Dreampin Privacy Policy

Effective

This policy explains how Nexilia.ai s.r.o. handles personal data when you use Dreampin, our vision board app. Your boards, photos and settings stay on your device, and we never receive them. The app sends data only to check Premium and to check for app updates. We also receive the emails you send us and, if you allow it, crash reports from Apple.

1. Who is responsible

Nexilia.ai s.r.o. is the controller of your personal data.

Company
Nexilia.ai s.r.o.
Company ID (IČO)
09934995

For privacy questions and requests, email support@nexilia.ai.

2. Data that stays on your device

We do not collect the data in this section, and it never reaches us.

Boards, photos and settings

Your boards, the photos and text on them, your focus areas, your reminder settings and your language choices are stored in the app's storage on your device. Dreampin does not upload them.

They stay there until you delete them or the app. Deleting a board removes it from your boards, but copies of the photos you added can remain in the app's storage until you delete the app. Your device backups may keep app data, depending on your device settings.

If you export or share a board, the app or person you choose receives the image.

Photos and camera

When you choose a photo, Dreampin opens the system photo picker, which gives the app only the photos you pick and no access to the rest of your library. It asks for access to your camera when you take a photo, and for permission to add images to your photo library when you save an exported board. It does not upload your photos. You can change these permissions in your device's Settings at any time.

Reminders

If you turn on reminders, your device schedules them. Dreampin chooses the affirmation for each reminder on your device, and it sends no reminder data to us or to a notification server. The app checks whether notifications are allowed so that it can respect your choice.

3. Data that leaves your device

Premium and purchases

When you buy Premium, you pay Apple through the App Store, or Google through Google Play. We do not receive your payment card details.

Dreampin uses RevenueCat to show the current Premium plans and to check and restore Premium. Each time you open Dreampin or return to it, the app contacts RevenueCat, even if you have never bought Premium. RevenueCat receives:

Why
To show the current plans, verify your purchase, unlock Premium and restore it on another device. We also use RevenueCat reports on purchases and subscriptions, for example to see how many people subscribe or cancel.
Legal basis
Performance of the contract for Premium, Art. 6(1)(b) GDPR, when you have bought Premium. Our legitimate interest in offering Premium and running our business, Art. 6(1)(f) GDPR, for showing plans and checking Premium when you have not bought it, and for the reports.
How long
While we need the records to provide and restore Premium. A lifetime purchase needs its record for as long as you may use the app. If you ask us to delete your records, we delete them, unless the law requires us to keep them.

App updates

Each time you open Dreampin, it asks the Expo update service whether a newer version of the app's code is available, and downloads it in the background if there is one. With each check, Expo receives the platform name, the app version, the IDs of the updates on your device, a random identifier that the update software creates on your device, and the IP address of your connection. If the app failed to start after an update, Expo also receives the error message.

Why
To deliver fixes and improvements without waiting for a full App Store release.
Legal basis
Our legitimate interest in keeping the app working and secure, Art. 6(1)(f) GDPR.
How long
Only as long as reasonably necessary to run the update service, as the Expo privacy policy states. We see only totals, such as how many devices received an update.

Crash reports from Apple

If you turn on sharing with app developers in the Analytics settings of your iPhone, Apple shares crash reports and usage statistics for Dreampin with us through App Store Connect.

Why
To find and fix problems in the app.
Legal basis
Our legitimate interest in keeping the app working, Art. 6(1)(f) GDPR.
How long
As long as App Store Connect keeps them.

Support emails

If you email us, we receive your email address, your name if you include it, your message and any attachments.

Why
To answer you and to fix the problem you report.
Legal basis
Performance of our contract with you, Art. 6(1)(b) GDPR, when your message is about the app or a purchase. Otherwise, our legitimate interest in answering the messages we receive, Art. 6(1)(f) GDPR.
How long
Until your request is resolved, and then no longer than 24 months.

Is giving data required?

You do not need an account, and you never have to send us your boards. When your device is online, the app contacts RevenueCat and Expo automatically, as described above. Without the purchase data, we cannot verify Premium, so you can use only the free version.

4. Who receives your data

We do not share your personal data with anyone else, unless the law requires it.

5. Transfers outside the EU

RevenueCat and Expo are based in the USA, so they may process your data there. For both, we rely on the EU Standard Contractual Clauses. For RevenueCat, the clauses are part of its data processing addendum. For Expo, they are part of its terms of service, and Expo is also self-certified under the EU-US Data Privacy Framework. For support emails, Cloudflare relies on the EU Standard Contractual Clauses in its data processing addendum, and Cloudflare and Google are self-certified under the EU-US Data Privacy Framework. To get a copy of these safeguards, email support@nexilia.ai.

6. Your rights

Under Articles 15 to 21 of the GDPR, you have the right:

Some of these rights apply only in certain situations.

Your boards stay on your device, so we cannot see or delete them for you. You can delete them yourself in the app.

To use your rights, email support@nexilia.ai. For purchase records, include the order ID from your App Store or Google Play receipt. Dreampin has no accounts, so the order ID is how we find your records.

You also have the right to complain to a data protection supervisory authority. Ours is the Czech Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, which you can reach through the ÚOOÚ website. You can also complain to the supervisory authority in the EU country where you live or work, or where you think the infringement took place.

7. No ads, no tracking, no automated decisions

Dreampin shows no ads. It contains no advertising software and no analytics software that records how you use the app. We do not track you across other companies' apps or websites, and we do not sell your personal data. We make no decisions about you by automated means, including profiling.

8. Children

Dreampin is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you think a child under 13 has sent us personal data, email support@nexilia.ai and we will delete it.

9. Changes to this policy

If we change this policy, we update the effective date at the top. If a change is important, we publish it on this page before it applies and, where we can, also tell you in the app.

10. Language

This policy is written in English. If we publish a translation, the English version governs.

11. Contact

Email support@nexilia.ai.