Privacy

Who is responsible

Silvan Hagen - Consulting
Körnerstrasse 12
8004 Zürich, Switzerland
hello@sonubo.com

Information we process

We process account details such as your name and email address; dreams, titles, selected perspectives, generated interpretations, and journal entries; credit balances and purchase records; email preferences and delivery records; support messages; public share URLs you submit for review; and technical information such as IP address, browser details, page paths, session identifiers, and security logs.

Why we process it

We process information to provide your account, readings, journal, credits, and support; perform our contract with you; secure and improve the service; prevent fraud and repeated introductory-credit abuse; send service messages; comply with accounting and legal duties; and, when you opt in, send occasional dream tips. Where the GDPR applies, these purposes rely on performance of a contract, legal obligations, consent, and our legitimate interests in operating and protecting Sonubo.

AI processing

Dream text entered before account creation is held temporarily in the server session and is not sent to an AI provider. Once you create an account and request a full interpretation, the dream text and selected perspectives are sent through the OpenAI API to generate the title and readings. OpenAI processes this content for Sonubo under its business terms and data-processing commitments. Sonubo does not use AI output to make decisions with legal or similarly significant effects. Do not submit another person’s private or sensitive information without permission.

Service providers

We share only the information needed with providers that operate Sonubo: Laravel Cloud and its infrastructure providers for hosting; OpenAI for dream generation; Stripe for checkout, payment, tax, fraud prevention, and transaction records; Lettermint for transactional and opted-in email; and Pirsch Analytics for aggregate website statistics. Stripe collects your payment details directly; Sonubo does not receive or store your full card number.

Privacy-friendly analytics

We use server-side Pirsch Analytics without analytics cookies. Pirsch receives technical request information such as the page path, referrer, user agent, language, and IP address. It uses the IP address, user agent, date, and a per-site salt to create a non-reversible daily visitor identifier; it does not store the IP address and does not recognize visitors across websites or beyond 24 hours.

Cookies and sessions

Sonubo uses cookies and server-side sessions required for sign-in, security, preferences, temporarily preserving a pre-registration dream, and core service functionality. We do not use advertising cookies.

International processing

Providers may process information in Switzerland, the European Economic Area, the United Kingdom, the United States, and other countries in which their documented subprocessors operate. Where required for a transfer to a country without an officially recognized adequate level of protection, we and our providers rely on safeguards such as recognized standard contractual clauses or an applicable data privacy framework.

Retention

Account information and journal entries are kept while your account is active. If you do not sign in for 180 days, we permanently close the account and delete its journal after sending an advance service reminder. Signing in resets this period. You can also update your profile or delete your account from Settings at any time.

Payment, tax, fraud-prevention, support, security, and delivery records may be kept for as long as required by law or reasonably needed for those purposes. To prevent repeated introductory-credit abuse, we retain a keyed, one-way hash derived from a normalized version of each account email after account deletion. Gmail and Googlemail aliases are normalized by removing dots and plus suffixes. The retained record does not contain the email address itself.

Your choices and rights

You can update your profile, unsubscribe from optional email in Settings or through an unsubscribe link, and delete your account in Settings. Depending on applicable law, you may also ask for access, correction, deletion, restriction, objection, or a portable copy of your information. You may complain to the Swiss Federal Data Protection and Information Commissioner or your competent local authority. We may need to verify your identity before completing a request.

Contact and changes

Email hello@sonubo.com or use the contact page for privacy questions or requests. We may update this notice when the service or legal requirements change; the date above shows the latest revision.