Remspeak Privacy Policy

Effective date: September 27, 2026
Last updated: September 27, 2026

This Privacy Policy explains how Quality Tools Innovations LLC ("Remspeak," "we," "us," or "our") collects, uses, shares, and protects personal information when you use the Remspeak mobile app, the Remspeak web app at app.remspeak.com, and our website at remspeak.com (together, the "Service").

Remspeak is a sleep and dream journaling app. Because the information you record about your sleep and your dreams is personal and can be sensitive, we have tried to explain our practices plainly. If anything is unclear, contact us at privacy@remspeak.com.

If you are a Washington, Nevada, or Connecticut resident, or anyone whose information we treat as consumer health data, please also read our Consumer Health Data Privacy Policy, which explains our health data practices in the format those laws require.

1. Summary

• We do not sell your personal information. We do not "share" it for cross-context behavioral advertising, and we do not use it for advertising of any kind.
• We do not use your dreams, sleep data, or any other content you create to train artificial intelligence models, and our AI provider does not use it to train theirs.
• AI features are optional and require your permission. Before any of your content is sent to our third-party AI provider for the first time, we ask for your explicit consent. Dreams you mark Private are never sent to any AI system.
• You can access, export, correct, and delete your data, on any plan and even after your subscription ends, as described in Section 9.
• Remspeak is only for adults 18 and older.

2. Who is responsible for your information

The Service is operated by Quality Tools Innovations LLC, a limited liability company organized in Florida, with a mailing address at 7901 4th St N #25949, St. Petersburg, FL 33702, USA. For purposes of the EU and UK General Data Protection Regulation ("GDPR"), we are the "controller" of your personal data.

3. Information we collect

3.1 Information you give us

Much of the dream, sleep, and habit information above is sensitive personal information under some U.S. state laws and may be health data (a "special category" of data) under the GDPR and consumer health data under laws such as Washington's My Health My Data Act. We collect and use it only to provide the Service to you, with your consent where the law requires it, and we never sell it.

3.2 Information we create from your information

• Your Sleep Profile and suggestions. We calculate averages, consistency, sleep debt, an estimated chronotype ("early bird" or "night owl"), and recommended bedtimes from the sleep information you log. We match this against rules based on published sleep research to produce suggestions. We save a snapshot of each weekly Sleep Profile Report.
• Dream statistics and connections. We calculate recall rates and recurring themes, and we find dreams that resemble each other (see Section 5.2).
• AI dream insights. If you request one and have given AI consent, we store the insight generated for that dream so you can view it again.

These calculations only produce information for you. We do not use them to make decisions that have legal or similarly significant effects on you.

3.3 Information collected automatically

• Technical and log information. When you use the Service, our hosting and infrastructure providers automatically process technical data needed to deliver it, such as IP address, device and browser type, operating system, app version, and timestamps of requests. This information is used for security, fraud and abuse prevention, troubleshooting, and keeping the Service running.
• Information stored on your device. The app stores your sign-in session securely on your device (in the iOS Keychain, the Android Keystore, or your browser's local storage on the web), along with preferences such as language and appearance.
• No advertising trackers. We do not use advertising SDKs, cross-app tracking, or third-party advertising cookies. The Remspeak website and web app do not use cookies for advertising or analytics. If we add privacy-respecting analytics or crash reporting in the future, we will update this policy first.
• Do Not Track. Because we don't track you across other websites or use advertising trackers, we treat all visitors the same whether or not their browser sends a "Do Not Track" signal.

