Nyxwyn Privacy Policy
Last updated: 6 October 2026
Nyxwyn is a private dream journal. Your dreams are personal, so this policy tries to say plainly what happens to everything you write, who else touches it, and how to take it back.
The short version
- Your dreams and your Analytical Journal are stored in the EU (Frankfurt, Germany) and are visible only to you.
- Nothing you write is sent to any AI unless you switch on theme identification. It is off until you turn it on, and you can turn it off at any time.
- If you switch it on, the text of each dream you seal, together with your own list of themes, is sent to Anthropic's Claude service to identify the themes in it. We do not send your name, email address or account number with it.
- Your Analytical Journal is never sent to any AI.
- We do not sell your data, show you ads, or use your dreams to train AI models.
- You can delete your account and everything in it from Settings in the app. It is gone for good.
- Questions: privacy@nyxwyn.com.
1. Who we are
Nyxwyn is made and run by J. Patrick Hanley, EI (entrepreneur individuel), a sole trader based in France, at La Grande Blottière, 53200 Fromentières, France (registration in progress; the SIRET number will appear here once issued). In data-protection law this makes us the controller of your personal data: we decide why and how it is used.
Contact for anything in this policy: privacy@nyxwyn.com. General support: support@nyxwyn.com. Website: nyxwyn.com.
2. What we collect, and why
| What | Where it comes from | Why we need it |
|---|---|---|
| Email address and password (the password is stored only in scrambled, hashed form) | You, when you create an account | To create your account, let you sign in, and send account emails such as confirmation and password reset |
| Dream entries (text you type or dictate, the date, drafts, sealed status) | You | This is the journal itself |
| Analytical Journal entries, and which dream or report each one is linked to | You | Your own reflections, kept alongside your journal |
| Themes identified in your dreams, categories, and reports | Created by the app from your dreams, only if theme identification is on | To show you the themes, trends, reports and wind rose |
| Push token (a random device address for notifications), if you allow notifications | Your phone | To tell you when a report is ready |
| Settings (colour theme, light or dark mode, reminder time, season and hemisphere setting, your time zone, whether theme identification is on) | You, and your phone's time zone | To make the app work the way you set it, and to date your reports correctly |
| Subscription status (trial, active, expired; which plan; renewal date) | Apple or Google, through RevenueCat | To know whether premium features should be unlocked |
| Technical records (IP address, device and app version, sign-in times, error logs) | Created automatically when the app talks to our servers | To keep the service secure, stop abuse and fix problems |
| Messages you send us | You, when you email us | To answer you |
What we do not collect: your contacts, your location, your photos, advertising identifiers, or your card details. Payments are handled entirely by Apple or Google; we never see your card.
Dictation. When you dictate a dream, your phone's own speech recognition turns your voice into text. Depending on your phone and its settings, this happens on the phone itself or on Apple's or Google's servers, under their own privacy terms. We never receive or store any audio, only the text that appears in your entry.
Notifications. Daily reminders are scheduled on your phone itself and never pass through our servers. Other notifications, such as "your weekly report is ready", are sent from our server. For those, if you allow notifications, your phone gives us a push token (a random address for your device), which we store with your account and pass to Apple (on iPhone) or Google (on Android) to deliver the message. Notifications never contain your dreams, themes or report content, only a short general message such as "Your weekly report is ready". You can turn them off in Settings or in your phone's settings, and the token is deleted with your account.
Your dreams may contain sensitive information
Dreams often touch on health, relationships, sexuality, religion, beliefs, family, past experiences and other deeply personal matters. The law treats some information of this kind as a "special category" that needs extra care. We have designed Nyxwyn to go beyond what the law requires, because we respect the people who use it and value the trust they place in us when they write here.
So we treat everything you write as sensitive, whether or not the law would: we ask for your explicit agreement before storing it, we only use it to run the journal for you, we keep AI out of it unless you invite it in, and nobody at Nyxwyn reads it except where you ask us to (for example, to fix a problem you report) or the law requires it.
3. Theme identification (premium, off unless you turn it on)
Nyxwyn can identify the themes in your dreams and show how they recur over time. It does this with Claude, an AI service run by Anthropic PBC (United States).
- It is off until you switch it on, in Settings. Until then, no dream text is sent to Anthropic or to any other AI service.
