Privacy Policy

1. What DreamTrack Is

DreamTrack Health is a wellness monitoring platform. It records your morning voice, analyses acoustic patterns and dream narratives, and generates informational reports. DreamTrack is not a medical device. It does not diagnose, treat, or prevent any disease. All analysis is for personal wellness awareness only.

2. Data We Collect

• Voice recordings: Audio files you record in the app, stored securely in AWS S3.
• Dream transcripts: Automated transcriptions of your voice recordings.
• Biomarker scores: Acoustic and narrative features computed from your recordings.
• Genetic risk information: Self-reported mutations and family history you optionally enter. This is never verified or shared.
• Profile information: Email address, birth year, biological sex, and optional profile photo.
• Usage data: Basic logs for debugging and service reliability.

3. How We Use Your Data

• To provide the core service: transcription, biomarker analysis, and report generation.
• To display your history, trends, and insights within the app.
• To generate AI dream videos when you request them.
• To send you account-related emails (verification codes, no marketing without consent).
• We do not sell your data to any third party.
• We do not use your data to train AI models without explicit opt-in consent.

4. Third-Party Services

To operate the platform, your data passes through the following services. Each is bound by its own privacy policy.

5. Data Storage and Security

All data is stored on AWS infrastructure in the United States. Voice recordings and videos are stored in private S3 buckets with access controlled by short-lived signed URLs. Passwords are never stored — authentication is handled by AWS Cognito. Database access is restricted to the application backend via VPC security groups.

6. Data Retention and Deletion

You can delete any individual recording from within the app at any time. To delete your entire account and all associated data, contact support@dreamtrack.health. We will process deletion requests within 30 days. Backups may retain data for up to 90 days after deletion.

7. Children's Privacy

DreamTrack is intended for users aged 18 and older. We do not knowingly collect data from individuals under 18. Research participants under 18 require explicit parental consent and institutional IRB approval. If you believe a minor has registered, contact us immediately.

8. Your Rights

Depending on your location, you may have the right to:

• Access a copy of the data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability (export your records as JSON or CSV)

To exercise any of these rights, email support@dreamtrack.health.

9. Health Data Notice

DreamTrack processes voice and narrative data that may be considered sensitive health information. DreamTrack is not a HIPAA-covered entity and does not provide services to covered entities. This app is a consumer wellness tool, not a clinical service. Do not use DreamTrack as a substitute for medical advice, diagnosis, or treatment.

10. Changes to This Policy

We may update this policy as the platform evolves. Significant changes will be communicated by email or in-app notice. Continued use of the service after changes constitutes acceptance.

11. Contact

Questions about this policy: support@dreamtrack.health