Privacy

Oneiro is run by Jazz Automations, Brazil, the controller of your personal data under Brazil's data protection law (LGPD, Lei 13.709/2018). Our data protection contact (encarregado) is the founder, reachable at legal@oneiro.jazzautomations.com.br.

• Your dreams (the text you type or say, its title, reading, signs and the worlds made from it). Used only to keep your diary and make and show your worlds. Basis: your specific, highlighted consent (LGPD art. 11, I), because a dream can reveal sensitive data. You give it by ticking the box before your first dream; we record when, and which version you agreed to. You can withdraw it at any time with the button under “Your rights”: from then on we stop processing new dreams and readings. Your diary stays until you delete its entries, or ask us to delete all of them.
• Your voice recordings. Sent for transcription and then discarded. A recording is kept only if you choose to keep it with the entry, and it is deleted with that entry. Basis: the same consent.
• Your account (email, and name if you give one), handled by our sign-in provider, Clerk. Used to keep your diary and credits across devices. Basis: performance of our contract with you (art. 7, V).
• Payments. Card details go to Stripe and never reach us. We receive the payment confirmation, amount, currency, the package and the email you gave Stripe, to add your credits and keep tax records. We don't keep the name, address or phone you give Stripe. Basis: contract (art. 7, V) and legal obligation (art. 7, II).
• Network and abuse prevention. Your IP address is used to stop automated abuse (free-diary limits, rate limits). In our database it is stored only as a keyed hash, never in plain form. Basis: legitimate interest in keeping the service safe and affordable (art. 7, IX).
• Access records (IP address, date and time of use), kept as Brazil's Marco Civil da Internet requires of online services (Lei 12.965/2014, art. 15). Basis: legal obligation (art. 7, II).

We do not use your dreams to train AI models, to profile you, or for advertising. Our analytics never include dream content.

Making a reading or a world means sending parts of your dream to AI providers, who process it on our behalf and only to return the result we asked for. Some of them are outside Brazil, so your data may be transferred to the United States and to Asia. Your consent above covers these transfers (LGPD art. 33, VIII), alongside the providers' own contractual safeguards.

• Groq (United States): speech-to-text, the reading, the dream signs and the dream chat.
• Tripo (Asia): 3D objects, from short English descriptions of the things in your dream, not the full dream text.
• World Labs (United States), when places arrive: the 3D place your dream happened in, from a short description of it.
• Clerk (United States): sign-in. Stripe (United States and Ireland): payments.

When the walking guide speaks, it uses a voice built into your device; if your browser only has online voices, it shows the answer as a caption instead, so the words never go to another company.

Readings are possibilities, not a diagnosis. Oneiro is not therapy or medical advice. More on how the AI works, and its limits, on the AI page.

Your dreams are private by default. Only you can open them, until you create a gift link; anyone with that link can view that one dream until you revoke it. We look at dream content only when you ask us to (for support) or when the law requires it.

• Diary entries and worlds: until you delete them. If you delete your account, they are deleted 30 days later, with their recordings and 3D files.
• Deleted dreams and their files: removed from the live service at once (the 3D model files too, unless another of your worlds uses the same one) and from every copy within 30 days, including backups, which rotate within that time.
• Voice recordings: discarded right after transcription, unless you chose to keep one with its entry.
• Access records: 6 months, as the Marco Civil requires. Other server logs: 30 days.
• Hashed rate-limit counters: 2 days.
• Notifications from our sign-in and payment providers (an id and the fields named above): 90 days.
• Payment and tax records: 5 years, as Brazilian tax law requires, without your email once your account is deleted.

Under LGPD art. 18 you can ask us to confirm that we hold your data, give you a copy, correct it, anonymise or delete it, move it to another service, tell you who we shared it with, and withdraw your consent. Write to legal@oneiro.jazzautomations.com.br from the email on your account (or tell us your diary's details if you never signed in). We answer within 15 days. You can also complain to Brazil's data protection authority, the ANPD.

Withdraw my consent

We use no advertising or tracking cookies. What we store:

• oneiro_vid (cookie, 1 year): a signed random id that keeps your diary and credits on this browser before and after you sign in.
• Clerk session cookies: keep you signed in, only if you sign in.
• oneiro-diary, oneiro.diaryDraft (local storage): this device's copy of your worlds and an unsent draft, so nothing is lost if the page closes.
• oneiro.voiceLang, oneiro.voiceMuted, oneiro:onboarded, oneiro-diary-view (local storage): your voice language, whether the walking guide speaks aloud, that you saw the intro, and your diary view.

Clearing your browser's site data removes all of them; a guest diary without the cookie can no longer be opened from that browser.

Oneiro is for people 18 and over. We do not knowingly collect data from anyone younger; if you believe a minor is using Oneiro, write to us and we will delete the account.

Everything travels over HTTPS. Access to dreams is checked on every request, gift links are random and can be revoked, and secrets and provider keys stay on our servers. If a breach puts you at risk we will tell you and the ANPD.

The version and date are at the top. If a change affects how we use your dreams, we will tell you in the app before it applies and, where the law requires, ask for your consent again.