Privacy Policy

Last updated: June 11, 2026. We respect your privacy as much as we respect our own. The clauses below explain, in plain English, exactly what we collect, why, and what you can do about it.

The full policy

1. Who we areThis Privacy Policy describes how Mydreams App ("we", "our", "us") collects, uses, stores and protects information about you when you use our website, services and related applications.
2. Scope of this policyThis policy applies to all visitors, registered users, premium subscribers and anyone who interacts with our customer support channels, regardless of the device used to access Mydreams App.
3. Information you provideWe collect information you submit voluntarily, including your email address, display name, payment details, preferences, profile customisations, messages and any optional details you share inside conversations.
4. Information collected automaticallyWe automatically collect technical data such as IP address, browser type, device identifiers, time zone, pages viewed, referring URLs and aggregated session statistics for security and performance.
5. Cookies and similar technologiesWe use first-party and third-party cookies, pixels, local storage and similar technologies to keep you logged in, remember preferences, prevent fraud and measure how our service performs.
6. Why we collect dataWe process information to provide and improve Mydreams App, personalise your experience, authenticate you, handle payments, prevent abuse, comply with law and communicate with you about your account.
7. Legal bases for processingWhere the GDPR applies we rely on consent, contractual necessity, legal obligations and our legitimate interests in providing and securing the service.
8. Children and minorsOur service is strictly intended for adults aged 18 and older. We do not knowingly collect data from anyone under 18 and we promptly delete such data when discovered.
9. Identity and age verificationFor specific features we may verify your age or identity through trusted third-party providers. We retain only the result of that check, not the underlying documents.
10. Account informationYour account information is used to authenticate you, restore lost access, prevent duplicate sign-ups and detect suspicious activity from unfamiliar devices or locations.
11. Chat contentConversations you have inside Mydreams App are stored to provide memory, continuity and personalisation. They are encrypted at rest and are never sold to third parties.
12. Voice notes and mediaVoice notes, images and other media you exchange with companions are stored under the same encryption standards as text messages and follow the same retention rules.
13. Personalisation and recommendationsWe may use anonymised conversation signals to recommend personalities, themes and features. You can opt out of personalisation in your account settings.
14. Payment dataPayments are processed by PCI-DSS compliant providers. We never store your full card details on our own servers — only tokens required to manage your subscription.
15. Marketing communicationsWe may send you product updates, tips and offers. You can unsubscribe at any time using the link in our emails or through your account preferences.
16. Third-party service providersWe share limited data with vetted providers for hosting, analytics, payment, anti-fraud, customer support and email delivery. Each is bound by strict data-processing agreements.
17. International transfersYour data may be processed in countries other than your own. When this happens we rely on standard contractual clauses or equivalent safeguards to protect your information.
18. Retention periodsWe retain personal data for as long as your account is active, plus the period required by law or for legitimate business purposes. Inactive accounts may be deleted after 24 months.
19. BackupsEncrypted backups are kept for up to 90 days for disaster recovery. After that period, deleted data is permanently purged from backups in the normal rotation cycle.
20. Security measuresWe use TLS in transit, AES-256 at rest, hardware-protected key management, regular penetration testing and an internal least-privilege access model.
21. Data breach notificationIn the unlikely event of a data breach affecting your personal information, we will notify you and the relevant authorities within the timeframes required by law.
22. Your access rightsYou may request a copy of the personal data we hold about you, learn how it is processed and obtain it in a portable, machine-readable format.
23. Right to correctionIf any information we hold about you is incorrect or incomplete you may request that we update or correct it through your account or by contacting support.
24. Right to deletionYou can ask us to delete your account and personal data at any time. Some information may be retained where required for legal, accounting or fraud-prevention purposes.
25. Right to objectYou may object to certain processing activities, including direct marketing and profiling, and we will honour your request unless there is an overriding legal reason not to.
26. Right to withdraw consentWhere processing is based on consent you may withdraw that consent at any time without affecting the lawfulness of any processing carried out previously.
27. California residents (CCPA)If you are a California resident you have additional rights including the right to know, the right to delete and the right to opt out of the sale of personal information.
28. Do Not Track signalsOur website does not respond to Do Not Track signals at this time, but you can control tracking through cookie settings and your browser preferences.
29. Analytics and aggregated dataWe may use aggregated, anonymised statistics for research and product development. This data cannot be linked back to individual users.
30. Automated decision-makingWe do not make solely automated decisions that produce legal effects on you. AI-generated content inside Mydreams App is part of the service, not a binding decision about you.
31. Third-party linksOur service may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to read their policies separately.
32. Account closureWhen you close your account, we deactivate your profile immediately and remove personal data within 30 days, except where retention is legally required.
33. Updates to this policyWe may update this Privacy Policy from time to time. Material changes will be highlighted on our site and, where appropriate, sent by email before they take effect.
34. Effective dateThis Privacy Policy is effective as of the date of last update displayed below and replaces any previous version.
35. How to contact usFor privacy questions, data requests or complaints please contact privacy@mydreams-yes.com. We respond within five business days.