Privacy

The service operator is D&S CAPITAL PTE. LTD., Singapore. UEN: 202026033N. Registered address: 138 Robinson Road, #02-54, Oxley Tower, Singapore 068906. Contact support@dreamunsaid.com for support and privacy requests.

The reading uses the options you select and any optional personal context or first name you provide. These are used to create and deliver your reading and enforce safety boundaries, and for no unrelated purpose.

Only with your optional analytics permission, we record public page paths, displayed screens and question identifiers, completed steps, fixed error codes, visible time, language, product versions, general device/browser/OS, available country and an IP network prefix. The full connection IP is kept separately for up to 7 days, visible only in the protected operations dashboard; it is then removed by scheduled cleanup. A product-specific random browser ID and ordinary analytics are kept for up to 30 days. A consenting tab session continues across page loads and expires after 30 minutes without recorded activity. An IP or browser ID is not a unique person. The last observed screen may not be the screen where you closed the site; blocked or lost events leave gaps. With permission at checkout, order/source links help measure purchases, repeat purchases and refunds; those links expire after 30 days, while transaction records have their own retention. Uncheck analytics to stop collection and clear local analytics identifiers; existing records expire on the stated schedule. Analytics exclude your email, name, private narrative, report, query parameters and recovery codes. Daily progress storage is a separate choice. No advertising tracker is connected.

Update, 23 September 2026: optional analytics also include a campaign identifier from a fixed list, never arbitrary campaign text or full referring URLs. Printable worksheet notes stay in this open tab and are not submitted. Sharing copies a blank worksheet link, not your answers. Printing or saving in your browser makes a copy under your control.

The basic experience needs no email. You may choose to verify an email from the homepage. If the email service is unavailable, this form does not collect your address; you can still use the free experience. A deeper reading uses the extra context you select, not an email as part of the interpretation. Free and deeper readings use our server, not an external AI model. Draft answers remain in this open page, not a cross-device account history.

Return reminders and consultation updates are two separate, optional choices, both off by default. A choice becomes active only after you confirm control of your email. Verifying alone does not subscribe you, and a choice for one brand or purpose does not subscribe you to another. Consultation updates are news about availability, not a booking or a promise that a human adviser is currently available. Promotional messages are not sent until an appropriate marketing service is connected.

Email records are separate from product analytics. We keep your encrypted address, brand, language, verification status, selected purposes and the time and version of your consent. Verification messages contain service links, not your answers, relationship or dream text, or report. A sending service accepting a message is not proof that it reached your inbox.

You can change your choices or unsubscribe using the links supplied with subscription messages. Withdrawing one purpose stops that purpose without enabling or changing another. We keep a minimal keyed identifier and suppression status to honour withdrawals, hard bounces and complaints. You can also contact the brand support address below to request access, correction or deletion; we may verify control of your email before acting.

When you open web checkout, this tab temporarily keeps an encrypted preview token so that cancelling can return you to the same preview. It does not save a readable report, your answers or your email to browser storage. The token expires after 30 minutes and is removed when an expired return is checked, a new reading is started, or paid delivery is confirmed. Closing the tab ends this session storage; it is not a cross-device recovery method.

The app’s voice button only starts an already available on-device recognizer after you request it. It does not send audio to an external transcription model or download one. On unsupported devices you can use choices, type, or independently use your keyboard’s dictation. Keyboard dictation follows your operating system’s own settings and may differ from the app’s device-only voice button.

Stripe processes payment and receipt information under its own privacy terms. Order records include the processor reference, amount, currency, customer country or state when needed for tax, fulfillment status, and the version and time of the required adult acknowledgement. We do not store card numbers or private reading text in the order record.

For membership, we retain the provider’s customer and subscription references, subscription status, trial and billing dates, and credit grants and usage to manage renewals, cancellation and access. Card numbers are not stored by this service.

Web purchases use Stripe; Android in-app purchases use Google Play. For Android purchases we process the purchaseToken and its one-way hash, package and product identifiers, order numbers, subscription status and dates, and the associated internal person ID. We use these to verify purchases, deliver and restore access, manage renewal and cancellation, handle refunds and disputes, and prevent replay. Google Play processes store payments under its own terms; we do not receive your card number. Cloudflare runs our API and database, storing encrypted purchase tokens and account data. Cloudflare Email Sending delivers login messages; Zoho Mail handles support. These providers may process data outside your country.

Cloudflare hosts the application, public assets, encrypted contact records and, when checkout is used, encrypted report content. It may process connection information, including IP addresses, for security and delivery. Storage and processing can occur outside your country. Zoho Mail handles support correspondence through our Singapore account.

When email verification is enabled, Cloudflare Email Sending processes the recipient address and the verification, sign-in or membership notice message for delivery. This connection is only for verification and sign-in messages and for notices about your own membership (such as the reminder before a free trial ends), not marketing campaigns. Cloudflare also stores encrypted contact data. Zoho Mail handles ordinary support correspondence; it is not used as an automated or bulk-mail shortcut. A verified address or a recorded preference does not mean promotional delivery has been enabled. Resend sends the reminder emails you choose to receive.

If you sign in by email, the account stores: your email address in encrypted form together with a one-way identifier used to match it, your language, the time the address was verified, and the orders you have attached to the account. Sign-in links expire after 15 minutes and are stored only as one-way hashes; a link that has been used or has expired cannot sign you in again. There is no password.

