Privacy policy
Last updated: October 3, 2026
Dream Codex is a place for your dreams — some of the most private, vivid, and personal things you will ever write down. We take that seriously. This policy explains what we collect, why, and the choices you have.
The short version. Your dream entries, voice recordings, and their transcripts are sensitive personal information. We use them to run the app and the features you ask for, we never sell your personal data, and you can access, export, or delete your data at any time.
Who we are
Dream Codex is operated by Codex Labs, a product line of Codex Corp ("we", "us", "our"), based in Vancouver, British Columbia, Canada. We are the organization responsible for the personal information described in this policy.
If you have any questions or requests, contact our privacy team at privacy@codexcorp.ca.
Scope
This policy applies to the Dream Codex mobile app, this website, and related services we provide. It does not cover third-party services we link to, which have their own privacy practices.
Information we collect
Account information
When you create a Codex account, we collect your email address and, optionally, your name or display name. If you secure your account, we store the information needed to support multi-factor authentication (MFA), passkeys, and Google sign-in. We never store your password in plain text; authentication is handled through our identity provider.
Your dream content (sensitive)
This is the heart of the app, and it is sensitive personal information. Depending on how you use Dream Codex, we collect:
- Dream entries (text) you write or that are transcribed from your voice.
- Voice recordings / audio when you choose to record a dream out loud, and the transcripts generated from them.
- Mood and lucidity tags you add to entries.
- Sleep-assistant usage, such as which ambient soundscapes you play and basic session activity.
We treat dream content with extra care because of how personal it is. It is not used for advertising and it is not sold.
Social features (only if you use them)
If you use the friends wall, we store your username, display name, bio, and the avatar and cover photos you choose. Your profile can be found by other signed-in users, and your photos are stored so that anyone with their link can view them. The dreams you share, your comments, your likes, and your friends list are visible only to your friends. If you report something, we keep the report and read the reported content to review it. If someone reports your content, we read it for the same reason.
Purchases
If you buy a plan, Apple, Google, or Stripe (on the web) processes the payment. We never see your card details. Through our billing provider, RevenueCat, we receive your plan, its status, renewal or expiry dates, which store you bought it in, and a purchase reference, linked to your account.
App analytics, device, and usage information
To keep the app working and improve it, we collect basic technical information such as device type, operating system, app version, and diagnostic or crash data. We also use PostHog (servers in the EU) to see which screens and features are used. These events are linked to a pseudonymous account ID and an install ID, never to your dream content. PostHog receives your IP address, from which an approximate location such as your country or city may be inferred. You can turn analytics off in the app under Data & privacy.
Website analytics
This website uses Google Analytics to understand aggregate traffic (for example, which pages are visited). This is separate from your in-app dream content.
How we use your information
- To provide the core journaling experience — saving, organizing, and showing your entries, calendar, and patterns.
- To generate AI interpretations and surface symbols, themes, and mood/lucidity trends (see our AI Policy).
- To transcribe voice recordings into text when you use voice capture.
- To run the sleep assistant and play ambient soundscapes.
- To create and secure your account, including MFA, passkeys, Google sign-in, and password recovery.
- To run the friends wall, and to review reports and remove content that breaks our community rules.
- To process purchases and manage your plan.
- To let you export your data.
- To maintain, troubleshoot, and improve the service, and to keep it secure.
- To comply with our legal obligations.
Consent and legal basis
Under Canadian privacy law (PIPEDA and BC's Personal Information Protection Act, "BC PIPA"), we rely on your consent to collect, use, and disclose your personal information for the purposes described here. Because dream content is sensitive, we rely on your express consent for the AI interpretation and voice-transcription features — and you can choose not to use them. You may withdraw consent at any time, subject to legal or contractual limits, by adjusting your use of optional features or by deleting your data.
AI processing and voice transcription
When you ask for an interpretation, the text of your dream entry is sent to an AI provider to generate the interpretation and identify symbols and themes. When you record a dream by voice, the audio may be sent to a third-party speech-to-text provider to produce a transcript. Full details, including how to avoid these features, are in our AI Policy.
Service providers and sharing
We share personal information only with service providers who help us run Dream Codex, and only as needed to provide the service:
- Supabase: hosting, database, authentication, and storage.
- Cloudflare Workers AI: generates dream interpretations, symbols, and dream images from entry text, and checks content for safety.
- Your phone's speech recognition (Apple or Google): transcribes voice recordings when you use voice capture.
- RevenueCat, Apple, Google, and Stripe: process and manage purchases.
- PostHog: in-app product analytics (see above).
- Resend: delivers account and service emails.
- Apple and Google: Sign in with Apple and Google sign-in, if you use them, and Google Analytics on this website.
We do not sell your personal data. We do not share your dream content for advertising.
International transfers and cross-border storage
Some of our service providers may store or process information on servers located outside of Canada, including in the United States. When information is handled outside Canada, it may be subject to the laws of those jurisdictions, including lawful access by courts and government authorities. We take steps to ensure your information is protected by comparable safeguards wherever it is processed.
Retention
We keep your information for as long as your account is active or as needed to provide the service. You can delete individual entries, and you can delete your account, at any time. When you delete a voice recording or an entry, we remove it from active systems; deletion of the underlying audio is handled accordingly, and residual copies in backups are purged on our standard backup cycle. We retain certain information longer only where required by law.
Security
We protect your information with technical and organizational safeguards, including encryption in transit and at rest, access controls, and account-security features like MFA and passkeys. The private vault gives you an extra layer of protection for entries you want to keep especially private. No system is perfectly secure, but we work to keep your dreams safe.
Your rights
Under PIPEDA and BC PIPA, you have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Delete your entries and your account.
- Export your data in a portable format.
- Withdraw consent for optional features or processing.
To exercise any of these rights, contact privacy@codexcorp.ca. We will respond within the timeframes required by law.
Children
Dream Codex is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app.
Contact and complaints
For privacy questions or requests, email privacy@codexcorp.ca. If you have a concern we have not resolved, you may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.