Skip to content

Dream Eater Privacy Policy

Last updated: 30 October 2026

Dream Eater is a private dream journal. This policy explains what stays on your device, what leaves it, who handles it and how to delete it.

In short

Who we are

Dream Eater is published by Midgar Oy, a company in Finland, which is the controller of the information described here. You can reach us at support@midgarcorp.cc.

What stays on your device

Your dreams, voice recordings, transcripts, journal, tags, birth details and the sky data worked out from them are stored on your device and are not uploaded to us. Speech is turned into text on your device. A diagnostic log is written there too, recording events and errors such as counts and error codes, never the text of a dream, a title, a reading or your birth details. It is not uploaded to us unless you choose to send it with a message to support, after the app has shown you exactly what goes with it.

When an update changes how the journal is stored, the app copies your journal into the new storage and keeps the old copy on your device for 30 days, in case the update needs to be undone, and then removes it. Delete all data removes it at once.

Readings

Only when you ask for a reading, the dream text, the options you chose for it and short summaries of earlier dreams you had read are sent to Dream Eater's server through Midgar's gateway at api.midgarcorp.cc, which passes them to Google's Gemini model to write the reading. A follow-up question about a reading sends your question and the earlier turns of that conversation the same way. Our server keeps no dream text, prompt or reading afterwards: it passes the request on, returns the answer to your device and forgets it. You can withdraw your permission for readings at any time in Settings, then Privacy, and everything else keeps working.

Art

Art is made from a short scene summary, not from your dream text. The summary goes through our server to Google's image model, and the image is returned to your device and is not stored on our server.

Identity

Dream Eater works without an account. On first launch we create an anonymous account used to hold your credit balance and to recognise your subscription. It holds no name, email address or phone number.

The anonymous Midgar ID

The app also asks our server for an anonymous Midgar ID: a random identifier, and a random secret that proves the ID is yours. The server keeps the ID, a hash of the secret and the date it was created. The app keeps both in your iCloud Keychain, so the same ID follows you across your own devices and across Midgar's other apps. When the app creates or joins the ID it may ask Apple's App Attest service to confirm that the request comes from a genuine copy of the app; we keep the identifier of the attested key with the ID and receive nothing else about you. The ID is sent with requests to our server as a sign-in token, so that our server can link it to your anonymous account, and on the More Apps screen it shows which Midgar apps you already use. It is not removed by Delete all data in Dream Eater, because your other Midgar apps share it. To have it deleted, email support@midgarcorp.cc.

What our server keeps

Purchases

Credit packs and the optional subscription are sold through Apple In-App Purchase. Each purchase carries your anonymous Midgar ID as Apple's app account token. The app sends the signed transaction record Apple issues (which product, the price, the dates and Apple's transaction identifiers) to Midgar's purchase ledger at api.midgarcorp.cc, which keeps it linked to your Midgar ID so that your subscription is recognised on all your devices and your purchases can be restored in your other Midgar apps, and our server checks the signed transaction of a credit pack before it credits your balance. Apple also sends its own server notifications about your purchases to the same ledger, which passes them on to RevenueCat (RevenueCat, Inc., United States). These notifications are transaction data from Apple, not anything the app sends: they carry the product, the price, the dates, Apple's transaction identifiers, your App Store country and your anonymous Midgar ID, and no name, email address or IP address of yours. RevenueCat processes them on our behalf and under its own privacy policy at revenuecat.com/privacy. From version 2.0.2 the app itself contains no RevenueCat software; earlier versions process purchases with RevenueCat's software in the app, which receives the purchase receipt from Apple, an anonymous identifier and your IP address. We never receive your payment-card details.

Who handles data

Google handles the text sent for a reading or for art under its own terms and privacy policy. Under its terms for the paid Gemini API, Google does not use those prompts and responses to improve its products, and it keeps a log of them for a limited time solely to detect abuse. We do not use your dreams to train AI models, and nothing is sold or shared for advertising.

More Apps

Settings has a Midgar card that opens a view of Midgar's other apps. It fetches the app list from midgar-catalog.guitaripod.workers.dev and asks Apple's public iTunes lookup service for current icons, prices and ratings; your App Store country code is sent so prices are correct for your region. It asks your device, without any network call, which of Midgar's other apps are installed, so that it does not suggest an app you already have; that list is not sent anywhere. With your Midgar ID as the sign-in token it asks our identity service and ledger which Midgar apps you use and what you own in them, to show them under Your Midgar; this only displays information and grants nothing. It reports which app tiles were displayed and which were tapped to api.midgarcorp.cc. That report contains no identifier of any kind and not your Midgar ID: only the event, the promoted app's App Store id, your App Store country code, where in the app the screen was opened, and the app's name, version and platform. Our server stores a running total per day, event, app and platform, so there is no per-person or per-device record. This is product-interaction data, used only to decide which of our apps to promote, never for advertising or tracking.

The app also sends further anonymous counts to Midgar's servers in the same way: one "active" count the first time you use the app on each day, in each week and in each month, which tells us how many people use the app; one count for each purchase that names only the product bought; and counts of the steps on the way to buying, namely the Plus screen being shown, with where in the app it was opened from, and the outcome of a checkout (started, pending, cancelled or failed) with the plan or credit pack chosen. Like the More Apps report, they carry no identifier and are stored only as running totals per day, event, app and platform. They are used only to understand how the app is used and what stops people from buying, never for advertising or tracking.

Advertising measurement

We may promote Dream Eater with ads on the App Store. If you installed the app after tapping one of those ads, Apple tells our server which campaign, ad group, and search keyword produced the install, and the country the App Store served it in, never who you are. Apple's App Store attribution includes no advertising identifier and no device identifier, which is why it requires no tracking permission. We keep those campaign details alongside your anonymous identity purely to see which ads pay for themselves, we receive nothing that could recognise you in any other app or website, and we never share it.

Deleting your data

In the app, open Settings, then Privacy, then Delete all data. This removes the dreams and everything else stored on your device, including the copy of your journal an earlier version kept, and deletes your server identity, credit ledger and weekly counters. It does not remove the Midgar ID, which Midgar's other apps share; email support@midgarcorp.cc to have it deleted. It cannot be undone, and it does not cancel a subscription: manage or cancel that in iOS Settings under your Apple Account, then Subscriptions. Purchase records held by Apple and RevenueCat are kept under their own policies.

How long we keep data

Your rights

Where privacy law such as the GDPR gives you rights to access, correct, delete, restrict or move information, or to object to its use, contact us at support@midgarcorp.cc and we will help. We process this information to provide the readings, art, credits and purchases you ask for. Processing takes place in the European Union and the United States, by Cloudflare as our hosting provider, by Google as our AI provider and by RevenueCat. You may complain to your local data protection authority; in Finland that is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Children

Dream Eater is not directed at children under 13, and we do not knowingly collect data from them.

What we don't do

We do not sell your data, show advertising inside the app, or use third-party tracking or advertising identifiers.

Midgar may publish aggregate statistics built from anonymous counts, such as weekly active installs, which never identify a person.

Changes

If this policy changes we will publish the new version here with a new date, and mention material changes in the app's release notes.

Contact

For any questions, contact support@midgarcorp.cc.