- When it is on, each time you seal a dream we send Anthropic: our instructions, the list of themes already found in your journal, and the text of that one dream. We do not send your name, email address, account number or any other identifier.
- Please note: whatever is written in the dream itself is sent as written. If you mention a person's name or a place in a dream, that goes too. You can leave such details out if you prefer.
- Reports for a week, month, season, quarter or year are written by the same service from the themes already identified, their counts and short quotes of a few words from your dreams. Full dream text is not sent for reports. Daily reports are made by the app itself without any AI.
- Tidying your theme list (merging duplicate themes now and then) sends only theme labels.
- Your Analytical Journal is never sent to any AI.
- Private dreams. You can mark any dream as private. A private dream is never sent to any AI, and its words are never quoted in a report, even while theme identification is on. Turning theme identification on or off does not change this: a private dream stays private until you change that dream yourself.
- Anthropic processes this data only to return the result to us. Under its commercial terms it does not use it to train its models, and it deletes it within 30 days. The one exception: if Anthropic's automated safety systems flag a request as breaching its usage policy, Anthropic may keep that request for up to 2 years to enforce the policy. Dreams can contain violent or sexual imagery that such systems might flag, so we mention this for completeness.
- The app identifies themes; it does not interpret your dreams or tell you what they mean. What a theme means to you, if anything, is yours to decide.
- Switching it off stops any further dreams being sent. It does not delete anything: themes and reports already created stay in your journal until you delete them or your account. It also does not cancel your subscription or entitle you to a refund; see our Terms of Use for how subscriptions work.
- Switching it back on applies to dreams you seal from then on. Dreams sealed while it was off are not sent automatically. The app offers once to catch up on them; only if you accept are they sent, a few at a time, never including dreams you have marked private. You can stop the catch-up at any time in Settings.
4. Our legal bases
Data-protection law asks us to name the legal reason for each use:
- To provide the journal you signed up for (account, storing your entries, settings, subscription): necessary to perform our contract with you.
- To store your dreams and Analytical Journal entries, which may contain sensitive information: your explicit consent, given when you create your account. You can withdraw it at any time by deleting your account.
- To send your dreams to Anthropic for theme identification: your explicit consent, given when you switch the feature on. You can withdraw it at any time by switching it off.
- To send launch news to people on the waitlist: your consent, given when you join and confirm. You can withdraw it at any time with the unsubscribe link.
- To keep the service secure, prevent abuse and fix errors: our legitimate interest in running a safe, working service.
- To keep records the law requires (for example, tax and accounting records): legal obligation.
We do not make decisions about you by automated means that have legal or similarly significant effects. Theme identification only labels what is in your own writing.
5. Who else handles your data
We use a small number of service providers ("processors") who handle data only on our instructions and under written data-processing agreements:
| Provider | What they do for us | Data they handle | Where |
|---|---|---|---|
| Supabase | Hosts our database, sign-in and server functions | Everything in section 2 | EU (Frankfurt, Germany); Supabase Inc. is a US company |
| Anthropic | Identifies themes, only if you switch it on | One dream plus your theme list at a time; theme labels and short quotes for reports; no identifiers | United States |
| Resend | Sends account emails (confirmation, password reset, security notices), and the waitlist confirmation and launch emails | Your email address and the email content | EU (Ireland); Resend is a US company |
| RevenueCat | Keeps track of your subscription across Apple and Google | An anonymous app account number, purchase and renewal records | United States |
| Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) | Deliver push notifications to your phone | Push token and the notification text (never journal content) | United States |
| Cloudflare | Runs the nyxwyn.com website and stores the launch waitlist | Website visit logs; waitlist email addresses | Global network |
| Infomaniak | Our mailbox for support@ and privacy@ | Emails you send us | Switzerland |
Apple and Google sell the subscription to you through the App Store and Google Play. They do this as independent companies under their own privacy policies, not on our behalf. They tell us (through RevenueCat) whether your subscription is active; they do not tell us your card details.
We may also disclose data if the law requires it, for example in response to a valid court order, and we would tell you unless the law forbids that.
We do not sell or rent your data, and we do not share it with advertisers or data brokers.
