Global Privacy Notice · Last updated 26 September 2026
Privacy for the most personal kind of data.
This notice explains what Falib processes, why, where it goes, and the controls every user receives worldwide. Regional rights apply in addition to this baseline.
Launch draft: Falib’s legal operator name, registered address, privacy contact and support contact must be added before these terms are relied on for a public launch.
What Falib collects
Account information from Clerk; private dream text and edited versions; the dates and optional feelings or context you add; AI-derived observations kept separately from your words; city-level location you manually choose; reviewed public dream copies; consent records; subscription status from Stripe; and essential security and service logs.
Dreams can reveal sensitive information about health, beliefs, relationships, sexuality, or other intimate parts of life. Falib treats dream content and derived observations as sensitive regardless of whether every jurisdiction uses the same legal label.
How each feature works
Private journaling stores the content you ask Falib to keep. AI analysis is optional and relies on explicit consent for potentially sensitive content. Observatory contribution is a separate, optional permission and is not active yet. Public sharing requires a fresh confirmation for each dream and shows the exact text, date and location fields selected.
Voice capture uses the browser’s speech-recognition capability to place text in the editable field. Falib does not currently upload or retain a voice recording. Wearable integrations, precise GPS and independent research studies are not active.
Purposes and legal bases
Falib processes data to provide the account and private journal, secure and operate the service, meet legal obligations, and support optional features you select. Where GDPR or UK GDPR applies, contract supports core account and journal functions; legitimate interests support proportionate security and service integrity; legal obligation supports required records; and explicit consent supports optional processing of sensitive dream information for AI and collective analysis.
Service providers
Clerk provides authentication; Convex provides the application database and server functions; Cloudflare supports web delivery and runtime; Stripe processes subscriptions and payment details; OpenRouter routes AI analysis to an inference provider. Falib does not receive full payment-card details. AI requests require zero-data-retention routing and deny provider data collection; the provider still receives and processes the text during the request.
Retention and deletion
Journal content remains while your account is active. You can submit a verified account-deletion request from Settings; Falib will confirm when processing is complete. Unpublishing removes a dream from the public Atlas. Consent receipts are kept as accountability records. Billing, security, dispute or legal records may be kept where required. Falib will publish specific backup deletion periods only after they are technically verified.
Your controls and rights
Every user can keep a journal private, unpublish a dream, withdraw optional AI, location or Observatory permission, and request access, correction, export or account deletion. Withdrawal does not make earlier lawful processing unlawful, and genuinely non-identifiable aggregate results cannot be linked back for removal.
Depending on where you live, you may also have rights to object, restrict processing, portability, lodge a complaint, appeal a refusal, opt out of covered sale or sharing, or limit covered uses of sensitive information. Falib does not sell dream data and does not use it for behavioural advertising.
International processing and regional notices
Falib is intended as a global service. If its operator is established in Greece, GDPR applies to processing in that establishment’s context. EEA and UK users receive GDPR-style rights and transfer safeguards where required. California residents receive applicable rights to know, correct, delete, and opt out; Falib does not sell or share data for cross-context behavioural advertising. Canadian users receive access and correction controls under applicable federal or provincial law. Brazilian users receive applicable LGPD rights, including confirmation, access, correction and deletion.
Security and contact
Falib uses access controls, server-side ownership checks, encryption provided by its infrastructure, data minimisation and separated public copies. No online service can promise absolute security. Operator, privacy-contact and representative details are pending and must be completed before launch.