Privacy & Data Policy — dhiyo

Version 1.0 · Last updated: 27 October 2026 · Effective: 27 October 2026

This policy explains how Tantransha LLP (“dhiyo,” “we,” “us”), a limited liability partnership registered in India, handles personal data in the dhiyo app. We are the data controller (the “Data Fiduciary” under India’s DPDP Act 2023). Contact for any privacy matter or to exercise your rights: dhiyo@dhiyo.net.

Summary

This summary is for convenience only. Please read the full policy below.

We collect the minimum we need: your email, a password, a username you pick, an 18+ confirmation, and what you write in the app.
Your dreams and journal entries are stored separately from your identity, linked only by a random ID. The AI never sees your name or email.
We do not sell your data and we run no ads.
We send your entries to our AI providers, currently OpenAI and Anthropic (see section 5), to generate readings, reply when you talk something through with dhiyo, and run safety checks; providers process your content under their own terms.
We may use anonymized, aggregated data (which cannot identify you) to improve dhiyo.
You can export or delete your data anytime in my account. The in-app export gives you everything you wrote. For a full copy including data we’ve derived, email dhiyo@dhiyo.net and we’ll verify your account first. On deletion we erase your content and account and keep only anonymized metadata.
If you are in the EU, UK, India, California, or many other regions, you have additional rights, described below.

1. Who we are

dhiyo is operated by Tantransha LLP, registered in India. For the EU/UK GDPR, India’s DPDP Act 2023, and comparable laws, we are the data controller / Data Fiduciary. Reach us for any data-protection matter, including grievance redressal, at dhiyo@dhiyo.net. A formal Data Protection Officer and an EU representative (GDPR Art. 27) will be appointed before dhiyo is made generally available to the public in the EU/UK; until then, contact us at the address above.

2. What we collect

Email address — for login, verification, recovery, and password reset.
Password — stored only as a secure hash, never in plain text.
Username — a name you pick; not your real name and not verified.
18+ confirmation — a yes/no; we do not collect your date of birth or exact age.
Region — optional; set in my account; used to show crisis resources for your country first.
First language — optional; used only as cultural context for the AI.
Your entries — dreams and journal entries you write, and the AI interpretations of them.
Derived signals — a distress indicator and extracted symbols/themes used to run safety and pattern features.
A memory of you — as you write, dhiyo keeps and updates a private set of notes about you: the images and people that recur, the threads you keep returning to, and what it believes sits underneath them. It exists so a reading builds on what came before instead of starting from scratch each time. It is not shown anywhere in the app, it is never used to make any decision about you, and no person at dhiyo reads it to judge you. Because dhiyo wrote it rather than you, it is not in the in-app export — but it is yours: email dhiyo@dhiyo.net and we will send you all of it, in full. You can ask us to correct it or wipe it at any time, and it is deleted outright if you delete your account.
A random content ID — links your identity to your content without storing them together.
Push token — only if you enable notifications, to deliver them.
Subscription status and allowance — whether you are on a free trial, the free tier, or dhiyo Plus, the relevant dates, and a count of AI responses used in the current calendar month (so we can apply the free-tier monthly allowance). This is kept on the account side of our database, never stored with your entries.
How you use the app — a small record of what you do, so we can tell what is working and what is confusing. Each item is a fixed label, a time, your random content ID, and at most one number: that the app was opened and for how many seconds, that you switched between the two sides, that you started writing and left without saving and how long you had been writing, and how far down a reading you scrolled. We also record the time-of-day offset of your device when you save an entry, so we can tell a morning entry from an evening one.

What this never includes: anything you wrote. Not a word of it. If you start an entry and abandon it, we record that it happened and how long you were there — never a single character of what you had typed. We consider the words you type and then delete to be more private than the ones you keep, not less.

We use this only in aggregate, to make the app better. It is never shown to you, never used to make any decision about you, and never turned into a score attached to you. It is deleted outright if you delete your account.

