Privacy Policy

1. Who we are

This Privacy Policy applies to the mobile applications VitaminHelper, Sleep Therapy: AI Assistant, and Dream Oracle, and this website, all developed and operated by Yaroslav Pisotskyi ("we", "us", "I"), an individual developer based in Kyiv, Ukraine.

Contact: sleeptherapy.app@gmail.com

For GDPR and UK GDPR inquiries, you may contact us directly at the email above. We do not appoint a separate EU representative as we are not required to do so under current thresholds.

2. Scope

This single policy covers all three apps. Data collection varies by app — see the table below:

3. What data we collect

3.1 Common to all apps

• Account data: name, email, profile photo (if provided by Google or Apple Sign-In), user ID.
• Device & technical data: device model, OS version, app version, crash reports, analytics events, push notification tokens.
• Subscription data: subscription status, product identifiers, purchase history (processed by RevenueCat / Google Play Billing / App Store).
• App settings: language preference, notification settings.

VitaminHelper App-specific data

• Onboarding quiz answers: age, sex, weight, health goals, symptoms.
• Uploaded lab test files and photos (blood work, medical reports).
• Symptoms and health-related text you enter in chat.
• AI chat history and saved supplement recommendations.
• Saved vitamin courses, reminder schedules, intake logs.
• Weekly wellness check-in responses.

Sleep Therapy App-specific data

• Dream descriptions (typed or voice-transcribed), AI interpretations, AI assistant chat history.
• AI-generated dream images you choose to save.
• Mood selections, dates, optional notes; AI mood analysis.
• Sleep helper preferences (sounds, animations, reminders).
• Microphone: used only for speech-to-text when dictating a dream. Raw audio is not stored.

Dream Oracle App-specific data

• Dream descriptions and AI interpretation results.
• Interpretation history stored locally and/or in the cloud.

You can use some features without signing in. AI features and cloud sync require an account.

4. How we use your data

• Provide the service (contract / legitimate interest): authenticate you, sync data, deliver app features.
• AI features (consent where required): generate dream interpretations, mood analysis, vitamin recommendations, chat responses.
• Subscriptions (contract): manage access, restore purchases, prevent fraud.
• Advertising (consent / legitimate interest): show ads to non-subscribers via Google AdMob where applicable.
• Analytics & stability (legitimate interest): improve performance, fix crashes, understand usage patterns.
• Support (legitimate interest): respond to your requests and deletion inquiries.
• Legal compliance (legal obligation): comply with applicable laws and store requirements.

5. AI processing

Several features in our apps use artificial intelligence provided by third-party AI services (primarily OpenAI). VitaminHelper may additionally use other AI providers in the future.

5.1 AI features by app

• VitaminHelper: supplement recommendations, lab result analysis, chat assistant, personalized onboarding.
• Sleep Therapy: dream interpretation, mood analysis, AI assistant chat, dream image generation.
• Dream Oracle: dream interpretation and analysis.

5.2 How AI data is handled

• Your prompts and relevant context (e.g. dream text, mood data, lab results) are sent to AI providers to generate responses.
• We use API services configured so that your data is not used to train AI models by default (OpenAI API data usage policy).
• AI inputs and outputs are stored in our Supabase database to provide history and sync across devices.
• For VitaminHelper, processing health and lab data via AI requires your explicit consent on first use of AI features. You may withdraw consent in Settings.

6. Storage & security

On your device

• Apps cache profile, content, and settings locally (AsyncStorage or equivalent).
• Local data remains until you delete the app, clear app data, delete your account, or sign out.

In the cloud

• Account data, app content, and settings are stored in Supabase (PostgreSQL + Storage).
• AI-generated images (Sleep Therapy) are stored in Supabase Storage (dream-images bucket).
• Authentication is handled by Supabase Auth.

Data is transmitted over encrypted connections (HTTPS/TLS). Android app backups are disabled where configured (allowBackup="false").

