Privacy Policy

1. INTRODUCTION

This Privacy Policy explains how Alrawidream ('we', 'us', or 'our') collects, uses, stores, shares, and protects your personal information when you use our mobile-first social dream-sharing platform. By creating an account or using Alrawidream, you consent to the practices described in this policy. We are committed to transparency, data minimization, and giving you control over your information.

2. INFORMATION WE COLLECT

We collect only the information necessary to provide and improve the service. This falls into the following categories:

• Account Information: Email address, encrypted password, and a public nickname or username you choose. Your real email address is never shown publicly.
• Profile Information: Optional avatar image, biography, and display preferences that you voluntarily provide.
• Dream Content: Text posts, titles, tags, comments, and any voice recordings you upload to your private journal or choose to share publicly.
• Usage Data: App interactions, feature usage, and technical logs such as IP address, device type, browser information, and crash reports. These are used solely for reliability and security.
• Communications: Emails or support messages you send to alrawidream@icloud.com, including moderation appeals and data-deletion requests.

3. HOW WE USE YOUR INFORMATION

We use your information to operate, secure, and improve Alrawidream:

• To authenticate your account and keep it secure.
• To display public dream posts and enable peer-to-peer community interaction.
• To run automated content moderation and optional language translation on public posts.
• To respond to support requests, reports, and appeals.
• To monitor platform health, prevent abuse, and enforce our Terms of Service.
• We do not sell your personal data to advertisers or data brokers.

4. PRIVATE JOURNAL — STRICT PRIVACY

Your Private Journal is designed to be a strictly personal space. We take extraordinary measures to protect it:

• Visibility: Private journal entries and voice recordings are visible ONLY to you. They are never displayed on public feeds, author profiles, search results, or to other users.
• Passcode Protection: You may set an optional in-app passcode to add an additional layer of protection to your Private Journal.
• Row Level Security (RLS): Every private entry is stored in our Supabase database with strict RLS policies that prevent any other user — including administrators in normal operations — from reading your private content.
• No Public Sharing by Default: A private entry can only become public if you explicitly choose to 'Share to Galaxy' and it passes our content moderation review.
• Encryption in Transit & at Rest: Data is transmitted over HTTPS and stored on infrastructure with standard encryption practices.

5. PUBLIC POSTS & COMMUNITY VISIBILITY

When you choose to publish a dream publicly, the following information becomes visible to the community:

• Your public nickname or 'Anonymous' label, depending on your publishing choice.
• The dream title, content, tag, and any public engagement metrics such as likes and comments.
• Optional translated versions of your title and content, generated solely for community accessibility.
• Your real email address and private journal entries are never visible to other users.

6. AI CONTENT MODERATION & PRIVACY

To keep the community safe, public posts and comments are processed by automated moderation systems. Here is exactly how that works:

• AI Provider: We use a two-layer OpenAI filter. Layer 1 is the free OpenAI Moderation API for general safety (hate, sexual content, violence, self-harm, and similar). Layer 2 is gpt-4o-mini for Alrawidream custom rules: real-world politics or government criticism, financial/lottery scams, and commercial fortune-telling. Optional translation also uses gpt-4o-mini.
• Purpose Only: AI is used exclusively for automated content moderation (detecting hate speech, harassment, explicit content, dangerous content, self-harm, and similar violations) and optional language translation of user posts.
• No Training Guarantee: Your private data, dream journals, and public posts are NOT used to train, fine-tune, or improve third-party AI models. Content is processed only for immediate moderation decisions.
• No AI Advice: Alrawidream does not provide AI dream analysis, interpretations, consultations, or AI-generated responses. AI functions solely as a safety filter.
• Human Review: Automated moderation decisions may be reviewed by human moderators for appeals, edge cases, or administrative oversight.
• Pending Review: All public posts enter a moderation queue and are set to 'PENDING' until approved. They are not visible to the public during review.

7. DATA STORAGE & SECURITY

Protecting your data is a core priority. We implement the following safeguards:

• Infrastructure: All user data is stored on Supabase enterprise-grade cloud infrastructure.
• Row Level Security (RLS): Our database uses strict RLS policies to ensure users can only access their own data and content they are explicitly authorized to view.
• Authentication: Passwords are hashed and never stored in plain text. Sessions are managed securely.
• Encryption: Data is encrypted in transit using HTTPS/TLS and protected by Supabase's standard encryption-at-rest practices.
• No Absolute Security Guarantee: While we follow industry-standard practices, no system can guarantee 100% security against all cyberattacks or breaches.