6. Data sent outside the EU
Infomaniak keeps our mailbox in Switzerland, which the European Commission recognises as giving adequate protection. Some providers above are based in the United States (Anthropic, RevenueCat, and Apple and Google for notifications, process data there; Supabase, Resend and Cloudflare are US companies even where our data is stored in Europe). Where personal data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, which are part of each provider's data-processing agreement. Resend, Cloudflare, Apple and Google are also certified under the EU–US Data Privacy Framework. You can ask us for a copy of the relevant safeguards at privacy@nyxwyn.com.
7. How long we keep it
- Your account, dreams, Analytical Journal, themes, reports and settings: for as long as you have an account. When you delete your account, they are deleted from our live database straight away and drop out of our backups within 7 days.
- Drafts: a dream you have not sealed stays as a draft until you seal it, delete it or delete your account.
- Technical and security logs: up to 90 days, unless needed longer to investigate a specific security problem.
- Data sent to Anthropic: Anthropic deletes it within 30 days (up to 2 years only if its safety systems flag it, as explained in section 3). We do not keep copies of what was sent beyond the themes stored in your journal.
- Subscription records at RevenueCat: deleted when you delete your account, except where the stores or tax law require records to be kept.
- Launch waitlist: unconfirmed addresses 7 days; confirmed addresses until you unsubscribe, and at most 30 days after the launch email.
- Emails you send us: up to 2 years after the conversation ends, so we can follow up if you write again.
Deleting your account does not cancel your subscription with Apple or Google. Please cancel it in your App Store or Google Play settings, or you may still be charged.
8. Your rights
You have the right to:
- Access your data and get a copy of it.
- Take it with you (data portability) in a common, machine-readable format.
- Correct it. You can edit drafts and your Analytical Journal in the app, and change your email address in Settings.
- Delete it. Settings › Delete account removes your account and everything in it, permanently. If you can no longer open the app, you can ask at nyxwyn.com/delete-account or by emailing privacy@nyxwyn.com from your account's email address.
- Withdraw consent at any time: switch off theme identification, or delete your account. This does not affect what was done before you withdrew it.
- Object to uses based on our legitimate interest, and ask us to restrict use while a question is settled.
To get a copy of your data, email privacy@nyxwyn.com from your account's email address (an export button in the app is on its way). We answer within one month. We may ask you to confirm it is really you before we act.
You also have the right to complain to a data-protection authority. In France this is the CNIL (cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07). If you live elsewhere in the EU, you can complain to your own country's authority. We would be glad to try to sort things out with you first.
9. Security
Your data travels encrypted (HTTPS) and is encrypted when stored. Every table in our database is locked so that each account can only ever read its own rows. Sign-in uses hashed passwords, and we send you an email when your password, email address or sign-in method changes. You can also turn on an app lock (Face ID, fingerprint or your phone's PIN) and two-step sign-in with an authenticator app in Settings. Server keys are kept out of the app and out of our code. No system is perfectly secure; if a breach ever put your data at risk, we would tell you and the CNIL as the law requires.
10. Adults only
Nyxwyn is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe someone under 18 has an account, please tell us at privacy@nyxwyn.com and we will delete it.
11. The website and the launch waitlist
nyxwyn.com is an information site. It does not use advertising or tracking cookies. Cloudflare, which runs it, keeps short technical logs (such as IP addresses) to deliver the pages and protect the site from attacks. If we ever add website analytics, we will use a cookie-free tool or ask for your consent first.
Launch waitlist. If you join the waitlist, we keep your email address, the date you joined and the date you confirmed it. We send you one email to confirm the address; if you do not confirm within 7 days, we delete it. Once confirmed, we use it only to tell you when Nyxwyn launches and to send occasional news before then: never for anything else, and never shared or sold. Every email has a one-click unsubscribe link, which deletes your address straight away. We delete the whole waitlist within 30 days after the launch email. The address is stored by Cloudflare and the emails are sent by Resend (see section 5). Joining the waitlist does not create a Nyxwyn account. Legal basis: your consent, which you can withdraw at any time.
12. Changes to this policy
If we change this policy, we will update the date at the top. If the change is significant, for example a new provider handling your dreams or a new use of your data, we will tell you in the app before it takes effect, and we will ask for your consent again where the law requires it.
A French version of this policy is available. If the two differ, the French version prevails for users living in France.
13. Contact
Privacy questions or requests: privacy@nyxwyn.com Everything else: support@nyxwyn.com J. Patrick Hanley, EI (entrepreneur individuel), La Grande Blottière, 53200 Fromentières, France