Privacy Policy

NightSage is an AI-powered dream journal service operated by an individual developer based in Croatia. If you have any questions about this policy or your data, contact us at info@nightsage.app.

NightSage is a self-reflection and journaling tool. It does not provide medical, psychological, psychiatric, or predictive advice, and is not a substitute for professional mental health care.

We collect only what is necessary to provide the service:

• —Account data: your email address and password (stored securely via Supabase Auth).
• —Dream content: the text you submit for analysis, stored in our database and sent to OpenAI for processing.
• —Usage data: number of dream analyses made, follow-up questions asked, and streak data — used to enforce plan limits and display your statistics.
• —Payment data: handled entirely by LemonSqueezy (our payment processor). We do not store your card details.

• —To provide dream analysis and follow-up question responses via OpenAI's API.
• —To enforce free-tier and premium plan limits.
• —To process subscription payments and manage billing.
• —To send transactional emails (email confirmation, password reset) via Supabase.

We do not sell your data, use it for advertising, or share it with any third party beyond those listed below.

• —Supabase — database and authentication. Your account data and dreams are stored on Supabase infrastructure in the United States (see "Where your data is stored" below). Privacy policy →
• —OpenAI — dream content you submit is sent to OpenAI's API to generate interpretations. OpenAI may retain API inputs for up to 30 days for abuse monitoring. Data usage policy →
• —LemonSqueezy — payment processing and subscription management. Acts as the Merchant of Record, handling all tax obligations. Privacy policy →
• —PostHog — privacy-focused product analytics, hosted in the EU. We record pseudonymous usage events (e.g. "a dream was analyzed") tied to a random account identifier — never your dream content, email, or anything you type. We also capture session recordings of how the interface is used, in which every input and all rendered text is masked before it leaves your browser: these show layout, navigation and clicks only, and cannot contain your dreams or anything you type. No cookies or tracking identifiers are stored on your device, and Do Not Track is honoured — enabling it in your browser stops all analytics and recording. Privacy policy →

NightSage is operated from Croatia, but not all of the services it relies on are hosted in the European Economic Area:

• —United States — your account data and dreams (Supabase), dream text sent for interpretation (OpenAI), and subscription and payment records (LemonSqueezy).
• —European Union — pseudonymous product analytics (PostHog).

Where personal data leaves the EEA, the transfer is covered by the standard contractual clauses in each provider's data processing agreement. If you would rather your dream content were not processed outside the EEA, please do not submit it — analysis cannot be provided without sending the text to OpenAI.

Important: any dream text you submit is transmitted to OpenAI's API to generate an analysis. Do not submit dreams containing highly sensitive personal information you would not want processed by a third-party AI system. OpenAI does not use API inputs to train their models by default, but please review their policy for the current terms.

Your account data and dreams are retained for as long as your account exists. If you delete your account, all associated data is permanently deleted from our database within 30 days.

Note that OpenAI may retain submitted content for up to 30 days on their end regardless of account deletion on our platform.

If you are in the European Economic Area, you have the right to:

• —Access the personal data we hold about you.
• —Request correction of inaccurate data.
• —Request deletion of your data.
• —Object to or restrict processing of your data.
• —Request a copy of your data in a portable format.

To exercise any of these rights, email us at info@nightsage.app. We will respond within 30 days.

We use only essential cookies required for authentication (session tokens set by Supabase). We do not use tracking, analytics, or advertising cookies — our analytics run cookieless and store nothing on your device.

We may update this policy from time to time. If we make significant changes, we will notify you by email. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions or concerns? Email us at info@nightsage.app.