8. DATA SHARING & THIRD PARTIES

We do not sell your personal information. We share data only in limited circumstances:

• Service Providers: We use Supabase for database, authentication, and storage services. These providers are bound by strict confidentiality and security obligations.
• AI Provider: Public post content is sent to OpenAI for moderation and translation only.
• Legal Compliance: We may disclose information if required by law, court order, or to protect our rights, users, or public safety.
• Business Transfers: In the event of a merger, acquisition, or asset sale, user data would be transferred subject to the same privacy commitments.

9. COOKIES & ANALYTICS

Alrawidream uses minimal cookies and analytics:

• Authentication Cookies: Used to keep you signed in securely.
• Essential Cookies: Required for basic app functionality and security.
• We do not use tracking cookies for advertising or behavioral profiling.

10. YOUR RIGHTS & CHOICES

Depending on your jurisdiction, you may have the following rights regarding your data:

• Access: You can view your account information, published dreams, and private journal entries within the app.
• Correction: You can update your nickname, avatar, and other profile information at any time.
• Deletion: You can delete individual posts or your entire account, which permanently removes associated data.
• Portability: You may request a copy of your data by contacting alrawidream@icloud.com.
• Objection & Restriction: You may request that we restrict or stop certain processing of your data, subject to legal and operational requirements.
• Withdraw Consent: You can delete your account at any time to withdraw consent for data processing.

11. ACCOUNT & DATA DELETION (RIGHT TO BE FORGOTTEN)

You have full control over your data. Deleting your account is permanent and comprehensive:

• How to Delete: You can request account deletion at any time via the in-app Profile/Settings screen or by contacting alrawidream@icloud.com.
• What Is Deleted: Upon deletion, your authentication credentials (email), profile identity, and ALL associated user-generated content — published dreams, private journal entries, voice recordings, comments, likes, and follows — are permanently purged from our Supabase database.
• No Archived Copies: We do not retain anonymized, archived, or backup copies of your posts or journals after deletion.
• Irreversible: Once deletion is confirmed, the action cannot be undone. We cannot recover deleted data.
• Timeline: Deletion requests are typically processed within 30 days, with most completed immediately upon confirmation.

12. CHILDREN'S PRIVACY (COPPA)

Alrawidream is not intended for children under 13. We do not knowingly collect personal data from children under 13 without verifiable parental consent. If we discover an account belonging to a child under 13 registered without such consent, we will terminate the account immediately and permanently delete all associated personal data. Parents or guardians who believe their child has provided personal information may contact us at alrawidream@icloud.com.

13. INTERNATIONAL DATA TRANSFERS

Alrawidream is operated globally. Your data may be stored and processed in countries other than your own, including the United States and European Union data centers used by Supabase. We rely on standard contractual clauses and other legally recognized safeguards to protect your data during international transfers.

14. VIRTUAL ITEMS & TICKETS (NO MONETARY VALUE)

Alrawidream may offer in-app virtual credits such as Moon Tickets and Wild Tickets to unlock features. These virtual items are governed by the following rules:

• No Cash Value: All virtual credits have zero cash value, are not redeemable, and cannot be exchanged for real money, goods, or services outside the app.
• Not Sold: Alrawidream does NOT sell tickets or credits. They are earned through progression, activity, or promotions only.
• No P2P Trading: Buying, selling, trading, gifting, or transferring tickets between users or with third parties outside the platform is strictly prohibited.
• Zero Liability for External Transactions: Alrawidream accepts no liability for any scams, chargebacks, financial disputes, or losses arising from unauthorized external transactions involving virtual credits.
• Enforcement: Accounts involved in unauthorized ticket trading or attempts to monetize credits may be permanently banned without warning.

15. INTERNATIONAL DATA TRANSFERS

Alrawidream is operated globally. Your data may be stored and processed in countries other than your own, including the United States and European Union data centers used by Supabase. We rely on standard contractual clauses and other legally recognized safeguards to protect your data during international transfers.

16. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service features. We will notify you of material changes through the app or by email. Continued use of Alrawidream after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

17. CONTACT US

For all privacy-related inquiries, including data access requests, data deletion requests, DMCA takedowns, moderation appeals, and general support, please contact us at:

• Email: alrawidream@icloud.com