Consumer Health Data Privacy Policy

This policy explains how MeltingPixels LLC ("we", "us"), which operates Dreamvibe on the web and in the iOS app, handles "consumer health data" — information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. It is written for people protected by Washington's My Health My Data Act and similar laws in Nevada and Connecticut, and it applies to everyone who uses Dreamvibe. It adds to our Privacy Policy.

• Health information you include in your dreams. Dreams you write or dictate, and the feelings and tags you add, can describe physical or mental health, symptoms, medications, sleep or other health matters. We use this only to provide the features you ask for: storing and syncing your journal and writing your analyses, images, videos, stories and narration.
• Sleep data from Apple Health (iOS, only if you connect it). Time in bed, time asleep, REM, deep, core and awake minutes, and when REM sleep happened, for each night. We use it to show your sleep alongside your dreams and to calculate your sleep score and the Brain Map.
• What we generate from it. Analyses and scores we create from your dreams and sleep, such as emotional themes, sleep scores and Brain Map views. We use them only to show them to you.
• A dream you send for a reading without an account. The dream, the feelings you pick and the reading we write from it, used only to give you the reading (and its painting, if you buy it), after you agree. We delete an unpaid preview after 24 hours and a paid reading 30 days after you buy it, or either one as soon as you delete it (see our Privacy Policy).

We collect consumer health data only as needed to provide the feature you request, or with your consent (for example, when you allow Dreamvibe to read Apple Health). We do not use it for advertising, we do not sell it, and we do not use it to train AI models.

• You — what you write, dictate, choose or record in Dreamvibe.
• Apple Health on your iPhone, if you connect it.
• Our own processing — the analyses and scores we generate from the above.

We share consumer health data only with service providers that process it on our behalf, under contract, to provide Dreamvibe to you:

• Data storage and hosting (Supabase; our hosting provider) — all of the categories above, to store and sync your account.
• AI providers — OpenAI receives the text of a dream and the feelings or tags you add, to write an analysis or story; xAI receives descriptions based on a dream to create images, videos and narration, and voice recordings you choose to transcribe.
• Email delivery (Resend) — a dream reading, only when you ask us to email you a copy of it.

We have no affiliates that receive consumer health data. We do not share consumer health data with advertising partners or any other third party for their own purposes, and we do not sell it. If that ever changes, we will ask for your separate consent first (and, for any sale, your signed authorization).

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and get a copy of it;
• get a list of the third parties and affiliates we have shared it with, and how to contact them;
• delete it; and
• withdraw any consent you gave us.

You can delete dreams, disconnect Apple Health (in the iOS Settings app) or delete your whole account in Dreamvibe at any time. For anything else, email support@dreamvibehq.com from your account's email address. For a dream reading without an account, email us with your Stripe receipt (or the date and the last four digits of the card) for a paid reading; an unpaid preview can't be linked to you, and it is deleted within 24 hours. We respond within 45 days; if we need more time (up to another 45 days), we'll tell you why. When we delete data, it is removed from our database and file storage, and backup copies are overwritten on their normal cycle. OpenAI keeps the requests we send it for up to 30 days, under its own terms. Since October 1, 2026, we use xAI with zero data retention, so under its terms xAI doesn't store what we send it or what it creates for us.

If we decline your request, you can appeal by replying to our decision within 45 days; we'll answer your appeal in writing within 45 days. If your appeal is denied, you can contact the Washington State Attorney General (or your own state's attorney general).

We'll update the date at the top when this policy changes, and ask for your consent before any new use or sharing of consumer health data that needs it. Questions: MeltingPixels LLC, support@dreamvibehq.com.