Nightbook

Privacy Policy

Last updated: 5 September 2026

Nightbook is a mobile dream journal. Dream content is deeply personal and sensitive data, and this policy was written with that in mind.

Where your data lives

The dreams you write, along with tags, moods, symbols and app settings, are stored on your device, in the app's local database. We do not copy all of that to our servers.

If your device's own backup service (iCloud, Google) includes app data, that backup is governed by that service's terms. This is outside our control.

What happens when you ask for an AI interpretation

AI interpretations, monthly reports and dream-map readings are produced through our server. When you tap "Get AI interpretation":

  1. That dream's text (title, content, tags, mood) is sent to our server.
  2. Our server forwards it to Google's Gemini API to be interpreted.
  3. The interpretation and the symbols found in the dream come back to you.

For premium users, the past counts and accompanying emotions of the symbols in that dream are also added as context, to personalise the reading.

What stays on our server? The raw dream text is not stored. Only the following is kept:

  • your monthly free AI allowance counter and language preference,
  • your subscription status.

The produced interpretation is not stored on the server; it only comes back to your device. (A cache used to be kept; it has been removed.)

These records are tied to an anonymous identifier the app creates for you automatically (see below).

Google's handling of this data is governed by their terms: https://ai.google.dev/gemini-api/terms

When the service cannot be reached (no network, service down) the app produces no reading; it tells you on screen that a reading cannot be made right now. In that case no data leaves your device.

Identity and account

To authorise AI requests and count the monthly free allowance, the app opens an anonymous session in the background on first use. That session is nothing but a random identifier: it contains no email address, phone number, name or device identifier. No account is required, and no sign-in screen is shown on first launch.

You may link an account if you want to. Its only purpose is to carry your subscription and premium features across devices; it does not back up your dreams. If you link an account we store:

  • which provider you used (Apple, Google or email),
  • the identifier and email address the provider gives us,
  • if you linked with Apple, a refresh token from Apple so that we can sever the connection on Apple's side when you delete your account.

Linking an account does NOT change your existing identifier: your allowance and subscription stay on the same record.

When you sign in with Apple, Apple offers to hide your email address; if you hide it, we only ever receive Apple's relay address.

Encrypted backup

Dream backup is off by default and requires an account. (This feature is not yet enabled in the current version of the app; what follows applies once it is.) If you turn it on, your dreams go to the server encrypted only. The key that decrypts them lives on your device and in your recovery code; we do not have it. Our server cannot read your dreams.

Exactly this is kept on the server: your account identifier, your monthly AI allowance, your subscription status, encrypted dream blobs, a wrapped copy of your key, and unencrypted record identifiers, record type and timestamps. So we can see how many records you keep and when you wrote them; we cannot see what you wrote.

If you lose both your recovery code and your device, the encrypted dreams cannot be opened — and we have no way to open them either. Your account and subscription are not affected.

While backup is on, a dream you delete on one device is carried to your other devices as deleted.

If your device's own backup (iCloud, Google) includes the app's data, that backup is governed by that service's terms and is outside our control; the recovery code is for opening the copy on the server.

What we do not collect

  • No account is required. If you choose not to link one, we collect no email address, phone number or name.
  • No analytics, advertising or tracking SDKs.
  • No access to location, contacts, photos or health data.
  • We never share dream content with any third party other than to produce the AI interpretation, and we never sell it.

Notifications

If you enable the morning reminder, a local notification is scheduled on your device. It never leaves the device and is not sent from a server.

Your rights over your data

  • Export: Profile → Data lets you export every dream, symbol and setting as a single JSON file.
  • Deletion: Profile → Data → "Delete all my data" permanently erases everything on the device and deletes the encrypted backup copies on our server. This cannot be undone.
  • Account deletion: Profile → Account → "Delete my account" permanently deletes your account record, the encrypted backup and wrapped key on the server, and the dreams on this phone; if you linked with Apple, the connection on Apple's side is revoked as well. This does not cancel your subscription — cancel it in the store you installed from (App Store → Subscriptions, or Google Play → Subscriptions).
  • Uninstalling the app removes the local database.

Children

The app is not directed at users under 13.

Changes

If this policy changes, we publish the current text in the app and update the date above.

Contact

melberlabs@gmail.com

Melber Labs · Ali Berke Altınkaynak
Murat Reis Mah., Binbaşı Sok., Kanarya Apt. No 8/5
Üsküdar / İstanbul, Türkiye