The short version: Reveal the Dream is built to be private by default. Everything you enter stays on your device: your dream photo, your check-ins, your progress, your settings. We don't collect it or see it. If you turn on Premium sync, a copy is locked on your device and handed to your other devices through us, and we cannot open it; see Cross-platform sync below. Using the app needs no account, on any platform. There is an optional email sign-in with exactly one job, which is carrying a subscription you bought on one platform to another; it is described in Accounts and sign-in, and nothing about your journeys goes with it. Buying the Mac or Windows version direct from us also needs an email address, because that is how a purchase is issued and recovered. If you send a bug report or feature request from the app, we receive what you choose to put in it. This website, separately from the app, uses Microsoft Clarity to see which pages are useful.
What we collect
Nothing about your journeys, ever. The app has no analytics, no tracking, and no third-party SDKs that gather information about you or your device. Your photo, your check-ins and your progress are never transmitted anywhere unless you turn on Premium sync, and if you do, they are locked before they leave and we cannot open them. The same fact has a cost worth knowing before you rely on it: if you lose your recovery code and lose your devices, that backup cannot be opened by anyone, including us, and there is no reset link. This website is a separate thing from the app and does use analytics; see Analytics and tracking below.
Three exceptions. The first two are about the subscription.
Buying the Mac or Windows version direct. Those are sold from this website, so that purchase needs something to check. For those customers we store an email address, a Stripe customer and subscription id, the subscription's status and billing cycle, and a one-way hash of each device that has used the purchase.
Signing in with an email address, if you choose to. Nothing asks you to, and most people never will; see Accounts and sign-in for when it is worth it. If you do, we store the address, a one-way hash of each six digit code while it is live, a one-way hash of each device that has signed in with an optional label like "Lee's MacBook" so you can recognize your own devices, and the times sessions were issued.
That is the entire footprint of those two. Neither receives, and neither has a code path that could receive, anything about a journey, a check-in, a day count, a reveal style, or a photo.
A bug report or feature request, if you send one. Settings in the app has Report a Bug and Feature Request. If you use one, we receive what you write, up to three screenshots if you attach them, your email address if you give it so we can reply, the language your app is set to, and the app version, system version and type of device. If you write in a language other than English, Cloudflare, which runs this service, translates the text into English for us with its translation model. Nothing else goes with it: no journey, no journey photo, no check-ins and no settings. We use it only to fix the problem and to write back to you, and we delete it whenever you ask.
Where your data lives
Your dream photo, journey settings, check-in history, and reveal progress are stored locally on your device, inside an app group container. The one exception is Premium's cross-platform sync, which you switch on yourself and which is described in Cross-platform sync below. This data is only ever accessed by the Reveal the Dream app and its home screen widget, both running on your own device. None of it is uploaded to any server we operate. The only server we run holds the license records and any bug reports and feature requests described above, and your journeys never reach it. If your device or computer backs itself up, that backup is yours and goes wherever you have pointed it, never to us. We are not part of it and cannot see it.
Notifications
Your reminders are local. The daily check-in reminder is scheduled entirely on your device. Its content is never routed through a remote push service, no notification content or delivery data is sent anywhere, and we never see that a reminder fired or that you acted on it.
One silent signal is not local, and it is worth naming. On an Apple device signed in to iCloud, the app asks Apple to nudge it when your own iCloud copy of your journeys changes, so a device can pick up a change without waiting for you to open it. That nudge is empty: it carries no journey, no photo and no message, and nothing is ever shown to you because of it. It is delivered by Apple as part of iCloud. No server of ours is involved, and we do not see it happen. If you are not signed in to iCloud, or you are on Windows or Android, it does not exist at all.
Accounts and sign-in
You never have to make one. Nothing in the app is behind a sign-in. You open it, pick a photo, and start a journey, and if you buy Premium on your phone and use it on that phone, you will never be asked for an address at all. Nothing about your journeys is tied to your identity in any case.
What the optional sign-in is for. One thing: carrying a subscription across platforms. Apple cannot see what you bought from Google, and neither can see what you bought from us, so if you subscribe on your iPhone and want Premium on your Windows PC, something has to connect the two. You give us an email address, we post a six digit code to it, and typing that code back proves the mailbox is yours. That unlocks Premium on the second device and does nothing else. No journey, no check-in and no photo travels with it, and there is no password to choose or to lose.
Signing in is not a restore. It carries the subscription, never the content. If you want your journeys on a second device, that is Cross-platform sync, which is separately switched on and is protected by a recovery code we never see.
What we keep while you are signed in is listed under What we collect: the address, hashed sign-in codes while they are live, a hashed identifier and optional label per device, and when sessions were issued. Not your name, not your location, and nothing from inside the app.
You can delete it from inside the app, on every platform that has it, without emailing us. What that deletes, and the one small thing it deliberately does not, is under Deleting your data.
Analytics and tracking
The app has none. Reveal the Dream itself uses no analytics tools, no crash reporters, no advertising identifiers, and no tracking technology of any kind. Your use of the app is not measured, profiled, or shared with anyone, including us. Nothing about a journey, a check-in, a photo, or a setting ever leaves your device.
