Seynora Privacy Policy

2026-05-19 · Wuhan ByteTenet Network Technology Co., Ltd.

1. Operator

This application is operated by Wuhan ByteTenet Network Technology Co., Ltd. ("Company", "we", "us").

Contact: arvinho@dingtalk.com

2. Account Registration

Seynora requires account registration to access full functionality.

Registration requires an email address for account identification and security verification.

3. Information We Collect

To provide dream recording, AI analysis, and community interaction services, we may collect the following:

• Account Information: Email address, encrypted password (one-way hashed)
• Profile Information: Nickname, avatar, birth year, constellation/zodiac sign, occupation, MBTI type, gender (all optional)
• Dream Content: Dream descriptions, titles, keywords, emotion tags you voluntarily record
• Voice Data: Audio recordings captured for speech-to-text dream input (encrypted in transit and at rest)
• AI-Generated Content: Dream analysis, illustrations, emotion inferences produced by AI
• Community Data: Dreams you choose to publish publicly, likes, and bookmarks
• Device Information: Device model, OS version, app crash logs (for service improvement)
• Purchase Records: Subscription status, credit balance, transaction history (for IAP verification)

4. Special Note on Sensitive Data

Dream content may contain highly personal emotional and psychological information. We commit to:

• Dream data is private by default and never shared without your explicit consent
• Community sharing requires your active action; you may post anonymously
• After server-side AI analysis, optional encrypted local storage uses AES-256-GCM to protect your data
• You may delete any dream record at any time; deletion is irreversible

5. Children's Privacy (COPPA Compliance)

Seynora is not directed to children under 13 years of age.

We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

6. How We Use Information

We use collected information for the following purposes:

• Providing dream recording and AI analysis services
• Generating personalized dream interpretations and illustrations
• Maintaining your account and subscription status
• Improving AI model analysis quality
• Complying with legal and regulatory requirements
• Detecting and preventing fraud and abuse

7. AI Data Processing

This application's AI refinement, dream analysis, and image generation features use Alibaba Cloud DashScope's Qwen large language model.

Data sent to the AI service includes:

• Dream content: title, text, sensory details, emotion tags, keywords
• Profile data (if provided): gender, birth year, zodiac/constellation, occupation, MBTI type

We have data processing agreements with the AI service provider ensuring your data is not used for model training or other purposes.

You can disable AI features anytime in Settings > Privacy.

AI-generated content is for personal entertainment and reflection only. It should not be considered professional psychological counseling or medical advice.

8. Data Storage

Data of users in mainland China is stored on servers within mainland China.

Data of international users may be stored on servers outside mainland China (e.g., Singapore, United States).

We employ industry-standard encryption and access controls to protect your data.

9. Data Sharing and Disclosure

We do not sell your personal data. We may share data only in the following circumstances:

• With your explicit consent
• With trusted third-party service providers (e.g., AI services, cloud storage) solely as necessary to provide the Service
• When required by applicable law, court order, or governmental authority
• In connection with a merger, acquisition, or asset sale, where your data may be transferred as a business asset

10. Data Retention

We retain your personal data only as long as necessary to provide the Service.

Upon account deletion, your data will be permanently removed from our systems within a reasonable timeframe.

Anonymized or aggregated data may be retained for statistical purposes and cannot be traced back to individuals.

11. Your Rights

You have the following rights regarding your data:

• Right of Access: Obtain a copy of your personal data held by us
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your account and associated data
• Right to Restrict Processing: Restrict processing under certain circumstances
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Withdraw Consent: Withdraw previously given consent without affecting prior lawful processing

12. GDPR Compliance (EU/EEA Users)

If you are located in the European Union (EU) or European Economic Area (EEA), you have all rights listed in Section 11 under the General Data Protection Regulation (GDPR).

Our legal bases for processing include: your explicit consent, performance of a contract, and our legitimate business interests.

You have the right to lodge a complaint with your local data protection supervisory authority.

13. CCPA/CPRA Compliance (California Users)

If you are a California resident, under the California Consumer Privacy Act (CCPA/CPRA), you have the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell personal data)
• Not be discriminated against for exercising your privacy rights

14. Korean Personal Information Protection (PIPA)

For users in South Korea, we comply with the Personal Information Protection Act (PIPA).

We have designated a personal information protection officer and implement technical and organizational safeguards.

For cross-border data transfers, we obtain your consent in accordance with applicable law.

15. Japanese Personal Information Protection (APPI)

For users in Japan, we comply with the Act on the Protection of Personal Information (APPI).

We clearly specify the purposes of use for personal information and use it only within those purposes.

Before providing personal information to third parties abroad, we obtain your prior consent.

16. Security Measures

We implement the following technical and organizational measures:

• TLS/HTTPS encryption for data transmission
• bcrypt one-way hashing for passwords
• AES-256-GCM encryption for voice data
• Optional encrypted local storage (iOS Keychain)
• Strict database access controls and audit logging
• Regular security assessments and vulnerability scanning

17. Cookies and Tracking

This application does not use browser cookies. We use necessary device identifiers to maintain login sessions and prevent abuse.

We do not use third-party analytics SDKs to collect behavioral data for advertising purposes.

18. International Data Transfers

As our servers may be located in different regions, your data may be transferred to servers outside your country of residence for processing.

We ensure such transfers comply with applicable data protection laws and implement appropriate safeguards (such as Standard Contractual Clauses).

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be notified in-app and published on this page.

Material changes will be communicated via email or in-app notification.

20. Contact Us

If you have any questions about this Privacy Policy or our data practices:

Email: arvinho@dingtalk.com

21. Third-Party SDK Disclosure — UniPush Notification Service

This application uses the UniPush notification service. UniPush is an integrated unified push service jointly launched by DCloud and GETUI (Daily Interactive Co., Ltd.), using the SDK provided by GETUI.

Push Notification Service Provider

Push notification technology services are provided by Daily Interactive Co., Ltd. (GETUI). We may provide your device platform, device manufacturer, device brand, device identification codes and other device information, application list information, network information, and location-related information to GETUI for the purpose of providing push notification technology services to you. When sending push notifications, we may authorize GETUI to perform link adjustment and mutually activate closed SDK push processes to ensure you receive our push notifications in a timely manner.

For details, please visit the GETUI Privacy Policy.

Third-Party SDK Integrated in UniPush Module

SDK Name	GETUI Push
Provider	Daily Interactive Co., Ltd.
Package	com.igexin
Purpose	Push notifications
Permissions	android.permission.ACCESS_NETWORK_STATE android.permission.ACCESS_WIFI_STATE android.permission.READ_PHONE_STATE android.permission.VIBRATE android.permission.GET_TASKS
Data Collected	Android: device platform, manufacturer, OAID, Android ID, WiFi info, carrier info, app list, etc. iOS: IDFA (optional), IDFV, device model, system version, IP address, network info, etc.
Privacy Policy	View