Privacy Policy

Last Updated: October 9, 2025

1. Introduction

Welcome to DreamLens Mobile ("we," "our," or "us"). This Privacy Policy explains how SBK Soft collects, uses, discloses, and safeguards your information when you use our mobile application DreamLens Mobile (the "App"). We are committed to protecting your privacy and ensuring transparency in our data practices.

Controller Information:

Name: Samet Buyukkomurcu
Company: SBK Soft
Address: Gaziantep, Turkey
Email: legal@sbksoft.com
Website: sbksoft.com

By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We follow a data minimization principle and collect only the information necessary to provide our services:

2.1 Personal Information

Email address (for authentication and communication)
Name (optional, for personalization)
Date of birth (optional, for zodiac sign calculations)
Gender (optional, for personalized insights)
Location (optional, for time zone and regional features)
Zodiac sign (optional, calculated from date of birth)

2.2 Dream Journal Data

Dream descriptions (text entries)
Audio recordings (when you use voice recording features)
Images (when you attach images to dreams)
Mood indicators and emotional states
Tags and categories you assign to dreams
Dream intensity ratings
Timestamps of dream entries

2.3 AI Analysis Data

AI-generated dream interpretations
Insights and patterns identified by our AI systems
Usage statistics related to AI features

2.4 Usage Information

App usage statistics and analytics
Feature usage patterns
Performance metrics
Notification preferences
Language preferences

2.5 Technical Information

Device type and operating system
App version
Crash reports and error logs
Push notification tokens (for Firebase Cloud Messaging)
Advertising ID (for free users only, via Google AdMob)

3. How We Collect Information

We collect information through:

Direct input when you create an account or update your profile
Automatic collection when you use the App
Third-party authentication services (Google Sign-In, Facebook Login)
Audio recording when you use voice recording features
Image picker when you attach photos to dreams

4. How We Use Your Information

We use the collected information for the following purposes:

4.1 Core Services

Providing dream journaling and analysis features
Generating AI-powered insights and interpretations
Storing and organizing your dream entries
Synchronizing data across your devices

4.2 Communication

Sending dream reminder notifications
Notifying you when AI analysis is complete
Responding to your inquiries and support requests
Sending important service updates

4.3 Improvement and Analytics

Improving App functionality and user experience
Analyzing usage patterns to enhance features
Monitoring app performance and fixing bugs
Developing new features based on user needs

4.4 Legal and Security

Complying with legal obligations
Protecting against fraud and abuse
Enforcing our Terms of Service
Ensuring data security and integrity

5. Legal Basis for Processing (GDPR/KVKK)

Under GDPR and KVKK, we process your personal data based on:

Consent: You provide explicit consent for data processing when using the App
Contract: Processing is necessary to provide services you requested
Legitimate Interest: We have legitimate interests in improving our services and ensuring security
Legal Obligation: We comply with applicable laws and regulations

6. Data Storage and Security

6.1 Data Location

Your data is stored on secure servers located in the European Union, provided by Supabase. We ensure compliance with GDPR and KVKK requirements for data protection.

6.2 Security Measures

We implement industry-standard security measures to protect your data:

Encryption in transit (TLS/SSL)
Encryption at rest for sensitive data
Secure authentication protocols
Regular security audits
Access controls and authentication
Secure storage for authentication tokens

6.3 Data Retention

We retain your personal data only for as long as necessary:

Account data: Until you delete your account
Dream entries: Until you delete them or your account
AI analysis: Until you delete the associated dream
Usage logs: Up to 90 days for performance monitoring
After account deletion: All personal data is permanently deleted immediately

7. Third-Party Services

We use the following third-party services that may collect and process your data:

7.1 Supabase

Purpose: Backend services, database, authentication
Data Shared: All user data stored in the App
Location: EU servers
Privacy Policy: https://supabase.com/privacy

7.2 RevenueCat

Purpose: Subscription management and payments
Data Shared: Purchase history, subscription status, user ID
Privacy Policy: https://www.revenuecat.com/privacy

7.3 Firebase Cloud Messaging (FCM)

Purpose: Push notifications
Data Shared: Device tokens, notification preferences
Privacy Policy: https://firebase.google.com/support/privacy

