Privacy Policy | Dreamium

1. Introduction

Dreamium ("we", "us", "our") operates the Dreamium platform, including Dreamium Identity, CoLab, Mythos, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, and protect your personal information when you use the Platform.

2. Information We Collect

Account Information

When you create an account, we collect your email address and, if you use social sign-in (e.g., Google), your name and profile picture as provided by the identity provider.

Profile Information

You may choose to provide additional information such as a display name, bio, avatar, and identity graph items (interests, preferences, and other personal data you add to your profile).

Usage Data

We collect information about how you interact with the Platform, including pages visited, features used, and device/browser information. This data is used to improve the Platform and is not sold to third parties.

Journal and Review Data (Mythos)

If you use Mythos, your journal entries, moments, reviews, and related reflections are stored securely. This data is private to your account and is never shared with other users or third parties.

Connection Data (CoLab)

When you connect with other users on CoLab, we store connection metadata, context types, messages, and CoLab Score calculations. Messages are only visible to the participants in a conversation.

3. How We Use Your Information

To provide and maintain the Platform
To authenticate your identity and secure your account
To enable features like cross-app session transfer (SSO)
To calculate compatibility scores between connected users
To send transactional notifications (e.g., connection requests)
To improve the Platform based on aggregated, anonymized usage patterns

4. Data Sharing

We do not sell your personal data. We share information only in the following circumstances:

With your connections: Profile information you make visible through your context type settings is shared with users you connect with on CoLab.
Service providers: We use Supabase for database and authentication, and Vercel for hosting. These providers process data on our behalf under strict data processing agreements.
Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS), server-side authentication validation, rate limiting, and short-lived authorization codes for cross-app session transfers. All sensitive tokens are stored server-side and never exposed in URLs.

6. Your Rights

You have the right to:

Access and export your personal data
Correct inaccurate information
Delete your account and associated data
Control what information is visible to your connections through context type and hub visibility settings

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the update on this page with a revised date.

9. Contact

If you have questions about this Privacy Policy, please use the form below.