3.4 Information from third parties

• Sign-in providers. If you choose Sign in with Apple or Google, we receive the information you let them share: your name, email address (Apple may give us a private relay address), a unique account ID from that provider, and, for Google, a link to your profile photo, which we don't use.
• Age signals. Where the law requires it, Apple or Google may tell us your age range (for example, whether you are 18 or older). We use this only to confirm you're old enough to use Remspeak and to comply with the law.
• App stores and payment providers. When you subscribe, Apple, Google, or Stripe (for web purchases) tells us (through our subscription management provider) your subscription plan, status, renewal and expiration dates, and the store used. We never receive your full payment card details.
• Apple Health (future feature). If we add Apple Health integration and you choose to connect it, we will read only the sleep data you authorize. Data from Apple Health will never be used for advertising or marketing or shared with data brokers, and will not be used for any purpose other than providing the Service to you, as Apple requires. We will update this policy and ask for your permission before this feature is available.
• Voice entry (future feature). If we add voice-to-text journaling, we will update this policy and explain in the app how audio is processed before you can use it.

4. How we use information

We use personal information to:

1. Provide the Service: create your account, store your journal, drawings, and sleep records, and show them back to you.
2. Personalize the Service: build your Sleep Profile and schedule recommendations, select suggestions, calculate dream statistics, and find Dream Connections.
3. Provide optional AI features you request, as described in Section 5.
4. Process subscriptions: confirm your plan and trial status and give you access to the features included in your plan.
5. Communicate with you: send service messages (such as account verification, subscription confirmations and reminders, and security or policy notices), respond to support requests, and, if you joined our waitlist, tell you when Remspeak launches. We will only send marketing emails with your consent where required, and every marketing email will include an unsubscribe link.
6. Keep the Service safe and working: prevent fraud and abuse, enforce usage limits, debug, and secure our systems.
7. Comply with law: meet legal obligations, respond to lawful requests, and establish or defend legal claims.

We do not use your dream, sleep, or habit information for advertising, and we do not use it to train AI models.

Legal bases (EEA and UK users)

If the GDPR applies to you, we rely on:

• Performance of a contract to provide the Service you signed up for (items 1, 2, and 4 above).
• Explicit consent (GDPR Article 9(2)(a)) to process dream, sleep, and habit information that may reveal information about your health, and to send your content to our third-party AI provider. You can withdraw consent at any time (see Section 9); withdrawing does not affect processing that happened before.
• Legitimate interests in keeping the Service secure and improving it, balanced against your rights (item 6).
• Legal obligation where the law requires us to process or keep information (item 7).

Do you have to give us this information? We need your email address, your date of birth, and the information for the features you use, because we can't provide the Service without it. Everything else, such as tags, moods, drawings, and AI insights, is optional.

5. Artificial intelligence features

Remspeak offers two kinds of AI features. Neither is required to use the Service.

5.1 AI dream insights (third-party AI)

When you tap Reveal insight on a dream, we send the following to our AI provider, Anthropic, PBC, to generate a reflection on that dream:

• the dream's title, description, moods, tags, vividness, lucidity, type, and date;
• the titles, dates, tags, moods, and types of up to 30 of your recent non-private dreams, so the insight can mention recurring themes; and
• your goals and language.

We do not send your name, email address, date of birth, sleep records, habit check-ins, or drawings. Dreams marked Private are never sent. If you mark a dream Private after getting an insight for it, we won't send it again and we delete its saved insight. What was sent before is handled as described below.

Consent. The first time you request an insight, and whenever you turn AI insights on in Profile → Privacy, the app explains what will be shared and with whom and asks for your explicit permission. We will not send anything to Anthropic unless you agree. You can withdraw this permission at any time in Profile → Privacy, after which no further content will be sent.

How Anthropic handles the data. Anthropic processes this information for us, as our service provider, under its commercial terms and data processing agreement. Anthropic does not use it to train its AI models. Anthropic automatically deletes it within 30 days. If Anthropic's automated safety systems flag a request as possibly violating its usage policies, Anthropic may keep that request and the response for up to 2 years, and related safety scores for up to 7 years, or longer if the law requires. Anthropic processes requests on servers in the United States.

Limits of AI. Insights are generated automatically, may be inaccurate or incomplete, and are for reflection and entertainment only. They are not medical, psychological, or other professional advice. Insights are labeled as AI-generated in the app. See our Terms of Use.

