1Who we are

Hallune (“Hallune”, “we”, “us”) is a product of Pravshi Technologies, an independent software studio based in India, which is the data fiduciary (controller) responsible for your personal data under this policy. It applies to the Hallune website at hallune.pravshi.com and the Hallune mobile apps.

For any privacy question or request, contact us at contact@pravshi.com.

2Information you provide

Account

• Your email address, a username, and a password (stored only as a salted hash — we never store it in plain text).
• Profile details you enter during setup: full name, date of birth, sex, and country, and an optional profile photo.
• If you sign in with Google, we receive your name, email address, and Google profile picture (see “Google Sign-In” below). We do not receive any other Google data.

Your dreams

• The dream you record — as text you type and/or a voice recording, and the text transcript of it.
• The AI outputs derived from it: a generated image (and, if made, a short video), a title, a mood, and symbols, emotions, and themes.
• Comments, and content you post, save, or send in direct messages.

Support

Messages, bug reports, and feedback you send us, including any details you choose to include.

3Information we collect automatically

• Usage & interactions: dreams you view, like, comment on, save, or match with; who you follow; and which content has been shown to you.
• Device & notifications: basic device and app information, and a push-notification token if you enable notifications.
• Location (optional): if you grant permission, a location is stored so your dream can appear on the world map. You can decline — dreams without a location work normally — and you can revoke the permission anytime in your device settings.
• Log & diagnostic data: IP address and error/crash reports, used to operate, secure, and debug the service (crash reports are processed by Sentry — see below).

4How your dreams are processed by AI

Turning a dream into an image, a meaning, and matches requires sending your dream content to third-party AI services. We want to be clear about this:

• Groq — receives your dream text to produce the analysis (symbols, themes, mood, title) and to run automated safety checks on your text and generated image. Processed on servers outside India (United States).
• Stability AI — receives a prompt based on your dream to generate the dream image (and any video). Processed outside India (United States).
• Google (Gemini) — receives your dream text to create a numerical “embedding” that we use to find similar dreams and personalise your feed.

Your dream content is not end-to-end encrypted. It is stored in a form our systems can read, and it is sent to the providers above as part of normal processing. We do not train our own AI models on your dreams.

AI output can be inaccurate or unexpected and should not be relied on as fact or as advice.

5How we use your information

• To provide the core experience — analyse your dream and generate its image, meaning, and matches.
• To personalise your feed and connect you with people who dreamt something similar.
• To run social features: profiles, following, comments, and messages.
• To keep Hallune safe — moderation, safety checks, spam/abuse prevention, and handling blocks and reports.
• To process coin purchases and maintain your balance.
• To communicate with you — notifications you enable, and support or important service messages.
• To secure, debug, and improve the service, and to meet legal obligations.

6Google Sign-In

If you choose to sign in with Google, we request only your basic Google profile using the standard openid, email, and profile scopes. From that we receive your name, email address, and profile picture, which we use solely to create or sign in to your Hallune account and to set your avatar.

We do not request or access any restricted or sensitive Google data — no Gmail, Google Drive, contacts, calendar, or similar. Because of that, Hallune’s use of Google data is limited to authentication and does not involve any restricted API scopes.

7Who we share data with

We do not sell your personal data. We share the minimum necessary with trusted providers who process it on our behalf:

• Groq — AI dream analysis and safety moderation.
• Stability AI — dream image and video generation.
• Google — Google Sign-In, and Gemini text embeddings for matching.
• Cloudinary — hosting and delivery of your images, audio, and video.
• Neon — our PostgreSQL database (account and dream records).
• Upstash — temporary cache, one-time codes, and rate-limiting.
• Vercel (website hosting), Railway (API hosting), and Cloudflare (security and content delivery).
• Resend — transactional email such as verification and password-reset codes.
• Firebase Cloud Messaging and web push — delivery of notifications you enable.
• Sentry — crash and error diagnostics.
• Razorpay (web) and Google Play Billing (Android) — payment processing for coin purchases. We receive a transaction reference, not your card or bank details.

We may also disclose information to comply with law or lawful requests, to protect the rights and safety of Hallune, our users, or the public, or as part of a merger, acquisition, or sale of assets (subject to this policy).

8What other users can see

• A dream you post publicly — its title, text, image/video, mood, and symbols — is visible to others and can appear in the feed, search, the world map, matches, and recommendations. Dreams are public by default; you can set a dream private so only you can see it.
• An anonymous post hides your username and avatar from other users. Note that anonymity is from other users — our systems and staff can still associate content with an account where necessary (see below).

9Staff access

Our team can access account and dream data where reasonably necessary to operate Hallune — for example to provide support, moderate content, investigate safety or abuse, or comply with the law. We limit this to what is needed. This means your dreams, including anonymous ones, are not private from us in the way that end-to-end encrypted data would be.

10Where your data is processed

Several of the providers above operate outside India, largely in the United States. By using Hallune you understand that your information may be processed and stored in countries other than your own, which may have different data-protection laws. We rely on our providers’ contractual and technical safeguards for these transfers.

11How long we keep your data

We keep your information for as long as your account is active. When you delete a dream, it and its media are removed. When you delete your account, your account, dreams, comments, and associated media are permanently erased (see next section).

Limited copies may persist briefly in encrypted backups or logs, or where retention is required by law.

12Deleting your account

You can delete your account at any time. On the web, go to Settings → Delete Account → Delete forever; the app has the same option in Settings. Deletion is immediate and permanent: it removes your account and profile, your dreams and their images, audio, and video, your comments, and your votes.

If you can’t access your account, email contact@pravshi.com and we will delete it for you.

13Your rights (India’s DPDP Act, 2023)

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to:

• Access a summary of the personal data we process about you.
• Correct or update your data — you can edit most of it in your profile, or ask us.
• Erase your data — by deleting your account, or by asking us.
• Nominate another person to exercise your rights if you die or become incapacitated.
• Grievance redressal — raise a concern and have it addressed.

To exercise any of these, contact us at contact@pravshi.com. If you are not satisfied, you may complain to the Data Protection Board of India.

14Security

We protect your data with measures including hashed passwords, encryption of traffic in transit (HTTPS/TLS), and short-lived, signed access tokens. As noted above, your dream content is not end-to-end encrypted. No method of storage or transmission is perfectly secure, but we work to protect your information and to fix issues quickly.

15Children

You must be at least 18 years old to use Hallune. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will remove it.

16Changes to this policy

We may update this policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, notify you in the app. Continuing to use Hallune after a change means you accept the updated policy.

17Contact us

Questions or requests about this policy or your data: contact@pravshi.com — Pravshi Technologies, India.