Last updated: October 27, 2026
Notis Privasi Ringkas (Bahasa Malaysia). Somni dikendalikan oleh Srinivas Krishnan, seorang individu di Kuala Lumpur, Malaysia. Kami memproses data peribadi anda (termasuk akaun, tarikh lahir, catatan mimpi, data penggunaan dan pengecam pengiklanan) untuk menyediakan aplikasi Somni, tafsiran AI, langganan, analitik dan pengukuran iklan, serta program rujukan (bagi peserta yang dijemput). Pengecam pengiklanan di iPhone hanya dikumpul jika anda membenarkan penjejakan; di Android, ia tertakluk kepada pilihan anda atau, di UK, EU/EEA dan Switzerland, persetujuan anda. Catatan mimpi boleh mengandungi data peribadi sensitif dan hanya diproses dengan persetujuan anda. Data anda dikongsi dengan pembekal perkhidmatan kami (termasuk Supabase, Anthropic, OpenAI, RevenueCat, Expo, Resend, PostHog, Sentry dan Meta) dan mungkin dipindahkan ke luar Malaysia mengikut Akta Perlindungan Data Peribadi 2010. Pemberian data asas akaun adalah wajib untuk menggunakan akaun; tanpanya, anda hanya boleh menggunakan Mod Tetamu. Anda berhak meminta akses, pembetulan, pemindahan data dan pemadaman, menarik balik persetujuan, serta mengehadkan pemprosesan. Hubungi Pegawai Perlindungan Data kami di info@mysomni.app. Notis penuh dalam Bahasa Inggeris di bawah; versi penuh Bahasa Malaysia akan disediakan tidak lama lagi. Jika terdapat percanggahan, versi Bahasa Inggeris terpakai setakat yang dibenarkan oleh undang-undang. Dalam versi aplikasi sebelum 1.6.17, SDK Meta menghantar pemasangan dan pembukaan aplikasi, pembelian dalam aplikasi (termasuk jumlahnya), pengecam pengiklanan dan kaedah pendaftaran anda; kami tidak menggunakan "advanced matching". Mulai versi 1.6.17, di Android di UK, EU/EEA dan Switzerland, data ini hanya dihantar jika anda bersetuju dalam aplikasi; di Android di tempat lain, anda boleh mematikannya pada bila-bila masa di Profile → Privacy → Ad measurement. Di iPhone, pengecam pengiklanan hanya dihantar jika anda membenarkan penjejakan.
Welcome to Somni, a dream journaling and AI interpretation app developed and operated by Srinivas Krishnan, an individual based in Kuala Lumpur, Malaysia ("we," "our," or "us"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Somni mobile application ("App"). By using Somni, you agree to the practices described in this policy.
We collect the following categories of information when you use Somni:
Account Information
Birth & Astrological Information
Dream Journal Content
Sensitive information
Dreams can reveal things about your health, mental or emotional state, religious beliefs, sex life or other sensitive matters. You decide what to write. From app version 1.6.18, before any AI reading, voice transcription or dream art, Somni asks you to tick two separate boxes (consent version consent_v1), worded exactly as follows:
Both boxes must be ticked before any AI reading, voice transcription or dream art. Without them you can still log your dreams. You can withdraw this consent at any time in Profile → Privacy → AI features. In app versions before 1.6.18, by recording a dream and requesting an interpretation, you explicitly consent to us processing that content, including sending it to our AI providers, for the sole purpose of providing Somni’s features.
