Effective 10 November 2026 · Applies to the Onyra apps for iOS and Android and the waitlist on onyra-app.web.app
Onyra is made by an independent developer, Emirhan Selim Uzun (“we”), who is the data controller for the processing described here. Contact: uemirhanselim.dev@gmail.com.
Dream texts and dates, the feelings and flags you choose (nightmare, lucid, recurring), interpretations, dream paintings, and your preferences (language, theme, default lens, reminder time, onboarding answers, app lock). This data is deleted when you delete it in the app or uninstall Onyra. Device backups you enable (iCloud or Google) are governed by Apple or Google.
| When | What | Who processes it |
|---|---|---|
| You ask for a reading | That dream's text; the lens; the feelings and flags you chose; the app language; your onboarding answers (how often you remember dreams, what you want to understand); short English keywords of symbols from your recent readings | Our Cloud Functions on Google Cloud (United States), which pass it to our AI service provider — currently Google Gemini on Google Cloud Vertex AI. The response is returned to your device and not stored by us. |
| You ask for a dream painting (Premium) | A short scene description written by the AI for that reading — not your dream text | Google Gemini image generation on Google Cloud Vertex AI. The image is saved only on your device. |
| The app starts | A random anonymous ID | Firebase Authentication (Google) |
| You request a reading or painting | Counters tied to the anonymous ID: whether your free reading is used (and when), extra free readings earned by finishing chapters (the chapter number and when), daily reading count, monthly painting count, cached subscription status | Cloud Firestore (Google). Deleted automatically 12 months after your last use. |
| You subscribe or restore | The anonymous ID and store purchase receipts (no card details) | Apple App Store or Google Play (payment), and RevenueCat (subscription status) |
| You use voice input | Your voice, converted to text | Your phone's speech recognition — Apple (iOS) or Google (Android), on the device or on their servers according to your device settings. Onyra does not record or keep audio. |
| You use the app, while usage statistics are on (the default; Settings → Usage statistics turns them off) | Usage events without content: which screens you open and how long you stay; which features you use (for example: a dream was saved, a reading was requested and whether it worked, the subscription screen was opened, a plan was chosen); a dream's length range — never its text; app version, device model, operating system, language, approximate country or region derived from your IP address, and a random app-instance ID. Never your dream texts, readings or symbols. | Google Analytics for Firebase (Google), with advertising features turned off and no advertising ID. Kept for up to 14 months. Subscription events from RevenueCat (trial started, renewed, cancelled) are linked to the same app-instance ID. On iOS, if you installed Onyra from an Apple Search Ads ad, Apple tells RevenueCat which campaign it was; this needs no tracking permission. |
| The app crashes or hits an unexpected error, while usage statistics are on | A crash report: the error and where in the code it happened, app version, device model, operating system and time. Never your dream texts or readings. | Firebase Crashlytics (Google). Kept for 90 days. The same switch, Settings → Usage statistics, turns it off. |
Our AI service providers process the text only to produce the reading. Under their enterprise terms they do not use it to train their models; they may keep it for a limited time for security and abuse monitoring, as described in their terms. We may change providers to keep Onyra working well; this policy will name the current one.
Our servers keep technical logs (for example time, function name, model used and token counts) to run and secure the service. These logs do not contain your dream text.
Reminders are scheduled on your device; there is no push server. Cards and exports you share are created on your device and go only where you send them.
When you join the waitlist at onyra-app.web.app, we store your email address, the phone you picked (iPhone or Android, if you picked one), the page language, and how you found the page: campaign tags in the link (for example utm_source=instagram), the domain of the website that linked to it, and the invite code of the person who shared it with you. This is kept in Cloud Firestore (Google Cloud, United States).
We use it only to email you when Onyra comes out. We don't share it with anyone or use it for anything else. To stop automated sign-ups we keep a counter tied to a one-way hash of your IP address (never the address itself) for two hours. Legal basis: your consent (GDPR Art. 6(1)(a), KVKK m.5/1), which you can withdraw anytime. We keep the list until Onyra is out on both stores and you have been emailed, and no longer than 12 months. Write to us and we'll delete your entry right away.
You have the right to access, correct, delete and port your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. Because your journal is on your device, you control it directly. For anything else, write to us.
International transfers. Google Cloud, Google Analytics for Firebase, Firebase Crashlytics and RevenueCat process data in the United States under standard contractual clauses and equivalent safeguards.
In the app: Settings → Delete all my dreams removes every dream, reading and painting from the device. Uninstalling also removes them. The server counters are linked only to the anonymous ID, contain no dream text, and expire automatically 12 months after your last use. Details: delete my data. Deleting the app does not cancel a subscription — cancel it in your App Store or Google Play account settings.
Onyra is not directed to children under 13 (or under the age of digital consent in your country), and we do not knowingly collect their data.
We will update this page when the app's data practices change and show the new effective date at the top.
Veri sorumlusu: Emirhan Selim Uzun (bağımsız geliştirici) — uemirhanselim.dev@gmail.com.
Cihazında kalanlar: rüya metinleri ve tarihleri, seçtiğin duygular ve işaretler, yorumlar, rüya tabloları ve tercihlerin (dil, tema, varsayılan mercek, hatırlatma saati, onboarding cevapları, uygulama kilidi). Uygulamada sildiğinde ya da uygulamayı kaldırdığında silinir.
Cihazından çıkanlar ve amaçları:
Web sitesinde bekleme listesine katılırsan: e-posta adresin, seçtiysen telefonun (iPhone ya da Android), sayfanın dili ve sayfayı nereden bulduğun (bağlantıdaki kampanya etiketleri, seni yönlendiren sitenin alan adı ve bağlantıyı seninle paylaşan kişinin davet kodu) Cloud Firestore'da (Google Cloud, ABD) saklanır. Yalnızca Onyra çıktığında sana e-posta göndermek için kullanılır; kimseyle paylaşılmaz. Otomatik kayıtları önlemek için IP adresinin tek yönlü özetine bağlı bir sayaç iki saat tutulur (adresin kendisi değil). Hukuki sebep: açık rızan (KVKK m.5/1); istediğin an geri alabilirsin. Liste, Onyra iki mağazada da çıkıp sana haber verilene kadar ve en fazla 12 ay saklanır. Bize yazarsan kaydın hemen silinir.
Hukuki sebepler: talep ettiğin hizmetin ifası (KVKK m.5/2-c), ilk yorumdan önce verdiğin açık rıza (m.5/1) ücretsiz hakların kötüye kullanımını önleme ve hangi özelliklerin işe yaradığını ve nerede hata olduğunu görerek uygulamayı geliştirme amacıyla meşru menfaat (m.5/2-f). Kullanım istatistiklerini Ayarlar’dan istediğin an kapatabilirsin.
Yurt dışına aktarım: Google Cloud, Google Analytics for Firebase, Firebase Crashlytics ve RevenueCat verileri ABD'de, standart sözleşme hükümleri ve eşdeğer güvencelerle işler (KVKK m.9).
Haklarınız (KVKK m.11): verilerinin işlenip işlenmediğini öğrenme, bilgi talep etme, düzeltme, silme, aktarıldığı üçüncü kişileri öğrenme, itiraz ve zararın giderilmesini talep etme. Başvuru: uemirhanselim.dev@gmail.com. Günlüğün cihazında olduğu için onu doğrudan sen yönetirsin: Ayarlar → Tüm rüyalarımı sil.
Çocuklar: Onyra 13 yaş altına (ya da ülkendeki dijital rıza yaşının altına) yönelik değildir.