We do not collect your real name, date of birth, precise location, phone number, contacts, photos, files, government IDs, or device biometric templates (Face/fingerprint data stays on your device). We do not use third-party advertising or analytics SDKs — the usage record above stays on our own servers and is never sent to an analytics company — and we do not currently use a third-party crash-reporting service.

3. How and why we use your data

We use your data to: create and secure your account; provide the Service (store your entries, generate readings and hold reflective conversations, run pattern features); check entries for signs of serious distress so we can offer appropriate crisis resources; send notifications you schedule; recover your account; manage any subscription and apply the free-tier allowance; detect and prevent abuse; comply with law; and operate, analyse, and improve the Service.

Lawful bases (GDPR Art. 6 / DPDP Act). We rely on: performance of our contract with you (to provide the Service); your consent, including explicit consent for health-related content under GDPR Art. 9(2)(a) (to process your entries and run safety checks); our legitimate interests (to secure, analyse, and improve the Service and prevent abuse); and legal obligation where the law requires. Where the law requires consent, we obtain it at signup, and you can withdraw it by deleting your account.

Sensitive content. Dreams and journal entries may reveal health or other sensitive information and are treated as special-category / sensitive personal data. We process them on the basis of your explicit consent, and, where surfacing crisis resources may protect life, on the basis of vital interests.

4. AI and automated processing

Readings and conversations. Your entries are sent to an AI provider to generate readings, and to reply when you talk something through with dhiyo. We currently use OpenAI for readings and conversations and Anthropic (maker of Claude) for the automated checks described below; we may switch between them, and both are listed in section 5. We send a random content ID, never your name or email.
Speaking instead of typing. If you record an entry, the audio is sent to OpenAI to be turned into text, and is discarded once that is done. We never store your recordings — there is no audio storage in dhiyo, and the only copy lives on your own phone until the words come back, then it is deleted from there too. What is saved is the text.
Safety check. An automated check reviews entries for signs of serious distress so the app can offer appropriate resources. It never blocks you from writing, never labels or diagnoses you, and is not used to share information about you.
No significant automated decisions. These features offer reflections and resources; they do not make decisions that produce legal or similarly significant effects on you (GDPR Art. 22). You can disagree with any reading, only ask for a reading when you want one, or turn AI off entirely in my account (this also turns off the safety check).

Third-party providers process your content under their own terms and privacy policies, over which we have no control and for which we are not responsible. We cannot guarantee how any third-party AI provider uses data it processes. Separately, we may create and use anonymized and aggregated data — which cannot be used to identify you — for any purpose, including to analyse, improve, and develop dhiyo and new features.

We share data only with providers who process it on our behalf to run the Service, and never with advertisers or data brokers. We do not sell your data.

OpenAI, L.L.C. (US) — AI readings and conversations, and turning recorded entries into text; receives your entry text or audio + the random content ID.
Anthropic, PBC (US) — automated safety checks, and AI readings and conversations where that provider is in use; receives your entry text + the random content ID.
Supabase, Inc. (US) — database, authentication, serverless functions, and hosting.
Hostinger — sends account emails (verification and password-reset codes); receives your email address and email content.
Google LLC — Firebase Cloud Messaging (US) — delivers notifications if you enable them; receives a push token and generic (no-content) notification text.
RevenueCat, Inc. (US) — manages subscriptions and entitlements across the app stores; receives a random account ID (not your name or email) and purchase and entitlement information (which plan you are on), never your content, name, or email.
Apple / Google (app stores) — app distribution and, if you subscribe, billing; receive store-account and purchase info, not your content.

We may also disclose data where required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets.

6. International transfers

Some providers process data in the United States, which is not recognised as providing “adequate” protection under the GDPR. Where we transfer data outside the EEA/UK/Switzerland, we rely on Standard Contractual Clauses and additional safeguards where required. You can request details at dhiyo@dhiyo.net.

