Privacy Policy

Last updated 26 July 2026

Drift is a dream journal. Dreams are deeply personal, so we treat your information with real care. This page explains what we collect, why, how we protect it, and the rights you have over it.

This policy covers both the Drift website (driftdreamapp.com) and the Drift app. If you only join the waitlist, only the “Waitlist” parts below apply to you.

Who we are

Drift (“we”, “us”) is the data controller for the information described here. You can reach us at hello@driftdreamapp.com with any privacy question or request.

What we collect

Waitlist: your email address, when you ask to be notified about launch.
Your account: your email address and a securely hashed password.
Your dreams: the dream entries you write or dictate, any tags you add, and the AI reflections and follow-up conversations tied to them.
Bedtime log (if you use it): the simple check-ins you record, such as mood, caffeine, or sleep notes.
Basic technical data: limited information needed to run the service securely (for example, timestamps and error logs).

Your dream content can reveal sensitive things about you. We never require it, we never sell it, and we ask you not to include information about other identifiable people where you can avoid it.

Why we use it, and our lawful basis

To notify you about launch — waitlist emails, on the basis of your consent (which you can withdraw at any time by unsubscribing).
To provide the app — storing your dreams, generating reflections, and running your account, to perform our contract with you.
To keep the service safe and working — security, debugging, and preventing abuse, as a legitimate interest.

How your data is protected

Data is encrypted in transit (secure https connections) and encrypted at rest on our database provider’s servers.
Strict access rules mean each person’s dreams are private to their own account — one user can never read another’s.
Passwords are hashed; we never store or see them in readable form.
We keep the number of people and systems that can access data to a minimum.

Being honest: your dreams are encrypted in transit and at rest and are private to your account, but they are not end-to-end encrypted — our systems process the text so the AI can reflect on it. We never use it to build a profile of you or sell it.

The AI reflections

When you ask Drift to reflect on a dream, the dream text (and your recent dreams, for context) is sent to our AI provider, Anthropic, to generate a response. Anthropic does not use this content to train its models. Reflections are for personal insight and are not medical, psychological, or professional advice.

Who we share it with

We don’t sell your data. We use a small number of trusted providers who process data on our behalf, under agreements that require them to protect it:

Supabase — secure database and account hosting.
Anthropic — AI dream reflections.
Netlify — hosting this website.
Apple & Google — app distribution (and, in future, subscriptions via RevenueCat).

Some of these providers may process data outside the UK (for example, in the United States). Where they do, appropriate safeguards are in place to protect it.

How long we keep it

We keep your dreams and account information for as long as your account is active. Delete a dream and it’s removed; delete your account and we remove your personal data (except anything we must keep briefly for legal or security reasons). Waitlist emails are kept until you unsubscribe or we launch and no longer need the list.

Your rights

Under UK data protection law you can:

Access the personal data we hold about you;
Correct anything inaccurate;
Delete your data (“right to be forgotten”);
Ask for a copy of your data to take elsewhere;
Withdraw consent (for example, unsubscribe from emails); and
Complain to the UK regulator, the Information Commissioner’s Office (ICO).

To exercise any of these, email hello@driftdreamapp.com. In the app you can delete individual dreams yourself, and you can request full account deletion at any time.

Children

Drift isn’t intended for anyone under 16. We don’t knowingly collect data from children.

Cookies

This website doesn’t use tracking or advertising cookies. The app stores a secure login token on your device so you stay signed in.

Changes to this policy

If we make meaningful changes, we’ll update this page and the “last updated” date above.