YumeMochi: Dream Journal Privacy Policy
Tell your dream, meet a YumeMochi - GASHIMA LAB
GASHIMA LAB ("we," "our," or "us") provides the mobile application "YumeMochi: Dream Journal" (the "App"). We hold user privacy as our utmost priority and are committed to protecting personal information in compliance with applicable data protection laws in Japan, the United States, the United Kingdom, Canada, Australia, and other jurisdictions where the App is distributed.
1. No Account / No Registration Required: You do not need to register your name, email address, phone number, or social media accounts.
2. Journal Data Stored Locally: Your dream entries, sticker records, and emotional coordinates are saved exclusively on your own iPhone device, never on our database servers.
3. No Raw Audio Sent Off-Device: Voice input is transcribed entirely on your device using Apple's on-device speech recognition. Audio recordings never leave your iPhone.
4. Zero Advertising / Zero Data Brokerage: We do not serve third-party ads, nor do we sell, rent, or trade your personal data to ad brokers.
Article 1 (Information Collected and How It Is Handled)
1. Dream Text Data
- Purpose: To analyze symbolic motifs, emotional states, and generate reflective interpretations.
- Third-Party Processing: When you request an AI dream reading, your dream text is securely transmitted via HTTPS through our proxy server (Cloudflare Workers) to Google LLC's Gemini API.
- Data Protection & AI Training: No personal identifiers (such as your name, Apple ID, contact details, or location) are attached to this transmission. Because we utilize Google's paid enterprise API services, your dream text is NOT used to train or improve Google's AI models. Google temporarily logs API inputs and outputs strictly for abuse detection, operational monitoring, and legal compliance before secure deletion according to Google's enterprise retention policies.
2. Voice and Audio Data
- Purpose: To quickly transcribe waking dream recollections into text via voice input.
- Strict On-Device Processing: Speech transcription is performed solely using Apple's on-device Speech framework. Your raw audio recordings are processed locally on your iPhone and are never uploaded, transmitted, or stored on any external server.
3. Dream Journal, Yume Mochi Stickers, and Emotional Records
- Purpose: In-app display of your dream calendar, sticker collection, and emotional map.
- Local Storage Only: All journal entries, sticker shapes, and mood logs are stored strictly in the local database (SwiftData) on your iPhone. We do not sync, host, or store your journal records on our servers.
4. Device Integrity and Security Data
- To verify that API requests originate from legitimate instances of the App and to prevent abuse or service exhaustion, we use Apple's App Attest and DeviceCheck technologies. These services generate anonymous cryptographic assertion tokens and device tokens. They do not contain any personally identifiable information.
5. Analytics and Usage Metrics
- Service Provider: Google LLC (Google Analytics for Firebase), transmitted directly from the App.
- Purpose: To understand feature usage and improve app quality, stability, and usability. We do not collect Apple's Identifier for Advertisers (IDFA) and advertising personalization is permanently disabled.
- Opt-Out Settings: Analytics sharing is enabled by default. You can opt out at any time inside the App by toggling off "Settings > Share Usage Data". Disabling this stops all future analytics reporting.
- Data Events Sent by YumeMochi: Dream Journal:
- First app open and retention milestones (days elapsed since install).
- Onboarding completion or dismissal.
- Microphone permission outcome (granted, denied, or later).
- Starting a dream record (voice vs. text, record count).
- Dream reading received (count, duration in seconds, character length).
- Primary motif category (place, person, object) and dictionary keyword (words not found in the dictionary are labeled generically as "unregistered"; full dream text is never sent in analytics).
- Emotional state of the sticker (8 distinct mood states).
- Reading completion depth (top, middle, or full).
- Attempting to record a second dream on the same day.
- Opening the subscription screen (source, viewing duration, chosen plan).
- Free trial start, conversion to paid, renewal, and cancellation events.
- Daily record events (dream recorded vs. calm morning without dream), gap in days, streak broken count.
- Visiting the Collection, Map of Interests, or Motif detail views.
- Tapping explanatory informational links.
- Automated Firebase Data: Session frequency, app open count, screen views, OS version, device model, app version, language setting, rough geographical region derived from IP address, and an app-specific instance identifier.
- Information NEVER Sent: Full dream texts, dream reading interpretation text, audio recordings, personal names, email addresses, precise GPS coordinates, or ad tracking identifiers (IDFA).
- For further details on how Google processes this data, refer to Firebase Privacy and Security.
6. Data Retention and Deletion
- On-Device Records: Dream records and stickers remain on your iPhone until you choose to delete them. You can delete all local records permanently via "Settings > Delete All Dream Records". Deleting the App also purges all locally stored records.
- Server Storage: Dream texts transmitted for AI analysis are processed ephemerally in server memory (Cloudflare Workers) and are not retained on our servers or logged in persistent server storage.
- Limitations: In-app local deletion cannot delete Google's transient security logs or aggregated historical Firebase analytics. Subscription purchase records are managed independently by Apple Inc.
Article 2 (Third-Party Disclosure and Service Providers)
We do not sell, rent, or disclose user data to third parties without consent, except in the following situations:
- When required by applicable law, court order, or governmental regulation.
- When necessary to protect life, physical safety, or property where obtaining consent is impracticable.
- When engaging trusted infrastructure providers (Google LLC, Cloudflare, Inc., Apple Inc.) acting strictly under confidentiality obligations to deliver backend routing, AI analysis, and store billing.
Article 3 (Disclaimer: Non-Medical & Non-Clinical Nature)
The App is a personal mindfulness and self-reflection dream journal utilizing symbolic psychological metaphors. The App does NOT provide medical diagnosis, clinical psychological therapy, healthcare advice, or treatment. If you are experiencing distress or require healthcare guidance, please consult a qualified physician or healthcare professional.
Article 4 (Jurisdiction-Specific Privacy Disclosures)
1. United States: California Consumer Privacy Act (CCPA / CPRA)
For California residents:
- Categories of Information Collected: Identifiers (app instance ID, device tokens), internet activity (analytics events), inferences (mood category). We do not collect sensitive personal information.
- No Sale or Sharing: We do not sell personal information, nor do we share it for cross-context behavioral advertising.
- Your Rights: You have the right to request deletion of your information and to be free from discrimination for exercising your privacy rights. You can purge all journal data via in-app Settings and opt out of analytics at any time.
2. Children's Privacy (COPPA & Global Standards)
The App is not directed toward children under the age of 13 (or under 16 in certain jurisdictions, including the UK and EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can promptly address the matter.
3. United Kingdom & International Users (UK GDPR / Data Protection Act 2018)
For users in the UK, Canada, and Australia: We process necessary technical data based on legitimate interests in securing and maintaining the App, and AI dream analysis based on your explicit in-app request and consent. You have the right to access, rectify, or request erasure of your data, and to lodge a complaint with your respective supervisory authority (e.g., the UK Information Commissioner's Office (ICO)).
Article 5 (Changes to This Privacy Policy)
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Significant revisions will be notified within the App or on our website.
Article 6 (Contact Information)
If you have any questions, comments, or privacy requests regarding this policy, please contact:
GASHIMA LAB
Email: contact@gashima-lab.com
Website: https://gashima-lab.com
Effective Date: October 2, 2026
Last Revised: October 12, 2026
GASHIMA LAB