5.2 Dream Connections

For English-language accounts, we find dreams with similar meaning by converting the text of your non-private dreams into numerical representations called "embeddings," using an open-source model that runs inside our database provider's (Supabase's) infrastructure. This processing does not send your dreams to a separate AI company. Dreams marked Private are excluded, and embeddings are deleted along with the dream or your account. For other languages, the app compares shared tags, moods, and words, without AI.

If we ever use a separate company to create embeddings, or send your sleep records or habit check-ins to an AI provider for a new feature, we will update this policy and ask for your permission first.

6. How we share information

We share personal information only as described below. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6.1 Service providers (processors)

These companies process information on our behalf under written contracts that require them to use it only to provide services to us and to protect it with the same or equal protection described in this policy:

6.2 Companies that act under their own privacy policies

• Apple and Google, when you download the app, sign in with Apple or Google, or subscribe through the App Store or Google Play. They handle payment and account information under their own privacy policies, and may tell us your age range as described in Section 3.4.
• Stripe, Inc., our web payment processor, which handles your payment details under its own privacy policy. We never receive your full card number.

6.3 Other sharing

• At your direction, for example when you export your data.
• For legal reasons, if we believe in good faith that disclosure is required by law, subpoena, or court order, or is necessary to protect the rights, property, or safety of you, other people, or Remspeak. Where legally permitted, we will try to notify you before disclosing your information in response to a legal demand.
• Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy. We will notify you and, where required by law, ask for your consent before your consumer health data is transferred.

We do not share consumer health data with any third party other than our processors, except with your consent or as permitted by law.

7. How long we keep information

• Account, profile, journal, drawings, sleep, and habit information: for as long as your account is active. When you delete an item, it is deleted from our active systems. When you delete your account, all of this information is deleted from our active systems within 30 days.
• AI insights and embeddings: until you delete the related dream or your account, or mark the dream Private.
• Backups: deleted information may remain in encrypted backups for up to 30 days before being permanently overwritten.
• Subscription records: We keep your current plan status while your account exists and delete it when you delete your account. Apple, Google, RevenueCat, and Stripe keep their own purchase records under their own policies. For web purchases, we keep a record of your purchase and your agreement to automatic renewal for at least 3 years (or 1 year after your subscription ends, if longer), and transaction records for as long as tax and accounting laws require (generally up to 7 years). These records don't include your journal or health information.
• AI usage records: the date of each AI insight request, kept to apply monthly plan limits, and deleted when you delete your account.
• Consent records: We keep a record of when you accepted our Terms and gave or withdrew consent for as long as your account exists, and for web subscriptions, for the period described above.
• Inactive accounts: If your subscription has ended and you haven't signed in for 24 months, we may delete your account and data after emailing you at least 30 days in advance.
• Waitlist emails: until launch plus 12 months, or until you ask us to remove you.
• Technical logs: kept by our providers for a limited period, typically no longer than 90 days, unless needed to investigate a security issue.

8. How we protect information

We use administrative, technical, and physical safeguards designed to protect your information, including:

• encryption in transit (TLS) and encryption at rest by our database and storage provider;
• row-level security rules in our database so that each account can access only its own records;
• private file storage with short-lived access links for drawings;
• keeping secret keys only on our servers, never in the app; and
• secure storage of your sign-in session on your device.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a security breach affecting your personal information, we will notify you and the authorities as required by law.

9. Your choices and rights

9.1 Choices available to everyone

These are available on any plan, and even if your subscription has ended:

• Access and export. You can download a copy of your journal, sleep records, habit check-ins, and profile in Profile → Export my data. You can also email us to request a copy.
• Correct. You can edit your profile, dreams, and records in the app at any time.
• Delete. You can delete individual dreams and drawings in the app, and you can delete your entire account in Profile → Delete account. You can also email us to request deletion. When you delete your account, we also ask RevenueCat to delete its records about you, except purchase records that the stores or the law require it to keep.
• Control AI features. Mark any dream Private to keep it out of all AI processing, and withdraw your AI consent in Profile → Privacy at any time.
• Withdraw consent. You can withdraw consent to the processing of your health information at any time by deleting your account or contacting us. Because processing this information is essential to how Remspeak works, withdrawing that consent means you will no longer be able to use the Service.
• Marketing emails. Unsubscribe using the link in any marketing email.
• Subscriptions. Cancel through the App Store, Google Play, or your web account, as explained in our Terms of Use. Deleting your account does not cancel an App Store or Google Play subscription; cancel it with the store to stop future charges.