Usage and Progress Data
App Preferences
Subscription and Payment Information
Referral Programme (invited participants only)
Device and Technical Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core journaling and AI interpretation features | Dream text, account ID | Performance of contract and your explicit consent (for sensitive content) |
| Generate AI-powered dream interpretations and pattern analysis | Dream text, emotion history | Performance of contract and your explicit consent (for sensitive content) |
| Transcribe voice-recorded dream descriptions | Audio recording (processed transiently, not stored) | Performance of contract |
| Calculate streaks, XP, realms, and milestones | Dream log dates, entry count | Performance of contract |
| Send morning dream-recall reminders and streak alerts | Push notification token, your chosen reminder time | Consent (you can opt out at any time) |
| Manage subscriptions and enforce plan limits | Subscription status from RevenueCat | Performance of contract |
| Export your dream journal as a PDF | All dream entries and interpretations | Performance of contract / your explicit request |
| Improve app reliability and fix bugs | Crash and error reports (Sentry) | Legitimate interests |
| Understand how features are used so we can improve the app | App usage events, device information, approximate location from IP address, account ID (PostHog) | Legitimate interests |
| Measure which of our ads lead to installs, sign-ups and purchases | Advertising identifier (where available) and limited app events: installs and opens, sign-ups (with method) and purchases (with amount) (Meta SDK) | On iPhone: consent, through Apple's tracking prompt. From version 1.6.17, on Android in the UK, EU/EEA and Switzerland the SDK runs only if you agree in the app. Elsewhere on Android it runs after we tell you about it in this policy, and you can turn it off at any time in Profile → Privacy → Ad measurement. Turning it off stops further events being sent. Legal basis: your consent in the UK, EU/EEA and Switzerland; elsewhere, including Malaysia under the PDPA 2010, the notice in this policy and your choice to keep it on, which you can withdraw at any time. |
| Send occasional news about new features and offers by push ("Tips & offers") | Push notification token, your setting, your approximate country | Consent: off by default in the UK, EU/EEA and Switzerland; you can switch it off at any time in Profile → Notifications |
| Run the referral programme: track codes, calculate and pay rewards, prevent fraud and abuse | Referral code, account IDs, payment plan and status, referrer's bank details | Performance of contract; legitimate interests (fraud prevention); legal obligation (accounting and tax records) |
We do not use your dream content to train AI models, and we do not sell your personal data for money. Because Somni uses the Meta SDK, sharing your advertising identifier and app events with Meta to measure ads may count as "sharing" or "targeted advertising" under some US state privacy laws. You can stop it at any time using the advertising opt-out in Section 7. We do not share your dream entries, birth details or readings with advertisers. The only data shared for advertising purposes is the limited advertising identifier and app-event data described under Meta in Section 3.
Somni relies on the following third-party services to function. Each service has its own privacy policy, linked below.
Supabase — Database and authentication provider. Your account credentials, dream entries, and profile data are stored in Supabase's infrastructure (hosted on AWS). Supabase encrypts data at rest and in transit.
supabase.com/privacy
Anthropic (Claude AI) — Powers the AI dream interpretation, pattern analysis, mood guide, and in-app chat features. When you request an interpretation or chat with an AI guide, the text of your dream or chat message is sent to Anthropic's API. Under its API terms, Anthropic does not use this data to train its models, and may keep it for a limited period for safety and abuse monitoring (see Section 5).
anthropic.com/privacy
OpenAI — Powers voice-to-text transcription when you record a dream using your microphone, and generates Dream Art and Cosmic Art images. For transcription, your audio is sent to OpenAI's API and the text is returned to Somni; we do not store the recording. When you create an image, a short text prompt based on your dream or daily reading (written by Anthropic's Claude) is sent to OpenAI's image API. Under its API terms, OpenAI does not use this data to train its models, and may keep it for a limited period for safety and abuse monitoring (see Section 5).
openai.com/privacy
RevenueCat — Manages in-app purchase entitlements and subscription status for Somni Pro. RevenueCat receives your App Store or Google Play purchase details (receipt or purchase token, product, price and transaction dates) and your Somni account ID, so it can confirm which purchases are active on your account.
revenuecat.com/privacy
Expo (Expo Notifications) — Provides push notification infrastructure. Your device push token is registered with Expo's notification service to deliver reminders you have opted into.
expo.dev/privacy
Resend — Powers delivery of account and product update emails. For marketing and announcement emails, Resend provides standard open and click tracking (a tracking pixel to record when an email is opened, and rewritten links to record clicks) so we can understand how our communications perform. This does not apply to transactional account emails.
resend.com/legal/privacy-policy
Meta (Facebook SDK) — Measures our advertising on Facebook and Instagram. The SDK sends Meta your device's advertising identifier where available (on iPhone, only if you allow tracking) and a limited set of app events: app installs and opens, sign-ups (including the sign-up method you used) and in-app purchases (including the amount). It does not send your dreams, readings, birth details, name or email. You can stop this on iPhone in Settings → Privacy & Security → Tracking, and on Android by resetting or deleting your advertising ID in your device settings. From version 1.6.17 you can also turn it off on Android at any time in Profile → Privacy → Ad measurement.
facebook.com/privacy/policy
In app versions before 1.6.17, the Meta SDK automatically sends Meta: app installs and opens, in-app purchases (including the amount), your device's advertising identifier where available, and the sign-up method you used. On iPhone, the advertising identifier is sent only if you allow tracking. We do not send Meta your dreams, birth details, readings or account contents, and we do not use Meta's advanced matching. From version 1.6.17, on Android in the UK, EU/EEA and Switzerland these events are sent only if you agree in the app; on Android elsewhere you can turn them off at any time in Profile → Privacy → Ad measurement. On iPhone, the advertising identifier is still sent only if you allow tracking.
For this purpose, if your device's time zone or, where we have it, your account's country suggests you are in the UK, EU/EEA or Switzerland, we treat you as being there.
