Privacy Policy – Oneira App

This privacy policy applies to the mobile application Oneira (hereinafter "the app") for iOS and Android. It describes what data the app collects, how it is processed and what rights you have.

1. Controller

elephantmilk asia LLC
University st. No. 17a, floor 10
0186 Tbilisi, Georgia
Email: hello@elephantmilk.com

2. What data does the app collect?

2.1 Voice recordings (audio)

The app records your dream narratives as voice notes. These recordings are stored exclusively on your device. They are not automatically transmitted to any server and are not shared with us.

2.2 Dream journal entries

Transcripts, tags (emotions, places, people, archetypes), moon phase assignments and all other dream data are stored in a local database (SQLite) on your device. There is no cloud synchronisation of your dream content.

2.3 Microphone access

The app requires access to your device's microphone in order to create voice recordings. This permission is requested by the operating system on first use and can be revoked at any time in your device settings. The microphone is only used during active recording – there is no background listening.

2.4 No user accounts

The app does not require a user account, registration or sign-in. No personal data such as name, email address or phone number is collected.

3. Data processing by third parties

3.1 Transcription (optional)

If you enable automatic transcription, the respective audio recording is transmitted to the OpenAI Whisper API to be converted into text. This transfer:

• Only happens if you have explicitly enabled the feature
• Can be limited to Wi-Fi connections
• The recording is only processed for transcription and, according to OpenAI, is not used to train models

OpenAI privacy policy: openai.com/policies/privacy-policy

3.2 Automatic tagging (optional)

After transcription, the transcript may be transmitted to the Groq API for automatic recognition of emotions, places, people and dream types. The same conditions apply as for transcription: only when enabled, only transcript text (no audio), and according to Groq, not used for model training.

Groq privacy policy: groq.com/privacy-policy

3.3 Cosmic calendar

To display astrological events (moon phases, eclipses, planetary transits), the app may fetch event data from a server. This request transmits no dream content, no personal data and no device identifiers.

3.4 Crash reports (optional)

If enabled, anonymous technical crash reports may be sent to Google via Firebase Crashlytics to improve app stability. These reports contain:

• Device type and operating system version
• Stack traces of the crash
• No dream content, no recordings, no personal data

You can disable crash reports in the app settings.

4. Data the app does NOT collect

• No location data
• No contacts
• No photos or media library
• No advertising IDs or tracking
• No usage profiles for advertising purposes
• No sharing or selling of data to third parties
• No behavioural analysis for marketing purposes

5. Data storage and deletion

All dream data (recordings, transcripts, tags) is stored exclusively on your device. You can:

• Delete individual dream entries at any time within the app
• Remove all data completely by uninstalling the app
• Remove or change API keys at any time in the settings

Since we do not store any data on our servers, there is no server-side deletion you would need to request.

6. Data security

Your data is protected by your operating system's security mechanisms (iOS Sandbox, Android App Sandbox). Communication with third-party APIs (Whisper, Groq) is encrypted via HTTPS/TLS.

7. Children

The app is not directed at children under 13 and does not knowingly collect data from children. If you are a parent or guardian and discover that a child is using the app, please contact us at hello@elephantmilk.com.

8. Your rights (GDPR)

You have the following rights:

• Access – What data is processed about you (Art. 15 GDPR)
• Rectification – Correction of inaccurate data (Art. 16 GDPR)
• Erasure – Right to be forgotten (Art. 17 GDPR)
• Restriction – Restriction of processing (Art. 18 GDPR)
• Data portability – Data in a machine-readable format (Art. 20 GDPR)
• Objection – Object to processing (Art. 21 GDPR)
• Complaint – To a data protection supervisory authority (Art. 77 GDPR)

Since your dream data lives exclusively on your device, you can exercise all of these rights yourself by viewing, exporting or completely removing your data by deleting the app.

9. Changes to this policy

We will update this privacy policy when the app's features or data processing practices change. The current version is always available at oneira.life/en/app-privacy.html.

10. Contact

For questions about data privacy in the Oneira app, contact us at:
hello@elephantmilk.com

Last updated: July 2026