Privacy Policy

Publication date: 04.07.2026

1. General provisions

This Policy defines how personal data of DreamsFlow users (the "Service") is processed and protected. The Service is available on the operator's website.

Personal data operator:

• Full name: Budkina Anna Andreevna
• Status: self-employed (professional income tax payer)
• TIN: 332891657496
• Email: vseprost23@yandex.ru

2. What data is processed

• name, email, and password hash upon registration;
• profile data: gender, practice settings, uploaded images, and voice recordings;
• wishes, journal entries, generated meditation and affirmation texts;
• payment and subscription data (amount, payment status; bank card details are processed by the payment provider YooKassa);
• technical data: IP address, session cookie, browser and device data.

3. Purposes of processing

• registration and authorization in the Service;
• providing AI coach, journal, meditation, and affirmation features;
• processing payments and managing subscriptions;
• technical support and responding to inquiries;
• security and improving the Service.

4. Legal grounds

Processing is based on the user's consent (Articles 6 and 9 of Federal Law No. 152-FZ "On Personal Data"), as well as for performing the agreement (Terms of Service) and fulfilling the operator's obligations.

5. Transfers to third parties

Data may be shared with:

• the payment aggregator YooKassa — to accept payments;
• AI and text-to-speech providers — to the extent needed to generate content (wish texts and settings, without the password);
• the hosting provider — to host the Service.

Cross-border transfer may occur when foreign AI providers are used. By registering, you agree to such transfer for the stated purposes.

6. Retention period

Data is stored until the user deletes the account or withdraws consent, unless otherwise required by the laws of the Russian Federation (including payment accounting).

7. User rights

You can delete your account and related data in your personal area: Settings → "Delete account". You may also request access, correction, deletion, or withdrawal of consent by emailing vseprost23@yandex.ru. The operator will respond within 30 days.

8. Data protection

Organizational and technical measures are applied: password hashing, HTTPS, and restricted server access.

9. Cookies

Details are in the Cookie Policy.

10. Changes

The current version is always available on this page. Continued use of the Service after changes are published means you accept the updated Policy.