7. How long we keep your data

Active account data — for as long as your account is active.
Deleted account — deletion is scheduled with a 30-day grace period (recoverable by signing in). At 30 days we erase your entry text, interpretations, account and identity details, and the identity-to-content link. A minimal, de-identified deletion record is kept up to 120 days for audit, then purged.
Anonymized metadata (aggregate symbol and distress counts, with no link back to you) — kept indefinitely; once anonymized it is no longer personal data.
Suspended or terminated accounts — if we suspend or terminate an account for violating our Terms or the law, we may retain limited identifiers (such as the email address used) for as long as reasonably needed to enforce our Terms and prevent the same person from re-registering.
Legal holds, claims, and compliance — we may retain information longer where reasonably necessary to comply with law, respond to a lawful request or preservation order, or establish, exercise, or defend legal claims. Kept until no longer needed for that purpose.

8. Your rights

Everyone, in the app: export your data (my account → “export my data” produces a machine-readable file); correct your username, region, language, email, or password; delete an individual entry or your whole account; turn AI off entirely (this also turns off the safety check).

What the in-app export contains. It gives you the data you provided: your account details (username, region, language), the consents you gave, your dreams, your journal entries (including your answers to seed questions), the feelings you added, and your own messages in every conversation, as a structured, machine-readable file.

Getting everything else. For a full copy of everything we hold about you, including data we have derived, email dhiyo@dhiyo.net. We first confirm you control the account (we send a one-time code to your registered email), then respond within the time your law allows. We do not disclose the models, prompts, or system logic behind dhiyo, which are protected as trade secrets and intellectual property; this does not limit the personal data we give you.

EU / EEA / UK / Switzerland (GDPR / UK GDPR / FADP): access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, withdrawal of consent, and the right not to be subject to solely automated decisions with legal or similar effect. You can complain to your national supervisory authority (EU: edpb.europa.eu; UK: ico.org.uk; Switzerland: edoeb.admin.ch).

India (DPDP Act 2023): access a summary of your data and our processing; correction, completion, updating, and erasure; nominate another person to exercise your rights on death or incapacity; withdraw consent; and grievance redressal at dhiyo@dhiyo.net. If unsatisfied, you may approach the Data Protection Board of India.

California (CCPA/CPRA): know, delete, and correct your personal information; opt out of “sale”/“sharing” (we do neither); limit use of sensitive personal information; and non-discrimination for exercising these rights.

Other US states, Australia, New Zealand, Canada (incl. Quebec), Singapore, South Africa, Hong Kong, and Brazil: you have substantially similar rights under your local law (access, correction, deletion, and where applicable portability and objection) and may complain to your local regulator.

To exercise any right, use the in-app controls or email dhiyo@dhiyo.net. We respond within the timeframes required by applicable law (generally within 30 days) and do not charge unless a request is manifestly unfounded or excessive. We may need to verify control of your account (for example, access to your account email) before acting.

9. How we keep your data secure

Separation by design. Your identity, the mapping to your content, and your content live in separate database schemas with separate access roles; the AI layer and content tables never see your name or email — only a random ID.
Encryption in transit and at rest.
No content in logs. Diagnostics and error logs never include your entry text.
Access controls. Row-level security limits each account to its own data; administrative access is limited to genuine need.
Breach notification. If a breach is likely to risk your rights, we notify the relevant authority within 72 hours and notify you without undue delay where the risk is high, and follow the equivalent DPDP Act process.

No system is perfectly secure, and we cannot guarantee absolute security. As dhiyo grows we intend to add further safeguards; we describe here only what is in place today.

10. Children

dhiyo is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you believe someone under 18 has an account, contact dhiyo@dhiyo.net and we will delete it.

11. Changes to this policy

We may update this policy. We will update the “Last updated” date and, for material changes that expand processing or reduce your protections, provide notice in the app before they take effect.

12. Contact

For any privacy question, to exercise your rights, to report a security issue, or for grievance redressal: dhiyo@dhiyo.net. You may also complain to your local data-protection authority (in India, the Data Protection Board of India).