Data Protection Policy

Dreams ZZ Box is designed to be private by default. We act as the controller of your personal data and are committed to protecting it in line with the UK GDPR and Data Protection Act 2018.

• Performance of a contract — providing your dream journal and Premium subscription.
• Consent — for optional AI analysis and for sharing dreams to the public feed.
• Legitimate interests — keeping the service secure and reliable.

We only collect what is needed to run your dream journal. Dream content, daily entries and analyses are tied to your account and never made public unless you choose to share them.

• Row-level security isolates your data so only you can access your own records.
• Encrypted connections for all data in transit.
• Payment details handled by Stripe — never stored by us.
• Backend functions require authentication; admin access is restricted to authorised managers.

• Access — request a copy of your data (you can also export it from your profile).
• Rectification — correct inaccurate information.
• Erasure — permanently delete your account and all your data from your profile.
• Portability — export your dreams in a reusable format.
• Objection — object to certain processing.
• Withdraw consent — turn off AI analysis or remove shared dreams at any time.

We do not use your data for automated decisions that affect you legally or similarly. AI dream analysis is optional, reflective, and never diagnostic.

To exercise any right or raise a concern, email hello@dreamszzbox.com. You may also contact the Information Commissioner's Office (ICO) if you remain concerned.