The short version: Reveal the Dream is built to be private by default. Everything you enter stays on your device: your dream photo, your check-ins, your progress, your settings. We don't collect it or see it. If you turn on Premium sync, a copy is locked on your device and handed to your other devices through us, and we cannot open it; see Cross-platform sync below. Using the app needs no account, on any platform. There is an optional email sign-in with exactly one job, which is carrying a subscription you bought on one platform to another; it is described in Accounts and sign-in, and nothing about your journeys goes with it. Buying the Mac or Windows version direct from us also needs an email address, because that is how a purchase is issued and recovered. This website, separately from the app, uses Microsoft Clarity to see which pages are useful.
What we collect
Nothing about your journeys, ever. The app has no analytics, no tracking, and no third-party SDKs that gather information about you or your device. Your photo, your check-ins and your progress are never transmitted anywhere unless you turn on Premium sync, and if you do, they are locked before they leave and we cannot open them. The same fact has a cost worth knowing before you rely on it: if you lose your recovery code and lose your devices, that backup cannot be opened by anyone, including us, and there is no reset link. This website is a separate thing from the app and does use analytics; see Analytics and tracking below.
Two exceptions, and both are about the SUBSCRIPTION rather than about you or your journeys.
Buying the Mac or Windows version direct. Those are sold from this website rather than through an app store, so that purchase needs something to check. For those customers we store an email address, a Stripe customer and subscription id, the subscription's status and billing cycle, and a one-way hash of each device that has used the purchase.
Signing in with an email address, if you choose to. Nothing asks you to, and most people never will; see Accounts and sign-in for when it is worth it. If you do, we store the address, a one-way hash of each six digit code while it is live, a one-way hash of each device that has signed in with an optional label like "Lee's MacBook" so you can recognize your own devices, and the times sessions were issued.
That is the entire footprint of both. Neither receives, and neither has a code path that could receive, anything about a journey, a check-in, a day count, a reveal style, or a photo.
Where your data lives
Your dream photo, journey settings, check-in history, and reveal progress are stored locally on your device, inside an app group container. The one exception is Premium's cross-platform sync, which you switch on yourself and which is described in Cross-platform sync below. This data is only ever accessed by the Reveal the Dream app and its home screen widget, both running on your own device. None of it is uploaded to any server we operate. The only server we run holds the license records described above, and your journeys never reach it. If your device or computer backs itself up, that backup is yours and goes wherever you have pointed it, never to us. We are not part of it and cannot see it.
Notifications
Reveal the Dream uses local notifications only, scheduled entirely on your device to remind you about your daily check-in. These notifications are never routed through a remote push service and no notification content or delivery data is sent anywhere.
Accounts and sign-in
You never have to make one. Nothing in the app is behind a sign-in. You open it, pick a photo, and start a journey, and if you buy Premium on your phone and use it on that phone, you will never be asked for an address at all. Nothing about your journeys is tied to your identity in any case.
What the optional sign-in is for. One thing: carrying a subscription across platforms. Apple cannot see what you bought from Google, and neither can see what you bought from us, so if you subscribe on your iPhone and want Premium on your Windows PC, something has to connect the two. You give us an email address, we post a six digit code to it, and typing that code back proves the mailbox is yours. That unlocks Premium on the second device and does nothing else. No journey, no check-in and no photo travels with it, and there is no password to choose or to lose.
Signing in is not a restore. It carries the subscription, never the content. If you want your journeys on a second device, that is Cross-platform sync, which is separately switched on and is protected by a recovery code we never see.
What we keep while you are signed in is listed under What we collect: the address, hashed sign-in codes while they are live, a hashed identifier and optional label per device, and when sessions were issued. Not your name, not your location, and nothing from inside the app.
You can delete it from inside the app, on every platform that has it, without emailing us. What that deletes, and the one small thing it deliberately does not, is under Deleting your data.
Analytics and tracking
The app has none. Reveal the Dream itself uses no analytics tools, no crash reporters, no advertising identifiers, and no tracking technology of any kind. Your use of the app is not measured, profiled, or shared with anyone, including us. Nothing about a journey, a check-in, a photo, or a setting ever leaves your device.
This website uses Microsoft Clarity. It tells us which pages people read and where they get stuck, so we can fix the parts that do not work. It records pages visited, clicks, scrolling, and how a page laid itself out on your screen. It is never used for advertising, we never sell it, and it has no connection whatsoever to the app or to anything stored inside it.
Clarity runs on every page of this website. If you would rather it did not, a content blocker or your browser's tracking protection will stop it, and nothing on this site depends on it working.
