Privacy policy

Last updated: June 2, 2026

Dream Codex is a place for your dreams — some of the most private, vivid, and personal things you will ever write down. We take that seriously. This policy explains what we collect, why, and the choices you have.

The short version. Your dream entries, voice recordings, and their transcripts are sensitive personal information. We use them to run the app and the features you ask for, we never sell your personal data, and you can access, export, or delete your data at any time.

Who we are

Dream Codex is operated by Codex Labs, a product line of Codex Corp ("we", "us", "our"), based in Vancouver, British Columbia, Canada. We are the organization responsible for the personal information described in this policy.

If you have any questions or requests, contact our privacy team at privacy@codexcorp.ca.

Scope

This policy applies to the Dream Codex mobile app, this website, and related services we provide. It does not cover third-party services we link to, which have their own privacy practices.

Information we collect

Account information

When you create a Codex account, we collect your email address and, optionally, your name or display name. If you secure your account, we store the information needed to support multi-factor authentication (MFA), passkeys, and Google sign-in. We never store your password in plain text; authentication is handled through our identity provider.

Your dream content (sensitive)

This is the heart of the app, and it is sensitive personal information. Depending on how you use Dream Codex, we collect:

Dream entries (text) you write or that are transcribed from your voice.
Voice recordings / audio when you choose to record a dream out loud, and the transcripts generated from them.
Mood and lucidity tags you add to entries.
Sleep-assistant usage, such as which ambient soundscapes you play and basic session activity.

We treat dream content with extra care because of how personal it is. It is not used for advertising and it is not sold.

Device and usage information

To keep the app working and improve it, we may collect basic technical information such as device type, operating system, app version, and diagnostic or crash data.

Website analytics

This website uses Google Analytics to understand aggregate traffic (for example, which pages are visited). This is separate from your in-app dream content.

How we use your information

To provide the core journaling experience — saving, organizing, and showing your entries, calendar, and patterns.
To generate AI interpretations and surface symbols, themes, and mood/lucidity trends (see our AI Policy).
To transcribe voice recordings into text when you use voice capture.
To run the sleep assistant and play ambient soundscapes.
To create and secure your account, including MFA, passkeys, Google sign-in, and password recovery.
To let you export your data.
To maintain, troubleshoot, and improve the service, and to keep it secure.
To comply with our legal obligations.

Consent and legal basis

Under Canadian privacy law (PIPEDA and BC's Personal Information Protection Act, "BC PIPA"), we rely on your consent to collect, use, and disclose your personal information for the purposes described here. Because dream content is sensitive, we rely on your express consent for the AI interpretation and voice-transcription features — and you can choose not to use them. You may withdraw consent at any time, subject to legal or contractual limits, by adjusting your use of optional features or by deleting your data.

AI processing and voice transcription

When you ask for an interpretation, the text of your dream entry is sent to an AI provider to generate the interpretation and identify symbols and themes. When you record a dream by voice, the audio may be sent to a third-party speech-to-text provider to produce a transcript. Full details, including how to avoid these features, are in our AI Policy.

Service providers and sharing

We share personal information only with service providers who help us run Dream Codex, and only as needed to provide the service:

Supabase — hosting, database, authentication, and storage.
AI provider(s) — to generate dream interpretations and symbols from entry text.
Speech-to-text provider — to transcribe voice recordings.
Google — for Google sign-in (if you use it) and Google Analytics on this website.

We do not sell your personal data. We do not share your dream content for advertising.

International transfers and cross-border storage

Some of our service providers may store or process information on servers located outside of Canada, including in the United States. When information is handled outside Canada, it may be subject to the laws of those jurisdictions, including lawful access by courts and government authorities. We take steps to ensure your information is protected by comparable safeguards wherever it is processed.

Retention

We keep your information for as long as your account is active or as needed to provide the service. You can delete individual entries, and you can delete your account, at any time. When you delete a voice recording or an entry, we remove it from active systems; deletion of the underlying audio is handled accordingly, and residual copies in backups are purged on our standard backup cycle. We retain certain information longer only where required by law.

Security

We protect your information with technical and organizational safeguards, including encryption in transit and at rest, access controls, and account-security features like MFA and passkeys. The private vault gives you an extra layer of protection for entries you want to keep especially private. No system is perfectly secure, but we work to keep your dreams safe.

Your rights

Under PIPEDA and BC PIPA, you have the right to:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Delete your entries and your account.
Export your data in a portable format.
Withdraw consent for optional features or processing.

To exercise any of these rights, contact privacy@codexcorp.ca. We will respond within the timeframes required by law.

Children

Dream Codex is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app.

Contact and complaints

For privacy questions or requests, email privacy@codexcorp.ca. If you have a concern we have not resolved, you may also contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.