Privacy Policy

What stays on your device

All dream journal entries — the text, voice transcriptions, notes, and saved interpretations — are stored locally on your iPhone using Apple's SwiftData framework. This data never leaves your device unless you explicitly request an AI interpretation of a specific dream.

No account is required to use the journal. There is no sync, no backup to our servers, and no access to your dream library by anyone other than you.

What happens when you request an interpretation

When you tap "Interpret Dream," the text of that single dream entry is sent to our backend (a Cloudflare Worker), which passes it to the Anthropic API to generate your interpretation. This text is used only to produce the response and is not stored by Elara's servers. Anthropic processes the request under their own data handling policies.

Before this happens, you are asked to sign in with Apple.

Sign in with Apple

We use Sign in with Apple solely to manage interpretation credits. When you sign in, Apple provides us with a stable user identifier. We immediately hash that identifier using SHA-256 before storing it — the raw Apple ID is never written to our systems.

Your credit balance and subscription status are stored server-side in Cloudflare KV, stored under an anonymous identifier. Nothing else about your Apple account is accessed or stored.

Purchases

All payment processing is handled by Apple via StoreKit 2. We never see or store your payment information. When a purchase is completed, Apple provides a signed transaction receipt that our server verifies to update your credit balance.

Face ID and app lock

Elara offers an optional app lock. When you turn it on, your device checks Face ID, Touch ID, or your passcode before the journal opens. This check happens entirely on your device. Elara never receives or stores any biometric data.

Exporting your dreams

You can export your dreams as plain text or JSON from Settings. The export is created on your device and handed to the share sheet, so you choose where it goes. Elara's servers never see it.

Server logs and network data

Our backend logs which request was made and whether it used a session token or the older method. These logs contain no dream text and are kept for 7 days. To limit abuse, when a new account is created the backend keeps a count of new accounts per IP address for 24 hours, then discards it. This count is not linked to your account. Cloudflare, which hosts our backend, also processes IP addresses as part of delivering requests.

Deleting your account

You can delete your account in the app. This removes your credit balance, subscription state, and usage count from our servers. Purchase records kept to prevent duplicate credit grants contain only a hashed identifier, a product ID, and a timestamp, and they expire automatically after 400 days.

Analytics and tracking

The Elara app contains no third-party analytics, no advertising SDKs, and no crash reporting services. We do not track you across apps or websites. We do not sell your data.

This website uses Google Analytics to count visits. That applies to the website only, not to the app.

Children

Elara is not directed at children under 13 and we do not knowingly collect data from children under 13.

Changes to this policy

If this policy changes in a meaningful way, we will update the date at the top of this page and, where required by law, notify you within the app.

Contact

Questions about this policy? Reach us at contact@nerdvista.com