Rüya Tabiriby Dode YazılımTürkçe
Data and privacy

Privacy Policy

How and why Rüya Tabiri processes personal data for each feature, and the providers involved.

Last updated:

Scope and controller

This Privacy Policy covers the Rüya Tabiri mobile application provided by Dode Yazılım and this information website. For questions about personal data processing, contact iletisim@dodeyazilim.com.

The app lets you record dreams, request AI-assisted interpretations, listen to sleep sounds, and use optional notifications. This policy explains which data is processed when you choose these features and why.

Data we process

Depending on the features you use, we may process:

  • Account and identity data: email address, user identifier, display name, and limited profile data supplied when you sign in with Apple or Google.
  • Dream and journal content: dream text you type or dictate, selected tags, notes, AI responses, chat content, and images generated at your request.
  • Audio data: a recording sent for transcription only when you intentionally use voice input. On mobile, the temporary recording file is deleted from app storage after processing, and raw audio is not stored in the Rüya Tabiri database. On the web, speech recognition may be processed by your browser or its provider. Playing sleep sounds does not require microphone access.
  • Subscription data: product, store, entitlement, and transaction identifiers. We do not see or store payment-card details.
  • Device and technical data: app version, operating system, language, time zone, and de-identified error and performance information.
  • Usage and notification data: feature interactions, notification preferences, and the Expo push token needed to deliver notifications.

Purposes and legal bases

  • Performance of our contract to create your account, secure your session, and provide the app features you select.
  • Your request and, where required, consent for optional AI analysis, voice input, image generation, microphone, and notification features.
  • Our legitimate interests in fixing errors, preventing misuse, managing quotas and security, and improving the product.
  • Compliance with accounting, consumer-protection, lawful-request, and other legal obligations.

We do not use dream content for targeted advertising and do not sell your personal data.

AI features

When you start analysis, chat, voice transcription, or image generation, the content required to complete that request is sent to the relevant service provider. You initiate each transmission; do not include information you consider unnecessarily sensitive.

AI output is generated automatically and can be inaccurate, incomplete, or inappropriate. It is not medical, psychological, legal, or other professional advice.

Service providers and disclosures

We disclose data only as needed to operate and secure the service or comply with law, using these service categories:

  • Supabase: authentication, database, and file storage. The infrastructure project may be shared with other Dode Yazılım apps, but Rüya Tabiri data is logically isolated in the app-specific ruyatabiri schema through access policies and user-ownership controls.
  • OpenAI: dream analysis, chat, and speech transcription you request.
  • fal.ai: dream images you ask the app to generate.
  • RevenueCat, Apple App Store, and Google Play: purchase, subscription, and entitlement management.
  • Sentry: error and stability monitoring. Personally identifying information is stripped before transmission, and no persistent user identifier is attached.
  • PostHog EU: off by default. Limited product events are sent only if you expressly enable analytics in Account Settings, without linking them to a sign-in account. Dream and chat content and the shared Supabase user ID are not sent. The device's anonymous analytics identity is reset on sign-out or account deletion, and you can opt out at any time.
  • Apple and Google: social sign-in when selected; Expo Push Service: notification delivery when enabled.

International transfers

Some providers may operate infrastructure outside Türkiye or the European Economic Area. Where applicable, transfers rely on provider data-protection terms, appropriate contractual safeguards, and applicable law.

Retention and account deletion

We retain data while your account is active and as needed to provide the relevant feature, or solely for longer where a legal obligation requires it. Residual copies in technical backups are deleted or made inaccessible through the ordinary secure backup lifecycle.

The authenticated in-app deletion flow removes the Rüya Tabiri membership, app database records, and app-owned files through a protected process. Supabase authentication is a shared sign-in service used by more than one Dode app; Rüya Tabiri deletion does not remove the shared sign-in identity or accounts and data in other apps. A limited app-specific deletion record is retained to prevent delayed system events from recreating deleted data. If cleanup cannot complete, the process returns an error and you can retry.

Deleting an account does not automatically cancel a subscription managed by Apple or Google. You must cancel it separately in the relevant store settings.

See the account deletion page for detailed steps and the verified option available if you cannot access the app.

Security

We use technical and organisational safeguards such as encryption in transit, per-user authorisation, row-level access policies, app-specific data separation, and restricted administrative access. No system can guarantee absolute security; contact us if you notice suspicious activity.

Your rights and choices

Depending on applicable law, you may have rights to access, correct, delete, restrict, or object to processing; request portability; and withdraw consent. You can delete your account in the app or send a request to our legal contact address.

We may need to verify your identity and ownership of the account. You also retain the right to complain to the competent data-protection authority.

Children’s privacy

Rüya Tabiri is not knowingly offered directly to children below the applicable age of digital consent. If you believe a child created an account without required parent or guardian permission, contact us so we can review and take appropriate action.

This information website

This public information site uses no cookies, advertising, user analytics, or data-submission contact form. If you select an email link, your message is processed by your email provider and ours. The online deletion tool authenticates directly with Supabase; the site does not store your email address or form data on its own server.

Changes and contact

We may update this policy when the app or legal requirements change. We will communicate material changes in the app or on this page. For privacy and data-rights matters, email iletisim@dodeyazilim.com; for technical support, email destek@dodeyazilim.com.