Nyxwyn Privacy Policy

Last updated: 6 October 2026

Nyxwyn is a private dream journal. Your dreams are personal, so this policy tries to say plainly what happens to everything you write, who else touches it, and how to take it back.

The short version

1. Who we are

Nyxwyn is made and run by J. Patrick Hanley, EI (entrepreneur individuel), a sole trader based in France, at La Grande Blottière, 53200 Fromentières, France (registration in progress; the SIRET number will appear here once issued). In data-protection law this makes us the controller of your personal data: we decide why and how it is used.

Contact for anything in this policy: [email protected]. General support: [email protected]. Website: nyxwyn.com.

2. What we collect, and why

What Where it comes from Why we need it
Email address and password (the password is stored only in scrambled, hashed form) You, when you create an account To create your account, let you sign in, and send account emails such as confirmation and password reset
Dream entries (text you type or dictate, the date, drafts, sealed status) You This is the journal itself
Analytical Journal entries, and which dream or report each one is linked to You Your own reflections, kept alongside your journal
Themes identified in your dreams, categories, and reports Created by the app from your dreams, only if theme identification is on To show you the themes, trends, reports and wind rose
Push token (a random device address for notifications), if you allow notifications Your phone To tell you when a report is ready
Settings (colour theme, light or dark mode, reminder time, season and hemisphere setting, your time zone, whether theme identification is on) You, and your phone's time zone To make the app work the way you set it, and to date your reports correctly
Subscription status (trial, active, expired; which plan; renewal date) Apple or Google, through RevenueCat To know whether premium features should be unlocked
Technical records (IP address, device and app version, sign-in times, error logs) Created automatically when the app talks to our servers To keep the service secure, stop abuse and fix problems
Messages you send us You, when you email us To answer you

What we do not collect: your contacts, your location, your photos, advertising identifiers, or your card details. Payments are handled entirely by Apple or Google; we never see your card.

Dictation. When you dictate a dream, your phone's own speech recognition turns your voice into text. Depending on your phone and its settings, this happens on the phone itself or on Apple's or Google's servers, under their own privacy terms. We never receive or store any audio, only the text that appears in your entry.

Notifications. Daily reminders are scheduled on your phone itself and never pass through our servers. Other notifications, such as "your weekly report is ready", are sent from our server. For those, if you allow notifications, your phone gives us a push token (a random address for your device), which we store with your account and pass to Apple (on iPhone) or Google (on Android) to deliver the message. Notifications never contain your dreams, themes or report content, only a short general message such as "Your weekly report is ready". You can turn them off in Settings or in your phone's settings, and the token is deleted with your account.

Your dreams may contain sensitive information

Dreams often touch on health, relationships, sexuality, religion, beliefs, family, past experiences and other deeply personal matters. The law treats some information of this kind as a "special category" that needs extra care. We have designed Nyxwyn to go beyond what the law requires, because we respect the people who use it and value the trust they place in us when they write here.

So we treat everything you write as sensitive, whether or not the law would: we ask for your explicit agreement before storing it, we only use it to run the journal for you, we keep AI out of it unless you invite it in, and nobody at Nyxwyn reads it except where you ask us to (for example, to fix a problem you report) or the law requires it.

3. Theme identification (premium, off unless you turn it on)

Nyxwyn can identify the themes in your dreams and show how they recur over time. It does this with Claude, an AI service run by Anthropic PBC (United States).

Data-protection law asks us to name the legal reason for each use:

We do not make decisions about you by automated means that have legal or similarly significant effects. Theme identification only labels what is in your own writing.

