Yumemira privacy policy: Your words. Your choice.

Yumemira is operated by KAK Digital LLC, 30 N Gould St, Sheridan, WY 82801, USA (“we”). KAK Digital LLC is the company responsible for your data (the “controller”). This notice covers the Yumemira app for iPhone, this website and the emails we send from it. Yumemira is for people 16 and over. For anything about privacy, write to hello@yumemira.com. Updated 1 October 2026.

The short version

There is no account. Your goals, journal and notes stay on your iPhone and are not uploaded to us. There are no ads and no cross-app tracking, and we never sell data. The app sends something to us in one case only: when you ask for an optional goal picture made with AI, it sends the words you typed for that picture. Nothing the app sends is linked to your name or your Apple Account.

What stays on your iPhone

Your goals, steps, days shown up, levels and badges, your journal (notes, faces, photos and voice recordings), your Notes and their files, and your settings are stored in the app’s own storage on your iPhone, protected by iOS. We do not receive a copy. When iCloud Backup is on for your iPhone, the backup includes them; Apple handles that backup under its own terms. There is no sync between devices today.

Widgets, the Lock Screen and the Dynamic Island

To show your step in widgets, on the Lock Screen and in the Dynamic Island, the app keeps a small copy of today’s steps and counts in a space on your iPhone that only Yumemira and its widgets can read. This copy never leaves your iPhone. Anyone who looks at your iPhone can see these places, so the app has Settings › Privacy and lock › Hide text in notifications and widgets.

Reminders and sounds

Reminders are notifications set up on your iPhone. No server sends them. They show your step’s words unless Hide text is on. Sounds and session bells are made on your iPhone.

Voice, photos, camera and app lock

The microphone is used only while you record a voice note. Your words are recognised on your iPhone; if your language cannot be done on the iPhone, voice typing is not offered and nothing is sent elsewhere. The recording and its words stay with your note.

The photo picker gives the app only the photos you pick. The camera is used only when you take a profile photo. Share cards are made on your iPhone, with Hide goal name on at the start, and go nowhere until you pick a place in the share sheet. Saving a card to Photos only adds it; the app does not read your library.

If you turn on App lock (Pro), iOS checks your Face ID and the app only learns whether it worked. The app’s own passcode is kept in your iPhone’s Keychain, on this iPhone only, and is not included in backup files. We never see your face data or your passcode.

Goal pictures made with AI (optional, Pro)

Before your first picture, the app asks for your permission and names the AI service it uses, fal.ai. You can turn this off at any time in Settings › Privacy and lock. Every other part of Yumemira works without it.

What is sent

Only the words you type for the picture and the style you choose, with a request number and a random key made for this installation by Apple’s App Attest. The key proves the request comes from the real app; it is not your name, your Apple Account or a tracking ID. Your journal, notes, moods, photos and name are never sent. Please leave anything private out of the words.

What our server does

Our server checks the request and passes the words and the style to fal.ai with no key, name or other identifier. It does not store your words. It keeps only a fingerprint (a one-way scramble of the words and style) so that a retry is never charged twice. Our code does not store your IP address; our host handles it to deliver the request, as every web host does. Vercel hosts the service and Supabase stores its records, in the United States.

How long it is kept

The finished picture is kept on our server for up to 1 hour, only so it can be sent again if your connection drops. After that it is no longer sent and is removed at the next request or by a cleanup that runs every day, so removal can take up to a day. The record of each request (the installation key, the fingerprint, the time and whether it worked) is deleted after 30 days. The installation’s own record (its key, a public key, a counter and the date it was made) stays until you use Delete all data. We also count how many pictures are made each day, with no content.

fal.ai

fal.ai processes the words and the picture under its privacy policy. We cannot promise that it keeps nothing. The picture is saved with your goal on your iPhone and labelled Made with AI.

Purchases

Yumemira Pro is bought through Apple. Apple handles the payment; we never get your card details, name or email. The app asks the App Store only whether Pro is on, which plan it is and when it renews or ends. Apple’s sales reports to us do not name you.