9.2 U.S. state privacy rights

Depending on where you live (including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, and other states as their laws take effect), you may have the right to:

• know or access the personal information we have collected about you and how we use and disclose it;
• obtain a portable copy of your information;
• correct inaccurate information;
• delete your information;
• obtain a list of the specific third parties to which we have disclosed your personal information, where your state provides this right (such as Oregon and Minnesota);
• know the inferences we have made about you, such as your Sleep Profile and chronotype;
• opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and certain profiling (we do not do any of these);
• limit the use of sensitive personal information to what is necessary to provide the Service (we already limit our use in this way); and
• not be discriminated against for exercising your rights.

AI training, profiling, and advertising. We do not use personal information to train large language models or other AI models. We do not engage in profiling to make decisions that produce legal or similarly significant effects, and we do not process personal information for targeted advertising.

How to make a request. Email privacy@remspeak.com from the email address on your account, or from another address with enough information for us to verify your identity. You may use an authorized agent; we may ask for proof of the agent's authority and verify your identity directly. We will respond within 45 days, or longer where the law allows, in which case we will tell you why.

Appeals. If we decline your request, you may appeal by replying to our decision or emailing privacy@remspeak.com with the subject "Privacy Appeal." We will respond within the time required by your state's law (generally 45 or 60 days). If you are not satisfied with the result of your appeal, you may contact your state attorney general.

Global Privacy Control. We do not sell or share personal information, but we treat a Global Privacy Control signal from your browser as a valid request to opt out of sale and sharing.

California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.

California notice at collection. In the last 12 months we collected the categories of personal information described in Section 3: identifiers; personal information described in Cal. Civ. Code § 1798.80(e) (name); characteristics of protected classifications (age); commercial information (subscription records); internet or other electronic network activity information; inferences (Sleep Profile and chronotype); and sensitive personal information (health information, and account login credentials). We collected them from the sources described in Section 3 for the purposes described in Section 4, disclosed them for business purposes to the categories of service providers described in Section 6, and keep them for the periods described in Section 7. We have not sold or shared personal information, and we do not use or disclose sensitive personal information for purposes other than those permitted by California law.

9.3 EEA and UK rights

If the GDPR applies to you, you have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. We will respond to requests within one month, which may be extended in limited cases.

10. International data transfers

We are based in the United States, and our service providers store and process information in the United States and other countries. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. When the GDPR applies, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses included in our data processing agreements with our providers, or a provider's certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.

11. Children

Remspeak is intended only for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. We ask for your date of birth during sign-up and do not allow anyone under 18 to create an account. If we learn that we have collected information from someone under 18, we will delete it. If you believe a minor has provided us with information, contact privacy@remspeak.com.

12. Health information and HIPAA

Remspeak is a consumer wellness app. It is not a healthcare provider, and we are not a "covered entity" or "business associate" under the U.S. Health Insurance Portability and Accountability Act (HIPAA), so HIPAA does not apply to information you give us. We still treat your sleep, dream, and habit information as sensitive and protect it as described in this policy and our Consumer Health Data Privacy Policy.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date. If we make material changes, we will notify you in the app or by email before the changes take effect, and where the law requires it, we will ask for your consent. In particular, we will not use previously collected information in a materially different way without first notifying you and, where required, obtaining your consent.

We provide translations of this policy for the languages the app supports as they become available. If versions conflict, the English version controls to the extent the law allows.

14. Contact us

• Email: privacy@remspeak.com
• Mail: Quality Tools Innovations LLC, Attn: Privacy, 7901 4th St N #25949, St. Petersburg, FL 33702, USA