Dreams & Stars
Dreams & Stars iPhone privacy supplement
This supplement explains the iPhone app's privacy practices. It supplements the Dreams & Stars service Privacy Policy and Consumer Health Privacy Notice, including their account, AI, rights, retention and international-processing provisions.
Effective October 25, 2026The app and the online service
SkyPact LLC operates Dreams & Stars. Contact support@dreamsandstars.com about privacy, consent, deletion or this notice. The iPhone app contains native readings, guides and a journal, and opens the Dreams & Stars account and interpretation service inside the app. Those online screens still communicate with our service providers.
Information kept on your iPhone
Saving a journal entry is optional. Its title, text, category, identifier and date are stored in an encrypted local file, with the encryption key in the device Keychain. Saving does not submit the entry to AI or send a copy to SkyPact, OpenAI, Clerk or Cloudflare. The journal has no account synchronization or cloud-backup feature and is designed to be excluded from device backups. Device loss, app removal or loss of access to its key can make it unrecoverable. We cannot restore journal content we do not receive.
The journal is visible as text while you use it. Encryption does not protect a screenshot, a deliberately shared copy or text displayed on an unlocked phone. You can delete an entry or erase the local journal in the app. These actions do not erase earlier online submissions or copies you shared elsewhere.
Language, favorite sign and the accepted version of the app's AI-sharing notice are local preferences. Your selected birth month/day identifies a zodiac sign locally; it is not automatically sent to OpenAI or saved as an account birth-date profile. Sharing or opening a website reading link can disclose its sign/date in the URL to the receiving service. Artwork and optional ambient audio are bundled.
Dreams you choose to submit
You can open the Dreams tab and read its offline guides without granting AI-sharing permission. When you focus the native dream editor or choose to continue toward an online interpretation without remembered permission, the app names OpenAI and explains the sharing involved. Declining leaves the offline hub and guides available. An affirmative choice is remembered on that installation and can be withdrawn in Account. It is not synchronized between your devices or users. Accepting this notice does not submit a dream.
The opening dream screen keeps its draft temporarily in app memory. Continuing with permission transfers it to an empty interpretation form for you to review; that action does not itself submit the dream or select the online consent checkbox. The app does not automatically transfer journal entries to the interpreter or keep a persistent draft file. The protected online service separately requires processing consent for each dream you submit, including sensitive information you voluntarily include.
Submitting a dream sends it to Dreams & Stars and OpenAI for automated safety screening and, where permitted, generation. A generated result can repeat personal details. Temporary encrypted recovery, provider retention and your rights are described in the service Privacy Policy and Consumer Health Privacy Notice. Local journal encryption is not a promise that a submitted dream remains only on your phone or that AI providers retain nothing. Withdrawing native permission prevents further access to the online interpreter until you consent again; offline readings and guides remain available. Withdrawal cannot recall a completed transmission.
Sign-in and web storage
Account and interpretation screens use persistent first-party WebKit storage for necessary sessions and controls. This store is separate from Safari's store. Guest allowance records identify the app's web session, not a verified person; signed-in allowances follow the account.
Clerk supplies account authentication. If you select Sign in with Apple, Apple handles its authorization and may provide a private relay email address. A short-lived identity credential is passed in memory to the configured account service for verification; the app does not request your Apple password or keep a separate native copy of that credential. Signing in does not accept dream-processing permission for you.
Closing an online screen, signing out, clearing native preferences and deleting an account are different actions. Use the in-app account-management/deletion route for registered account closure and its status. The service policy describes retained records and pending deletion. Local journal deletion remains separate.
Deleting guest service data
An accepted guest submission creates a durable guest service account. In that guest session, the online account-management screen offers a separate guest-data deletion control with confirmation. You can reach it from Account in the app without creating a registered account. The service identifies the guest solely from its verified guest cookie in the current web session; it does not ask you to supply an account identifier. The app's web session and Safari's session are separate.
The service records the deletion request durably before clearing the guest cookie. It cancels unresolved guest interpretation reservations and removes the guest account, allowance and credit bookkeeping, events, consent receipts, reservations, request outcomes and temporarily stored deliveries. A late interpretation response cannot recreate a delivery for the erased account. Only limited keyed-hash attempt and IP abuse counters remain in the guest service database until their existing expiry; these counters contain no dream or interpretation text. The guest cookie is cleared after deletion completes.
If deletion is pending or an error is shown, retry in the same web session without registering. Keep its guest cookie until completion so the service can identify the relevant records. Clearing web storage yourself is not a service-data deletion request. Deleting guest service data does not delete a separate registered account, your local journal or copies you shared elsewhere. It cannot recall a completed transmission to a provider; the provider retention and privacy-rights provisions in the service notices continue to apply. Contact support for further privacy assistance.
Service records, tracking and purchases
The app adds no native advertising or analytics SDK. Its embedded service blocks known advertising and analytics endpoints. Necessary hosting, sign-in, security and bot-protection processing still occurs; the service Privacy Policy describes Cloudflare, Clerk, OpenAI and support-email providers. A blocking list is not a claim that no network requests or service logs exist.
The current iPhone version offers daily free interpretations and no in-app purchase or subscription. Optional website credits cannot be bought or spent inside this release. If the same account separately has website purchases, their payment records and deletion or refund handling remain governed by the website policy. The app itself does not collect card details.
We do not send the local journal, submitted dreams or personalized interpretations for advertising profiles or cross-context behavioral advertising. A future change to analytics, advertising, native purchases or cloud journal storage requires updated disclosures and any required new permission before it begins. This notice does not authorize such changes by itself.
Your choices
Use Account to withdraw native AI-sharing permission, manage or request deletion of online service data, or erase the local journal. You can use offline readings and guides without submitting a dream. For access, correction, erasure, consent withdrawal, complaints or other applicable rights involving the online service, contact support. We explain the relevant verification, retention exceptions and appeal route under the service Privacy Policy and applicable law.
Dream and horoscope readings are for reflection and entertainment. They are not scientifically established predictions, medical records or professional advice. No security measure guarantees against every loss or unauthorized access.