PostHog — Product analytics. Records how the app is used (for example, which screens are opened and which features are used), linked to your account ID, together with device information and an approximate location derived from your IP address. We use it to understand and improve Somni. It does not receive the text of your dreams.
posthog.com/privacy
Sentry — Crash and error reporting. When something goes wrong, Sentry receives technical details such as the error, device model, operating system and app version, so we can fix bugs.
sentry.io/privacy
Sign in with Apple and Google Sign-In — If you choose to sign in with Apple or Google, we receive your name (if shared) and email address (or Apple's private relay address) from that provider to create your account.
apple.com/legal/privacy · policies.google.com/privacy
Somni allows you to use the app without creating an account ("Guest Mode"). In Guest Mode:
All account data is stored in Supabase, which uses AES-256 encryption at rest and TLS 1.2+ in transit. Row-level security (RLS) policies ensure that each user can only access their own data — even at the database level, one user's dreams cannot be read by another user's session.
Passwords are never stored in plain text. Authentication is handled by Supabase Auth, which uses bcrypt hashing.
Dream content sent to Anthropic or OpenAI for AI processing is transmitted over HTTPS. Under their API terms, these providers do not use it to train their models. Under their published API data policies, they may keep it for up to 30 days for safety and abuse monitoring, and then delete it. They may keep it longer where required by law or where content is flagged as violating their usage policies (Anthropic: up to 2 years for flagged content). We do not have a zero-data-retention arrangement with either provider.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
For requests related to EU/EEA or UK data subject rights under GDPR or UK GDPR, or rights under US state privacy laws (including the right to opt out of "sharing" or targeted advertising, which you can exercise through the advertising opt-out above or by emailing us), please contact us at info@mysomni.app. We will respond within 21 days for PDPA requests and within one month for other requests, which may be extended where the law allows.
Somni is not directed at children. You must be at least 13 to use Somni, or the minimum age for digital consent in your country if higher (up to 16 in parts of the EU/EEA). Users under 18 need a parent's or guardian's permission, and a parent or guardian must make any purchase. We collect date of birth at signup specifically to enforce this age requirement, and we do not knowingly collect other personal information from children under these ages. If you believe a child has provided us with personal information, please contact us immediately at info@mysomni.app and we will delete the information promptly.
Somni may send you push notifications to remind you to capture your dreams in the morning, and to alert you if your streak is at risk of being broken. These notifications are entirely opt-in: your device asks for permission before any are sent. You can change your notification preferences at any time in the app's Settings or in your device's system notification settings.
Separately, with the "Tips & offers" setting (Profile → Notifications), we may occasionally send news about new features and offers, at most once a week. This setting is off by default if you are in the UK, the EU/EEA or Switzerland, and you can switch it off at any time.
Somni Pro is available as an auto-renewing weekly, monthly or yearly subscription, or as a one-time lifetime purchase where offered, through the Apple App Store and Google Play. Subscription purchases and renewals are processed by Apple or Google; we receive only confirmation of your entitlement status via RevenueCat. We do not process, store, or have access to your payment card information.
To cancel your subscription, manage it through your Apple ID or Google Play account settings. Cancellation takes effect at the end of the current billing period. We do not offer refunds beyond what the applicable app store's standard refund policy provides.
Somni is operated from Malaysia. If you are located outside Malaysia, your information may be transferred to, stored, and processed in Malaysia, the United States, and other countries where our third-party service providers (Supabase/AWS, Anthropic, OpenAI, RevenueCat, Expo, Resend, Meta, PostHog, Sentry) operate. We transfer data outside Malaysia only where permitted by the Personal Data Protection Act 2010. This means the destination has laws substantially similar to the PDPA, or the transfer is protected by contractual or other safeguards that give an adequate level of protection, or another ground in section 129 applies. For users in the UK, EU/EEA and Switzerland, we rely on the providers' Standard Contractual Clauses or adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified).
We process personal data in accordance with Malaysia's Personal Data Protection Act 2010 (as amended in 2024). Under it, you may: access your personal data and request corrections; withdraw consent and ask us to stop processing; and ask us to transmit your personal data to another data controller (data portability). We will respond to access and correction requests within 21 days. If a personal data breach occurs, we will notify the Personal Data Protection Commissioner within 72 hours, as the law requires. If the breach is likely to cause you significant harm, we will also notify you without unnecessary delay, and within 7 days of notifying the Commissioner. Our Data Protection Officer is Srinivas Krishnan, who can be reached at info@mysomni.app. This Privacy Policy is governed by the laws of Malaysia. You may also complain to the Personal Data Protection Commissioner, or, in the UK/EU, to your local data protection authority.
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you within the app. Where a change requires your consent under applicable law, we will ask for it. Otherwise, the updated policy applies from the date shown above.
We encourage you to review this policy periodically.
Somni is operated by Srinivas Krishnan, an individual in Malaysia (the "data controller"). If we transfer Somni to a company in the future, we will update this policy and notify you in the app before that happens.
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your data, please contact us: