Privacy policy

Sonurne: Dream Journal
Updated 29 September 2026

Account information, cloud-submitted dreams and interpretations, messages, reports and preferences are stored using Google Firebase. Dreams saved only to the on-device journal remain on that device until you choose a feature that sends them to the cloud. Optional profile fields and dream context can include your name, email, phone number, date of birth, gender, biography, mood, feelings and sleep-related reflections. Profile information may be visible to other users according to your discovery and friendship settings. Messages are shared with their recipients.

With your optional AI permission, dream text and selected context are sent to OpenAI for reflections and summaries. Chat messages are sent to OpenAI for translation only when both participants have granted permission for this use. Publishing social messages, public profile text and profile photos also requires explicit permission for OpenAI safety screening. You can read and keep a private journal without AI permission, and withdraw permission in Settings. Withdrawing permission stops new AI processing; it does not automatically delete previously stored content. AI reflections are not clinical advice. Cloud service providers may process data outside your country.

Reports contain the reported user, reason, submitted details and, for message reports, a copy of the reported message for review by authorized Sonurne moderators. Moderation records include review deadlines, decisions, reviewer identifiers and timestamps. Removed profile content may be retained as private report evidence. Hiding a message removes it from your view on this device; it does not delete the recipient copy or evidence retained for moderation. Do not include unnecessary sensitive information.

You can change discovery preferences, block users and request permanent account deletion in Settings. Deletion removes your active account data, derived dream-matching records and your sent messages; it does not cancel store subscriptions. Service-provider backups and operational records may follow their own retention periods.

Sign-in may use Google, Apple or Facebook. Apple App Store and Google Play process subscription payments; Sonurne receives purchase and entitlement records needed to provide paid access, but does not receive your full payment-card details.

Some previously released Android versions include Facebook SDK automatic app-event and advertising-identifier collection. Depending on that version and your device settings, Meta may receive device identifiers, app-use events and purchase events and process them for analytics and advertising measurement under its own privacy policy. The upcoming Sonurne Android release is configured to disable automatic app-event logging and advertising-ID collection; this change does not modify an older installed version. See Meta’s privacy policy.

Contacts and friend discovery

With your permission, phone numbers are converted on your device to SHA-256 hashes and sent securely to Google Firebase to find Sonurne users. Names, photos, emails and plain phone numbers are not sent. Incoming contact hashes are used for the lookup and not stored. Hashing does not make data fully anonymous.

Separately, we store the hash of registered users’ own verified phone numbers in a private matching index and lookup timestamps to limit abuse. Discovery preferences and blocks are respected. Contacts are not sent to OpenAI, used for advertising or contacted automatically. Access is optional and can be withdrawn in device settings.

For privacy requests or questions: support@sonurne.com

If you enable notifications, device notification tokens support delivery. Optional contact access supports friend discovery using phone-number hashes processed for the lookup; contact hashes and friend-search terms are not retained as search history. Security and rate-limit records may be retained to protect the service; selected photos are uploaded for your profile. Permissions can be withdrawn in device settings. Service logs may contain technical identifiers used to operate and protect the service.

Delete your account or request data deletion · Contact support