Backups, exports and deleting

Backup files and text exports are made on your iPhone and go only where you choose. They hold your journal and notes in readable form, so keep them somewhere private. Adding a backup keeps what is already in the app.

Deleted notes and goals wait in Recently deleted for 30 days, then clear by themselves. Settings › Delete all data removes your goals, journal, notes, progress, goal pictures and settings from the app on this iPhone. If you ever made a goal picture, it also deletes the installation’s record and its request records on our server. It does not cancel Pro; cancel in your Apple subscriptions.

Copies you saved, shared or backed up elsewhere, including your iPhone’s iCloud Backup, are outside the app. If you delete the app without using Delete all data first, the installation’s record stays on our server. It is not linked to you, so we cannot find it by your name or email; its request records are still deleted after 30 days.

This website

This website counts visits with its own simple analytics. There are no advertising trackers and no third-party analytics, and the numbers are only used to improve this website. What is counted depends on your choice in the small cookie window:

• If you choose Accept: we count which pages you open and which buttons you tap, how long a page stays open and how far you scroll, the country, region and city worked out from your connection, your time zone, language, screen size, the type of device and browser, the page that sent you here and any campaign tags in the link. Your browser keeps two random notes so that we can tell one visit from the next. We also keep your IP address, for at most 90 days.
• If you choose Reject, or your browser sends a Global Privacy Control signal: nothing is counted and nothing is kept in your browser except your choice.
• If you have not chosen yet: in the European Union, the European Economic Area, the United Kingdom, Switzerland and Brazil nothing is counted. In other countries a page view is counted without your IP address, without any note in your browser and without anything that links one page to the next.

Visit records are deleted after 13 months. Like every website, our host also handles your IP address for a moment to deliver each page.

Cookies and device storage

This website sets no cookies. It uses your browser’s own storage for the few small notes below. Nothing is written before you choose, apart from what you ask for yourself. You can see and delete these notes in your browser’s settings at any time.

• Your cookie choice ym_consent

  Remembers whether you chose Accept or Reject, so that we do not ask on every page.

  • Written when you choose
  • Stays until you change it or clear your browser
  • Needed, no consent asked

• This visit ym_sid

  A random note that groups the pages of one visit. If you send the contact form, it travels with your message so that we can see which pages were not working for you.

  • Only after Accept
  • Gone when you close the tab
  • Removed if you choose Reject

• Returning visitor ym_vid

  A random note that tells us a browser has been here before. It holds no name and no email address.

  • Only after Accept
  • Stays until you choose Reject or clear your browser

• Surprise-discount window ym.pop

  So that the window does not ask twice, your browser keeps a note of whether you closed it or signed up. The note holds no email address and is not sent to us. While you are signing up, the tab also keeps your email address and your step until you finish or close the tab, so that a reload does not lose your place.

  • Written when you close the window or sign up, or after Accept
  • The sign-up step is gone when you close the tab

• A line you save on the blog ym-blog-line

  Some blog articles let you write one practice line and press Save. The line stays in your browser and is never sent to us. The button next to it removes it.

  • Only when you press Save
  • Stays until you remove it

Emails from our website

If you ask for the surprise discount on yumemira.com, we email you a 6-digit code to check the address is yours. Only after you type that code do we add you to our list. We then send you the discount and, at most twice a month, surprise discounts and news about Yumemira. Every one of those emails has a one-tap unsubscribe link. After you unsubscribe we keep only a note of your address so we never email you again.

What we keep: your email address, when you signed up, which part of the site you signed up from, the country our host detects from your connection, the offer you received and the words you agreed to. The code is kept only as a scrambled fingerprint and stops working after 10 minutes. To stop abuse we also keep a scrambled fingerprint of your network address with each code. Unconfirmed sign-ups and these fingerprints are deleted within two days. We never sell your email and we do not use it for ads. Our emails do not track opens or clicks.

If you joined our earlier launch list, we use that address only to tell you when Yumemira is available. To leave it, reply to any of our emails or email hello@yumemira.com.

Contact messages

When you use our contact form, we process your name, email address, the topic you pick and your message to respond. Messages are sent through Resend to our support inbox, and we email you a short note to say your message arrived. Please do not include passwords or private journal entries.