Two things are kept out of it deliberately. Everything you type into a form here is masked before any recording is made, so your name, your email address, your support message and the goal you try in the demo are never captured. And the page you land on after buying is excluded from Clarity entirely, because its address carries a reference to your purchase and what you bought is nobody else's business.
Cross-platform sync
On the free version, nothing is uploaded to us. Your journeys back up through your own iCloud account or your own Google account, exactly as they always have. Apple devices stay in step with each other, Android devices stay in step with each other, and we are not part of it.
Premium adds one thing: keeping your journeys in step across platforms, which is the part Apple and Google cannot do for each other. Your iPhone and your Windows PC. Your Android phone and your Mac. It is off until you turn it on.
When it is on, a copy of your journeys and their photos is encrypted on your device before it leaves it. We hold that encrypted copy so it can be handed to your other devices. We cannot read it, and we cannot help you read it if you lose the means to.
It is one current copy, not a version history. We do not keep last week's. That means deleting really is deleting, rather than removing something from the most recent snapshot while older ones survive.
| Situation | What happens to the copy |
|---|---|
| Your subscription is active | Kept |
| Your subscription ends | Kept for 90 days, then permanently deleted |
| You turn sync off | Deleted within 30 days |
| You ask us to delete it | Deleted, and we confirm when it is done |
Ninety days is deliberate. A product whose whole promise is that your journeys cannot be lost must not delete them because a card expired while you were away. Ninety days survives a failed payment, a holiday, and a month of not noticing.
Subscriptions and payment
Reveal the Dream offers optional auto-renewable subscriptions, billed monthly or annually. On the App Store and Google Play these are processed entirely by the store you purchased through. Buying the Mac or Windows version direct is processed by Stripe. In every case we never see, receive, or store your card details. On iOS, Apple handles billing, receipts, and renewal according to its own privacy practices. See Apple's Privacy Policy. On Android, Google handles billing, receipts, and renewal through the Play Store according to its own privacy practices. See Google's Privacy Policy.
Third parties
The app integrates no third-party SDKs, advertising networks, or data brokers. Nothing about your journeys ever leaves your device to be shared with, sold to, or processed by anyone.
This website uses three, and only for the things named here. Stripe processes your payment if you buy the Mac or Windows version direct. Resend delivers email: your six digit sign-in code, a reply to the support form, and the mailing list if you join it. Microsoft provides the Clarity analytics described above. None of the three has any access to the app, to your photo, or to anything stored on your device.
Children's privacy
Because the app collects no personal data from anyone, it does not knowingly collect personal information from children. There is nothing on our end to collect regardless of age.
Deleting your data
The app. Everything about your journeys lives on your device, so deleting the app permanently removes your dream photo, your check-in history and all app data from it. If you never turned on cross-platform sync and never signed in, we have nothing to delete on our end, because we never had anything.
The encrypted sync copy, if you turned that on, is covered by the table under Cross-platform sync: turning sync off deletes it within 30 days, and you can ask us to delete it at any time and we confirm when it is done.
The account, if you made one. There is a Delete Account button inside the app, on every platform that offers signing in. Pressing it deletes, permanently and at once: the encrypted sync copy and every photo in it, your email address, every device record and sign-in code belonging to you, the record of sessions issued, and the row that held your subscription's status. There is no flag we could clear to bring any of it back.
Two things it deliberately does not do, and both are worth stating plainly rather than discovering.
It does not cancel your subscription, because canceling is a money action and we do not think a button labeled "delete my account" should quietly take one. An App Store or Google Play subscription can in any case only be canceled by the person who bought it, in their own store settings. When you delete, we tell you what is still going to bill you and where to stop it.
And it keeps one identifier, forever: the customer id that Stripe, our payment processor, uses for you. Nothing else. Not your email address, not your name, not a key, and nothing whatsoever about your journeys. The reason is that we leave the subscription running, so the next routine message Stripe sends us about it would otherwise find no customer, create one from scratch, and quietly restore the account you just deleted, weeks later, with nobody involved. Keeping that one id is what stops that happening. It exists to enforce your deletion rather than to remember you, and if you ever choose to buy from us again, that new purchase clears it and starts a fresh record.
Purchase and payment records held by Stripe, Apple or Google are theirs and are subject to their own retention obligations. We cannot delete those on your behalf, and we never held your card details in the first place.
Changes to this policy
If this policy changes, we'll update the effective date above and post the revised policy at this same address. Continued use of the app after a change means you accept the updated policy.
Contact us
Questions about this policy? Reach us at hello@littlebirdtrading.com.