5. Who else handles your data

We use a small number of service providers ("processors") who handle data only on our instructions and under written data-processing agreements:

Provider What they do for us Data they handle Where
Supabase Hosts our database, sign-in and server functions Everything in section 2 EU (Frankfurt, Germany); Supabase Inc. is a US company
Anthropic Identifies themes, only if you switch it on One dream plus your theme list at a time; theme labels and short quotes for reports; no identifiers United States
Resend Sends account emails (confirmation, password reset, security notices), and the waitlist confirmation and launch emails Your email address and the email content EU (Ireland); Resend is a US company
RevenueCat Keeps track of your subscription across Apple and Google An anonymous app account number, purchase and renewal records United States
Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging) Deliver push notifications to your phone Push token and the notification text (never journal content) United States
Cloudflare Runs the nyxwyn.com website and stores the launch waitlist Website visit logs; waitlist email addresses Global network
Infomaniak Our mailbox for support@ and privacy@ Emails you send us Switzerland

Apple and Google sell the subscription to you through the App Store and Google Play. They do this as independent companies under their own privacy policies, not on our behalf. They tell us (through RevenueCat) whether your subscription is active; they do not tell us your card details.

We may also disclose data if the law requires it, for example in response to a valid court order, and we would tell you unless the law forbids that.

We do not sell or rent your data, and we do not share it with advertisers or data brokers.

6. Data sent outside the EU

Infomaniak keeps our mailbox in Switzerland, which the European Commission recognises as giving adequate protection. Some providers above are based in the United States (Anthropic, RevenueCat, and Apple and Google for notifications, process data there; Supabase, Resend and Cloudflare are US companies even where our data is stored in Europe). Where personal data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, which are part of each provider's data-processing agreement. Resend, Cloudflare, Apple and Google are also certified under the EU–US Data Privacy Framework. You can ask us for a copy of the relevant safeguards at [email protected].

7. How long we keep it

Deleting your account does not cancel your subscription with Apple or Google. Please cancel it in your App Store or Google Play settings, or you may still be charged.

8. Your rights

You have the right to:

To get a copy of your data, email [email protected] from your account's email address (an export button in the app is on its way). We answer within one month. We may ask you to confirm it is really you before we act.

You also have the right to complain to a data-protection authority. In France this is the CNIL (cnil.fr, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07). If you live elsewhere in the EU, you can complain to your own country's authority. We would be glad to try to sort things out with you first.

9. Security

Your data travels encrypted (HTTPS) and is encrypted when stored. Every table in our database is locked so that each account can only ever read its own rows. Sign-in uses hashed passwords, and we send you an email when your password, email address or sign-in method changes. You can also turn on an app lock (Face ID, fingerprint or your phone's PIN) and two-step sign-in with an authenticator app in Settings. Server keys are kept out of the app and out of our code. No system is perfectly secure; if a breach ever put your data at risk, we would tell you and the CNIL as the law requires.

10. Adults only

Nyxwyn is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe someone under 18 has an account, please tell us at [email protected] and we will delete it.

11. The website and the launch waitlist

nyxwyn.com is an information site. It does not use advertising or tracking cookies. Cloudflare, which runs it, keeps short technical logs (such as IP addresses) to deliver the pages and protect the site from attacks. If we ever add website analytics, we will use a cookie-free tool or ask for your consent first.

Launch waitlist. If you join the waitlist, we keep your email address, the date you joined and the date you confirmed it. We send you one email to confirm the address; if you do not confirm within 7 days, we delete it. Once confirmed, we use it only to tell you when Nyxwyn launches and to send occasional news before then: never for anything else, and never shared or sold. Every email has a one-click unsubscribe link, which deletes your address straight away. We delete the whole waitlist within 30 days after the launch email. The address is stored by Cloudflare and the emails are sent by Resend (see section 5). Joining the waitlist does not create a Nyxwyn account. Legal basis: your consent, which you can withdraw at any time.

12. Changes to this policy

If we change this policy, we will update the date at the top. If the change is significant, for example a new provider handling your dreams or a new use of your data, we will tell you in the app before it takes effect, and we will ask for your consent again where the law requires it.

A French version of this policy is available. If the two differ, the French version prevails for users living in France.

13. Contact

Privacy questions or requests: [email protected] Everything else: [email protected] J. Patrick Hanley, EI (entrepreneur individuel), La Grande Blottière, 53200 Fromentières, France