Consumer Health Privacy Notice

1. Categories and sources

Information you choose to submit may reveal physical or mental health, emotions, symptoms, sleep concerns, sexual or reproductive information, treatment or other health-related circumstances. AI outputs or safety classifications may contain health-related inferences, even when uncertain or incorrect. These details come from you and processing of your submission by our service providers; we do not buy health profiles or obtain medical records from healthcare providers.

We do not request medical records, biometric identification or precise location, and do not use geofencing around healthcare facilities. Avoid identifying details about yourself or others. The general Privacy Policy explains technical identifiers and support correspondence.

2. Why and how we process it

We process volunteered dream information only to provide the reflection you request, screen for safety and temporarily recover a completed result. Support information is used to answer your request or exercise your rights. Before submitting a dream you must give a specific, affirmative processing consent. You can use the horoscope and educational guides without providing a dream.

We do not use consumer health data for advertising, targeted profiling, employment, insurance or eligibility decisions, or to train models as part of this service. We do not sell consumer health data. We do not seek authorization to sell it, and a general acceptance of the Terms is not such an authorization.

3. Providers and disclosures

Cloudflare processes information to host and secure the service and store encrypted temporary results. OpenAI screens and generates dream reflections. If you send health information to support, Cloudflare routes the email and Google Workspace processes the correspondence. These providers receive only information needed for those service purposes; we do not share health data with another SkyPact project merely because it has common ownership.

There are no advertising recipients or affiliates receiving consumer health data for their own purposes in the current service. Legally required disclosures or disclosures to protect legal rights are limited to what applicable law permits. We will obtain any separate consent required before a new collection or sharing purpose begins. The Privacy Policy describes provider retention and international processing.

4. Consent, access, deletion and appeals

Contact support@dreamsandstars.com to withdraw consent, ask whether we process consumer health data, request access or deletion, or ask for applicable recipient information. We use proportionate identity verification and do not require unnecessary medical information. We will communicate a valid deletion request to relevant processors where required and explain any legally permitted exception or backup delay.

For Washington requests, we respond without undue delay and ordinarily within 45 days; if the law permits an extension, we explain it within the initial period. To appeal a decision, email 'Health privacy appeal' to the same address. We respond to an appeal within 45 days and, if denied, explain how to contact the Washington Attorney General. Other jurisdictions' shorter or additional requirements remain applicable. Exercising rights does not result in retaliation.

Withdrawal stops future consent-based processing but does not undo lawful processing already completed. Temporary results and support records may need a deletion request; automatic account closure is not a substitute for every health-data right. You do not need to pay or purchase interpretations to exercise these rights.

• Washington Attorney General complaints

5. Retention and security

There is no separate stored raw dream submission in our application database. Encrypted results may contain health details and are available for recovery for up to 24 hours before expiry and routine deletion. OpenAI's standard abuse-monitoring retention may apply for up to 30 days, with legal exceptions. Support messages, limited consent records and restricted backups have the purposes and retention limits described in the Privacy Policy. We minimize retained data and review deletion requests across relevant systems.

Encryption and access restrictions reduce risk but cannot guarantee perfect security. We do not represent that this consumer website is a medical-record system or that a non-clinical label removes privacy obligations.

6. Operator, changes and contact

SkyPact LLC operates from Florida, United States. The business contact in the general Privacy Policy also applies here. Email support@dreamsandstars.com with questions or requests. We will update this notice before materially different health-data practices and obtain required consent; changes do not retroactively authorize a new use of earlier submissions.