Privacy Policy
Last updated: 2 October 2026
Ruuya is a dream journal for adults (18+) that can also offer a reflective reading of a dream. This policy explains what leaves your device, why, and for how long. Ruuya is published by an individual developer, Berkan Darbaz, who is the data controller ("we"). Contact: support@ruuya.app.
What stays on your device
Your journal, drafts, search, voice transcription (done on the device), patterns and PDF exports stay on your iPhone. We do not receive them.
What we process, and why
| Data | Why | How long |
|---|---|---|
| Account identifier from Sign in with Apple (we do not request your name or email) | To run your account | Until you delete your account |
| Device identifier (identifierForVendor) and an App Attest key | To limit abuse and verify a genuine app | Until you delete your account |
| A keyed code derived from your network address (never the address itself) | Rate limits | Up to the end of the limit window |
| The dream text you send for a reading, with phone numbers, email addresses and links removed first | To write the reading and paint its artwork | Encrypted and unreadable within 20 minutes; never logged |
| The reading and artwork | So the app can collect them | 7 days on our servers, then deleted (your copy stays on your device) |
| A dream text our content policy refused (sexual content, self-harm, or other unsafe content), as redacted text | Safety review, and a safety record | Encrypted for 90 days, then deleted; deleted at once if you delete your account |
| A safety log without any content (outcome codes, timings, a pseudonymous account code) | Security and abuse prevention | 90 days |
Readings are produced by AI models that run on Cloudflare's network (Cloudflare Workers AI, as our processor). Your text is not used to train any model. We do not sell data, show ads, or use analytics or tracking.
Sensitive information. A dream can reveal health, sexual life or religious belief, and the lens you choose (for example a religious tradition) can do so too. We process such information only with your explicit consent, which the app asks for before your first reading and again whenever this policy changes. Refused texts about self-harm are kept like other refused texts. If you are in crisis, the app shows local help lines; please contact them or your local emergency number.
Where data is processed
On Cloudflare's global network, which may be outside your country (international transfer under Cloudflare's data processing terms and the safeguards required by law).
Your rights
You can see, export and delete your data in the app (Account → Delete account deletes your account, readings, artworks, retained refused texts and safety log entries at once). You may also contact us to access, correct, restrict or object to processing, or to withdraw consent (future readings then stop), and you may complain to your data protection authority (in Türkiye, the KVKK Authority).
Changes
When this policy changes in a way that affects your consent, the app asks you again before your next reading.