Privacy Policy

Protecting your data matters to us – with Oneira, it is part of the product itself. This policy explains which data is processed when you visit this website and when you use the Oneira app.

1. Controller

elephantmilk asia LLC
University st. No. 17a, floor 10
0186 Tbilisi, Georgia
Email: hello@elephantmilk.com

2. Data processing on this website

2.1 Server log files

When you visit this website, the hosting provider automatically collects information in so-called server log files, which your browser transmits automatically: IP address, date and time of the request, page accessed, browser type and version, operating system and referrer URL. This data is used solely to ensure trouble-free operation and to improve security (legal basis: Art. 6(1)(f) GDPR). It is not combined with other data sources, and log files are deleted after a short period.

2.2 No cookies, no tracking

This website does not use cookies for analytics or marketing purposes, no tracking pixels and no analytics services. Your language preference (German/English) is stored only locally in your browser (localStorage) and is never transmitted to us.

2.3 Locally hosted fonts

All fonts (Lato, Cormorant Garamond) are served locally from our server. No connection to Google servers or other third parties is established.

2.4 Contact by email

If you contact us by email, we process the information you provide in order to handle your enquiry (Art. 6(1)(b) or (f) GDPR). We do not share this data without your consent.

3. Data processing in the Oneira app

3.1 Local-first principle

Oneira is built local-first, without compromise: your voice recordings, transcripts, tags and all dream data are stored exclusively on your device. There is no cloud synchronisation of your dreams, no user account and no server-side storage of your content by us.

3.2 Microphone permission

The app needs access to your microphone to record your dreams as voice notes. The recordings remain on your device.

3.3 Optional transcription and analysis

If you enable transcription, the respective audio recording is transmitted to a speech-to-text service (OpenAI Whisper API) to be converted into text. For automatic tagging and analysis, the transcript may be transmitted to an AI service (Groq API). This transfer only happens if you have enabled the feature, and it can be limited to Wi-Fi connections. The results are stored locally on your device. Please refer to the privacy notices of the respective providers (OpenAI and Groq); according to their statements, content submitted via the API is not used to train models.

3.4 Cosmic calendar

To display astrological events, the app may fetch event data (e.g. moon phase dates) from a server. No dream content or personal data is transmitted in the process.

3.5 No advertising, no sharing

We do not sell data and do not share dream content with third parties. Anonymous technical usage statistics (e.g. crash reports) – if enabled – are used only to improve app stability and never contain dream content.

4. Your rights

Under the GDPR you have the following rights:

• Access to the personal data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure ("right to be forgotten", Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

Since your dream data lives exclusively on your device, you can view it, export it or remove it completely at any time by deleting the app.

5. Changes to this policy

We will update this privacy policy whenever the features of the website or the app change. The version published here always applies.

Last updated: July 2026