This website uses Microsoft Clarity. It tells us which pages people read and where they get stuck, so we can fix the parts that do not work. It records pages visited, clicks, scrolling, and how a page laid itself out on your screen. It is never used for advertising, we never sell it, and it has no connection whatsoever to the app or to anything stored inside it.
Clarity runs on every page of this website. If you would rather it did not, a content blocker or your browser's tracking protection will stop it, and nothing on this site depends on it working.
Two things are kept out of it deliberately. Everything you type into a form here is masked before any recording is made, so your name, your email address, your support message and the goal you try in the demo are never captured. And the page you land on after buying is excluded from Clarity entirely, because its address carries a reference to your purchase and what you bought is nobody else's business.
Cross-platform sync
On the free version, nothing is uploaded to us. Your journeys back up through your own iCloud account or your own Google account, exactly as they always have. Apple devices stay in step with each other, Android devices stay in step with each other, and we are not part of it.
Premium adds one thing: keeping your journeys in step across platforms, which is the part Apple and Google cannot do for each other. Your iPhone and your Windows PC. Your Android phone and your Mac. It is off until you turn it on.
When it is on, a copy of your journeys and their photos is encrypted on your device before it leaves it. We hold that encrypted copy so it can be handed to your other devices. We cannot read it, and we cannot help you read it if you lose the means to.
It is one current copy. There is no version history. We do not keep last week's. That means deleting really is deleting. Older snapshots do not keep a copy.
| Situation | What happens to the copy |
|---|---|
| Your subscription is active | Kept |
| Your subscription ends | Kept for 90 days, then permanently deleted |
| You turn sync off | Deleted within 30 days |
| You ask us to delete it | Deleted, and we confirm when it is done |
Ninety days is deliberate. A product whose whole promise is that your journeys cannot be lost must not delete them because a card expired while you were away. Ninety days survives a failed payment, a holiday, and a month of not noticing.
Subscriptions and payment
Reveal the Dream offers optional auto-renewable subscriptions, billed monthly or annually. On the App Store and Google Play these are processed entirely by the store you purchased through. Buying the Mac or Windows version direct is processed by Stripe. In every case we never see, receive, or store your card details. On iOS, Apple handles billing, receipts, and renewal according to its own privacy practices. See Apple's Privacy Policy. On Android, Google handles billing, receipts, and renewal through the Play Store according to its own privacy practices. See Google's Privacy Policy.
Third parties
The app integrates no third-party SDKs, advertising networks, or data brokers. Nothing about your journeys ever leaves your device to be shared with, sold to, or processed by anyone.
This website uses three, and only for the things named here. Stripe processes your payment if you buy the Mac or Windows version direct. Resend delivers email: your six digit sign-in code, a reply to the support form, the mailing list if you join it, and bug reports and feature requests you send from the app, which it delivers to us. Microsoft provides the Clarity analytics described above. None of the three has any access to the app, to your photo, or to anything stored on your device.
Children's privacy
The app collects no personal data unless someone chooses to sign in or send a bug report or feature request, and it does not knowingly collect personal information from children.
Deleting your data
The app. Everything about your journeys lives on your device, so deleting the app permanently removes your dream photo, your check-in history and all app data from it. If you never turned on cross-platform sync and never signed in, we have nothing to delete on our end, because we never had anything.
The encrypted sync copy, if you turned that on, is covered by the table under Cross-platform sync: turning sync off deletes it within 30 days, and you can ask us to delete it at any time and we confirm when it is done.
The account, if you made one. There is a Delete Account button inside the app, on every platform that offers signing in. Pressing it deletes, permanently and at once: the encrypted sync copy and every photo in it, your email address, every device record and sign-in code belonging to you, the record of sessions issued, and the row that held your subscription's status. There is no flag we could clear to bring any of it back.
A bug report or feature request you sent: email us and we delete it.
Without the app. Email hello@littlebirdtrading.com from the address on your account and we delete the same things for you, and write back when it is done.
Two things it deliberately does not do, and both are worth stating plainly.
It does not cancel your subscription, because canceling is a money action and we do not think a button labeled "delete my account" should quietly take one. An App Store or Google Play subscription can in any case only be canceled by the person who bought it, in their own store settings. When you delete, we tell you what is still going to bill you and where to stop it.
And it keeps one identifier, forever: the customer id that Stripe, our payment processor, uses for you. Nothing else. Not your email address, not your name, not a key, and nothing whatsoever about your journeys. The reason is that we leave the subscription running, so the next routine message Stripe sends us about it would otherwise find no customer, create one from scratch, and quietly restore the account you just deleted, weeks later, with nobody involved. Keeping that one id is what stops that happening. It exists to enforce your deletion, and if you ever choose to buy from us again, that new purchase clears it and starts a fresh record.
Purchase and payment records held by Stripe, Apple or Google are theirs and are subject to their own retention obligations. We cannot delete those on your behalf, and we never held your card details in the first place.
Changes to this policy
If this policy changes, we'll update the effective date above and post the revised policy at this same address. Continued use of the app after a change means you accept the updated policy.
Contact us
Questions about this policy? Reach us at hello@littlebirdtrading.com.