7.4 AI Service Providers (OpenAI or Anthropic)

Purpose: Dream analysis and insights generation
Data Shared:
- Always: Dream content (title, description, date, notes, context)
- Only with Enhanced Analysis enabled:
  - Age (exact year, used for developmental stage analysis)
  - Gender identity
  - Occupation
  - Relationship status
  - Cultural background
  - Life stage
Data NOT Shared:
- Your name (we never share your name with AI providers)
- Email address
- User ID or account identifiers
- Device information
- Location data
Anonymization: Your name is removed from all AI requests. Analysis uses second-person language ("you", "your") instead of your name.
Your Control: You can enable or disable Enhanced Analysis anytime in your profile settings. Basic analysis is always available without sharing demographic data.
Privacy Policy:
- OpenAI: https://openai.com/privacy
- Anthropic: https://www.anthropic.com/privacy

7.5 Google Sign-In

Purpose: Authentication
Data Shared: Email, name, profile picture (optional)
Privacy Policy: https://policies.google.com/privacy

7.6 Facebook Login

Purpose: Authentication
Data Shared: Email, name, profile picture (optional)
Privacy Policy: https://www.facebook.com/privacy/explanation

7.7 Google AdMob (Free Users Only)

Purpose: Displaying advertisements to free-tier users to support the App
Who Sees Ads: Only free-tier users. Premium subscribers do not see any advertisements.
Data Shared:
- Advertising ID (Google Advertising ID on Android)
- Device information (OS version, device model, screen size)
- App usage data (interaction with advertisements)
- IP address and approximate geographic location
- Ad performance metrics (impressions, clicks)
GDPR Compliance: EU users are shown a consent form before any advertising data collection begins. You can withdraw consent at any time through the App settings.
Ad Personalization: You can opt out of personalized ads through your device settings:
- Android: Settings → Google → Ads → Opt out of Ads Personalization
Privacy Policy: https://policies.google.com/privacy
Ad Choices: https://www.google.com/settings/ads

Note: We use Google AdMob to display advertisements only to free-tier users. Premium subscribers enjoy an ad-free experience. All ad-related data collection is handled by Google in accordance with their privacy policy and GDPR requirements.

We do not sell or rent your personal data to third parties for marketing purposes.

8. Your Rights

Under GDPR and KVKK, you have the following rights:

8.1 Right to Access

You can request access to your personal data at any time.

8.2 Right to Rectification

You can update or correct your personal information through the App or by contacting us.

8.3 Right to Erasure (Right to be Forgotten)

You can request deletion of your account and all associated data. See our Account Deletion Policy for details.

8.4 Right to Data Portability

You can request a copy of your data in a machine-readable format.

8.5 Right to Restrict Processing

You can request restriction of processing in certain circumstances.

8.6 Right to Object

You can object to processing of your personal data based on legitimate interests.

8.7 Right to Withdraw Consent

You can withdraw your consent at any time where processing is based on consent.

8.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

EU: Your local data protection authority
Turkey: Personal Data Protection Authority (KVKK - Kişisel Verileri Koruma Kurumu)

9. Exercising Your Rights

To exercise any of your rights, please contact us:

Email: legal@sbksoft.com
Subject: Include "Data Request - DreamLens Mobile" and your registered email address
Response Time: We will respond within 30 days of receiving your request

10. Children's Privacy

DreamLens Mobile is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at legal@sbksoft.com, and we will delete such information.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

Notify affected users within 72 hours
Report to relevant supervisory authorities as required by law
Take immediate action to mitigate the breach
Provide information about the nature of the breach and protective measures

12. International Data Transfers

Your data is stored on EU servers. If data is transferred outside the EU/EEA, we ensure adequate protection through:

Standard Contractual Clauses (SCCs)
Adequacy decisions by the European Commission
Other legally approved transfer mechanisms

13. Cookies and Tracking

Important: DreamLens Mobile is a mobile application only. We do not use browser cookies as there is no web version of the App.

We use local storage mechanisms on your device:

Secure Storage: For authentication tokens and sensitive data
Shared Preferences: For app settings and preferences
Local Database: For offline access to your dream entries

You can control app permissions through your device settings.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

Posting the new Privacy Policy in the App
Sending a notification through the App
Updating the "Last Updated" date at the top

Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Legal and Privacy Inquiries:

Email: legal@sbksoft.com
Subject: DreamLens Mobile Privacy Inquiry

Support Inquiries:

Email: support@sbksoft.com
Subject: DreamLens Mobile Support

Postal Address: SBK Soft Samet Buyukkomurcu Gaziantep, Turkey

We will respond to all legitimate requests within 30 days.

Effective Date: October 9, 2025

This Privacy Policy is governed by the laws of Turkey and complies with GDPR (EU General Data Protection Regulation) and KVKK (Turkish Personal Data Protection Law).