When you write to us, by the form or by email, we keep the conversation so we can reply and follow up. Ask us at hello@yumemira.com to delete it.

Why we are allowed to use this data

Data protection laws ask us to name a reason for each use. These are ours:

• Your consent: counting your visits after you choose Accept, the discount and news emails, and goal pictures made with AI in the app. You can take consent back at any time: use Cookie settings, the unsubscribe link, or the switch in the app. Taking it back does not change what was done before.
• Answering you: when you write to us, we use your message to reply, because you asked us to.
• Our legitimate interests, kept small: counting page views without identifying anyone where the law allows it, keeping the website and our forms safe from abuse, and keeping a note that you unsubscribed. You can object to these at any time.
• The law: when a law requires us to keep or hand over a record.

We do not make decisions about you by automated means, and we do not build advertising profiles.

Who helps us, and where your data goes

We do not sell your data and we do not share it for advertising. A few companies process it for us, only to provide their service:

• Vercel hosts this website and our small server.
• Supabase stores the discount list, visit records, support conversations and the goal-picture records.
• Resend sends our emails and receives the emails you send to us. A copy of each incoming email is forwarded to our company mailbox.
• fal.ai makes goal pictures in the app, only if you ask for one.
• Apple handles downloads and payments under its own privacy policy.

We are a company in the United States, and these services process the data in the United States. If you live elsewhere, your data leaves your country, and the law there may protect it differently. For data from the European Economic Area, the United Kingdom and Switzerland, the data processing terms of Vercel, Supabase and Resend include the European Commission’s standard contractual clauses and the United Kingdom addendum. Email us if you would like to know more about these safeguards.

We may also disclose data when a law or a court requires it, or if the company is sold or merged. In that case this notice keeps applying to your data.

How long we keep it

• Visit records: 13 months. The IP address in them: at most 90 days.
• Discount list: until you unsubscribe. After that, only a note of your address so we never email you again.
• Sign-up codes and their fingerprints: at most two days.
• Contact and support conversations: for as long as we may need them to help you, and until you ask us to delete them.
• Goal-picture records from the app: as described under “How long it is kept” above.

Your rights

Wherever you live, you can ask us to:

• show you the data we hold about you and give you a copy (access and portability);
• correct it;
• delete it;
• stop or limit a use you object to;
• take back a consent you gave.

Email hello@yumemira.com and we will answer within 30 days, free of charge. We may ask a question to be sure the request comes from you, for example a reply from the email address concerned. We never treat you worse for using your rights. Because the app has no account and your journal never reaches us, we hold no journal data to send or delete; in the app, Settings › Delete all data does that on your iPhone.

If you think we have handled your data wrongly, please tell us first so we can put it right. You also have the right to complain to the data protection authority where you live: for example your national authority in the European Union, the Information Commissioner’s Office in the United Kingdom, the ANPD in Brazil or the Data Protection Board of India. In India you may also name another person to use your rights for you if you cannot, and hello@yumemira.com is the contact for grievances.

California and other US states

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the past 12 months. We honour the Global Privacy Control signal: when your browser sends it, this website treats it as Reject and counts nothing. We do not use sensitive personal information to learn things about you. You have the rights to know, delete and correct described above, you may use an authorised agent, and we will not treat you differently for using them. The kinds of information we collect, and why, are listed in the sections above.

Children

Yumemira and this website are for people 16 and over. They are not directed at children, and we do not knowingly collect personal data from children under 13, or under the age at which the law where you live lets a young person agree alone. If you believe a child has given us an email address or a message, write to hello@yumemira.com and we will delete it.

Changes to this notice

When the app or the website changes what it does with data, we update this page and the date at the top. If a change is important, we also say so on this website before it takes effect.

Contact and choices

Email hello@yumemira.com for privacy questions and for any request about your data. You can also write to KAK Digital LLC, 30 N Gould St, Sheridan, WY 82801, USA. You can turn off microphone, speech recognition, camera, photos and notification access for Yumemira in the iPhone’s Settings app at any time, and you can change your cookie choice with Cookie settings at the bottom of every page.