7. Third parties

We share data with service providers only as needed to operate the apps:

• Supabase — auth, database, file storage. Privacy Policy
• OpenAI — AI text and image generation. Privacy Policy
• Google — AdMob, Firebase Analytics, Crashlytics, Cloud Messaging, Sign-In, speech recognition. Privacy Policy
• Apple — Sign in with Apple (iOS). Privacy Policy
• RevenueCat / Qonversion — subscription management.
• Branch.io — deep links and attribution (where enabled).
• Amazon Associates / iHerb (VitaminHelper only): outbound affiliate links only — we do not share your personal data with these retailers.

We do not sell your personal information. We do not share data for cross-context behavioral advertising beyond what AdMob may collect with your consent on iOS (ATT).

8. Data retention

• Account and app content: stored while your account is active. Deleted within 30 days after a verified deletion request.
• Local cache: until app deletion, storage clear, or sign out.
• Analytics: per provider policies (typically up to 14 months for Google Analytics).
• Subscription records: retained as required by tax and accounting laws.
• Support emails: up to 12 months after resolution.

9. Your rights

9.1 GDPR / UK GDPR (EEA & UK users)

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with your local supervisory authority

9.2 CCPA / CPRA (California residents)

You have the right to:

• Know what personal information we collect and how it is used
• Delete your personal information
• Correct inaccurate personal information
• Limit use of sensitive personal information (health/lab data in VitaminHelper qualifies as sensitive PI under CPRA)
• Opt out of sale or sharing — we do not sell personal information
• Non-discrimination for exercising your rights

Do Not Sell or Share My Personal Information: We do not sell your data. To submit a privacy request, email sleeptherapy.app@gmail.com with subject "Privacy Request".

10. How to delete your account

In the app:

1. Open the app and sign in.
2. Go to Settings.
3. Tap Delete account and confirm.

We process deletion within 30 days, removing account data, app content, and cloud records.

By email:

Send an email to sleeptherapy.app@gmail.com with subject "Delete my data" from the email linked to your account.

Individual entries: You can delete single dreams (Sleep Therapy / Dream Oracle) or chat threads from within the app without deleting your full account.

11. Children

Our apps are intended for users aged 18 and older. We do not knowingly collect data from anyone under 18. VitaminHelper processes health-adjacent data and is strictly for adults. If you believe a minor has provided data, contact us and we will delete it promptly.

12. Health disclaimer (VitaminHelper)

13. Apple App Store compliance

• App Tracking Transparency (ATT): On iOS, we request your permission before tracking for advertising purposes (AdMob). You can change this in iOS Settings → Privacy → Tracking.
• App Privacy Details: Our App Store privacy labels accurately reflect data collected as described in this policy.
• Required Reason APIs: We use Apple APIs only for declared purposes (e.g. file timestamps for cache management, UserDefaults for app settings) as required by Apple's 2024+ privacy requirements.
• Account deletion: In-app account deletion is available in Settings as required by App Store Review Guidelines.

14. Google Play compliance

• Our Google Play Data Safety form declarations match the data practices described in this policy.
• Health apps policy: VitaminHelper is categorized as a wellness app. We disclose health-related data collection and provide appropriate disclaimers.
• Account deletion: In-app deletion and web-based deletion via email are both available.
• Permissions: We request only permissions necessary for app functionality (camera/photos for lab uploads, notifications for reminders, microphone for voice input in Sleep Therapy).

15. EU Digital Services Act (DSA) / DMA

For users in the European Union, you may report illegal content or raise concerns about our services by contacting: sleeptherapy.app@gmail.com (subject: "DSA Report"). We will acknowledge reports within 7 days and respond substantively within applicable timeframes.

16. International transfers

Your data may be processed in countries outside your residence (including the United States, where Supabase and OpenAI servers may be located). Where required, we rely on Standard Contractual Clauses (SCCs) and equivalent safeguards provided by our service providers.

17. Changes to this policy

We may update this Privacy Policy. Material changes will be communicated via the app or email where appropriate. The "Last updated" date at the top reflects the current version. Continued use after changes constitutes acceptance.

18. Contact

For privacy questions, data requests, or complaints:

Yaroslav Pisotskyi
Kyiv, Ukraine
Email: sleeptherapy.app@gmail.com

We aim to respond to all privacy requests within 30 days.