The sign-in cookie keeps you signed in for up to 7 days without activity and at most 30 days in total; signing out ends it immediately. Expiry of the cookie does not by itself erase server records: a session that is signed out, revoked or expired is deleted from the server 30 days after it ends, and sign-in links that expired unused are deleted 30 days after their expiry. The one-way hash of a used sign-in link is kept permanently so that the same link can never be replayed; it contains no readable address.

The encrypted address and the one-way identifier are kept while the account exists. To delete the account and the contact data linked to your email, write to support@dreamunsaid.com from that address. Minimal order records without private reading text may remain where accounting, tax, disputes or fraud prevention require them.

In the App you can sign in with an email verification code; the website also supports email links. Codes and links expire after 15 minutes and are stored as hashes. The App session token is held only in App memory, separately from purchase retry data. The server stores a session hash linked to your person ID, with a 7-day inactivity limit and a 30-day absolute limit. Logout or a deletion request revokes access; revoked or expired server sessions and unused expired login records are removed after 30 days. Used login hashes remain as replay-prevention records. Your encrypted email and account association remain until account deletion.

Optional. Saved in this browser, not uploaded or synced. Anyone using this browser can see it; clearing browser data removes it. Personal notes and payment details are not saved here.

Up to 50 summaries per product stay until you delete them or clear this browser's data. Only selected option IDs, card IDs, dates, language and follow-up status are stored. Summary text is rebuilt from those choices. You can export or delete individual saved entries in your trail or atlas. Nothing is saved automatically.

Legacy unverified contact entries expire after 30 days. For the new email service, an encrypted address with no active subscription is removed in scheduled cleanup 30 days after its last status update. An address with an active subscription is retained for that purpose until withdrawal, then for up to 30 days before cleanup. Minimal contact identifiers, verification state and keyed suppression identifiers may remain without a scheduled expiry to keep withdrawals, hard bounces and complaints effective; these suppression identifiers are not plain-text email addresses.

A verification link is valid for one hour and its browser status receipt for two hours. Verification records containing token and receipt hashes are cleared 30 days after the receipt expires. Preference-management links expire after 90 days; unsubscribe links have no short-term expiry so older messages can still be used to opt out. Accepted, failed or cancelled delivery records are cleared after 30 days, and uncertain delivery records after 90 days. Uncertain delivery is not automatically sent again.

Consented analytics are retained for 30 days and deleted in scheduled cleanup. Contact addresses are encrypted and never shown in the analytics overview. Free reports are returned directly, without a paid entitlement or server-side report history. A sealed deeper-reading preview token expires after 30 minutes.

At checkout, an encrypted report may be stored pending payment for up to 2 hours; checkout expiry can remove it sooner. After payment confirmation, encrypted report content is recoverable for 30 days. Access stops at expiry, and expired content is removed in scheduled cleanup. A confirmed full refund or payment dispute revokes access and deletes the report payload when the payment notification is processed. Minimal transaction records without private reading text are kept for accounting, tax, disputes and fraud control. Copies you save on your own device are managed separately, as described above.

If payment confirmation arrives after the pending report has expired or been deleted, payment cannot restore that content. The return page will show a support reference. Contact support with that reference to resolve delivery or request a refund; do not pay again. Refunds are not issued automatically, and no report-recovery email is sent.

Contact support@dreamunsaid.com to request access, correction or deletion of data linked to your email, or to withdraw optional marketing consent. For a paid order, include its receipt or Checkout reference. We may need to verify your request. Do not send identity documents, card details, a recovery code or private reading text in your initial request. Some transaction records may need to remain for accounting, tax or disputes. You can also delete your account yourself from the Account page.

Your reading text is not sold, used for targeted advertising or placed in a marketing list. It will not be used to train a general model unless a future version asks for separate, optional consent in clear language.

These website prices and Stripe terms apply to web checkout. Android offers and final prices are shown in Google Play before purchase. Android membership renews automatically monthly or yearly unless cancelled; the current Android plans have no free trial. In Google Play, open Payments & subscriptions → Subscriptions, select this app and choose Cancel subscription. Uninstalling the app does not cancel it. Cancellation stops future renewal and normally leaves membership until the paid period ends; it does not itself refund prior payments. For Play refunds, use Google Play’s refund process or contact support with the order number. Already delivered reports have their own displayed 30-day access expiry: ending membership does not shorten it, but account deletion or a confirmed refund/revocation of the funding purchase can end access earlier. Unused membership credits expire with their credit period.

Active, paused or recoverable Google Play subscriptions need an encrypted token for verification and cancellation. After confirmed expiry, revocation ending the subscription, or pending-purchase cancellation, it is cleared in scheduled cleanup no later than 60 days after the first terminal observation (or the earlier expiry). Replacement clears the old token. After account deletion is reconciled with the payment providers and the 72-hour drain ends, we clear the subscription and purchase-receipt tokens and retry state. Successful consumption or confirmed revocation clears one-time purchase tokens; unresolved receipt tokens are cleared after 60 days from receipt creation. Cleanup normally runs every 15 minutes and may be delayed by service failures. Hashes, pseudonymous person associations, order and period references, and grant/refund history remain permanently for replay prevention and financial audit, without email, report text or decryptable purchase tokens in those history records. This is our operational policy, not a claim that law requires every field forever. On this device, purchase retry data can include a purchaseToken and report delivery token; it is cleared when this App receives deletion acceptance, or on the next purchase/retry after 30 days. Older retry records start this 30-day window when first accessed by the updated App. Other devices and offline saved or exported reports must be cleared on each device. Support coordinates deletion requests for provider-held copies; providers may retain their own payment or security records under their policies.