU-US Data Privacy Framework. For support emails, Cloudflare relies on the EU Standard Contractual Clauses in its data processing addendum, and Cloudflare and Google are self-certified under the EU-US Data Privacy Framework. To get a copy of these safeguards, email [email protected].
6. Your rights
Under Articles 15 to 21 of the GDPR, you have the right:
- to get a copy of the personal data we hold about you (Art. 15 GDPR)
- to have inaccurate data corrected (Art. 16 GDPR)
- to have your data deleted (Art. 17 GDPR)
- to restrict how we use your data (Art. 18 GDPR)
- to receive your data in a portable format (Art. 20 GDPR)
- to object to processing based on our legitimate interests (Art. 21 GDPR)
Some of these rights apply only in certain situations.
Your boards stay on your device, so we cannot see or delete them for you. You can delete them yourself in the app.
To use your rights, email [email protected]. For purchase records, include the order ID from your App Store or Google Play receipt. Dreampin has no accounts, so the order ID is how we find your records.
You also have the right to complain to a data protection supervisory authority. Ours is the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, which you can reach through the ÚOOÚ website. You can also complain to the supervisory authority in the EU country where you live or work, or where you think the infringement took place.
7. No ads, no tracking, no automated decisions
Dreampin shows no ads. It contains no advertising software and no analytics software that records how you use the app. We do not track you across other companies' apps or websites, and we do not sell your personal data. We make no decisions about you by automated means, including profiling.
8. Children
Dreampin is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you think a child under 13 has sent us personal data, email [email protected] and we will delete it.
9. Changes to this policy
If we change this policy, we update the effective date at the top. If a change is important, we publish it on this page before it applies and, where we can, also tell you in the app.
10. Language
This policy is written in English. If we publish a translation, the English version governs.
11. Contact
Email [email protected].
Dreampin