Onyric
01 Who Is Responsible
Onyric is the provider responsible for the App and for the processing of personal data described in this Policy.
For any matter relating to your personal data or the exercise of your rights under the LGPD, contact us through our support page: onyric.art.br/support.
02 Data We Process & How It Is Collected
Onyric is designed to keep your content on your device. The App does not require an account or login. We process only the data necessary to deliver the features you use:
- Dream audio: when you record a dream, the audio is captured and sent to our AI provider (OpenAI) solely for transcription into text.
- Dream text (the transcription and any text you type): stored locally on your device and sent to OpenAI to generate the image for that dream.
- Generated images & dream entries: stored locally on your device only.
- Advertising identifiers (e.g., IDFA): processed only for free-tier users, by Google AdMob, and only with your consent (see Sections 04 and 10).
- Usage data & local preferences: stored on your device (UserDefaults) to enforce usage limits and remember app state.
- App Attest: Apple's device-attestation signal, used for security and anti-fraud protection of calls to our backend.
03 Purposes & Legal Bases
We process each category of data for a specific purpose and on a specific legal basis under Article 7 of the LGPD:
Before any dream content is sent to the AI provider, the App requests your explicit consent.
04 Consent & How to Withdraw It
AI processing
The App asks for your explicit consent before sending any dream audio or text to the AI provider (OpenAI). If you do not consent, that content is not submitted and the generation feature cannot run.
Advertising
For free-tier users, advertising identifiers are used only after you grant permission through Apple's App Tracking Transparency (ATT) prompt and the Google UMP consent flow. If you decline, personalized advertising identifiers are not used for that purpose.
Withdrawing consent
You may withdraw consent at any time: change tracking permission in your device's iOS Settings > Privacy & Security > Tracking, stop submitting dream content to the AI feature, or contact us through our support page. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and may limit features that depend on that data.
06 Retention & Deletion
Your dream entries and generated images are stored locally on your device, under your control. We do not keep our own copy of your dream library.
- Dream audio and text are transmitted to the AI provider only to fulfil your request; their retention by that provider is governed by the provider's own terms.
- You can delete your content at any time by removing individual entries in the App or by uninstalling the App, which removes the locally stored data from your device.
07 Your Rights as a Data Subject
Under Article 18 of the LGPD, you have the right to obtain, at any time:
- Confirmation that processing exists;
- Access to your data;
- Correction of incomplete, inaccurate, or outdated data;
- Anonymization, blocking, or deletion of unnecessary or excessive data, or data processed in non-compliance with the law;
- Portability of your data to another provider, upon request;
- Information about the public and private entities with which we have shared your data;
- Information about the possibility of refusing consent and the consequences of refusal;
- Withdrawal of consent and deletion of data processed on the basis of consent.
To exercise any of these rights, contact us through our support page at onyric.art.br/support. Because much of your data lives only on your device, some rights (such as deletion) can also be exercised directly within the App or by uninstalling it.
08 Information Security
We apply technical and organizational measures appropriate to the nature of the data:
- Local-first storage: dream entries and images remain on your device.
- Secure connection: communication with our backend and providers uses encrypted (HTTPS/TLS) connections.
- App Attest: backend requests are validated using Apple's device attestation to prevent abuse and fraud.
- Secure proxy: calls to AI providers pass through our backend proxy, so provider credentials are not exposed in the App.
No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your data against unauthorized access, loss, or misuse.
09 Children & Adolescents
Onyric is intended for users aged 13 or older. Where a user is a child or adolescent, processing is carried out in their best interest in accordance with the LGPD, and use should occur with the consent and supervision of a parent or legal guardian. If you believe a minor has provided data without appropriate consent, contact us through our support page so we can address it.
10 Identifiers, Cookies & Advertising
The App does not use website cookies. For free-tier users only, advertising is served by Google AdMob, which may use device advertising identifiers (such as the IDFA) to display ads. These identifiers are used only with your consent, obtained through Apple's ATT prompt and Google's UMP consent flow. Subscribing to Onyric Pro removes ads, and no advertising identifiers are processed for ad purposes for Pro users.
11 Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate, provide notice within the App. We encourage you to review this Policy periodically.
12 Contact & Supervisory Authority
For questions, requests, or complaints about the processing of your personal data, contact us through our support page:
- Support: onyric.art.br/support
You also have the right to lodge a complaint with the Brazilian National Data Protection Authority (ANPD), the competent supervisory authority, if you believe your data has been processed in violation of the LGPD.
13 Applicable Law & Jurisdiction
This Privacy Policy is governed by the laws of the Federative Republic of Brazil, in particular the LGPD (Lei nº 13.709/2018). Any dispute relating to it shall be subject to the competent courts in Brazil.
↑ Back to top