Oneira Privacy Policy

Effective October 26, 2026

Who we are

Oneira (the web app at oneira.happyheartsoftware.com and its Android app) is made by Happy Heart Software LLC, doing business as Happy Heart Software, based in Ohio, USA ("Happy Heart Software", "we", "us"). This policy covers Oneira only.

What stays on your device

• Your dream journal: entries, titles, tags, moods, lucidity and vividness ratings, plans for next time you saved from Oneira Plus, and unsaved drafts.
• Your practice: reality checks, technique courses, Wake Back to Bed sessions, lessons read, and dream signs with any reminder text you kept from Oneira Plus.
• Your profile and settings: goals, sleep schedule, chosen technique, reminder settings, milestones, theme, text size, motion and haptics settings, and which milestones you've already been shown.

This is kept in the app's storage on your phone, or in your browser's storage on the website. Without an account, we never receive it. If Android backup is turned on for your phone, Android may include the app's data in your Google backup.

On the website, your browser also keeps a copy of Oneira's own files (its code, images and fonts, none of your data) so the app opens without a connection. Clearing the site's data in your browser removes it, along with your journal on that browser.

Dream signs are found on your device by counting words and tags across your entries. No AI service or server reads your journal, except for what you choose to send with Oneira Plus, one request at a time, after confirming exactly what goes (see below).

Oneira Plus (optional)

Oneira Plus is an optional paid add-on that uses AI to help with your dreams and dream signs. It comes from Happy Heart Plus (plus.happyheartsoftware.com), which handles your Plus, buying and AI requests under its own privacy policy. "Get Plus", "Manage Plus" and "Add credits" open Plus's pages.

• Signing in. Plus uses a Happy Heart Software account, separate from the backup account above. Signing in happens on accounts.happyheartsoftware.com, under its own privacy policy. Oneira receives your account ID and email address (to show who's signed in) and sign-in tokens, which it keeps on this device (in the phone's secure storage, or the browser's storage on the website) and sends only to Plus, and to the accounts service to renew them. Signing in sends nothing from your journal.
• What is sent, and when. Nothing is sent until you tap one of the features below and confirm a dialog that says exactly what goes. Each sends only what's listed, once, with your sign-in, and never a dream's date, ratings, mood or tags. Nothing is sent automatically or in the background.
  • Find dream signs, Make a plan for next time and Find almost-lucid moments (on one dream): that dream's title and text (up to 4,000 characters). A plan also sends the names of your dream signs that appear in that dream (up to 5).
  • Suggest a title (on one dream without a title): that dream's text (up to 4,000 characters).
  • Write reminder prompts (Dream signs): the names and kinds of up to 10 of your dream signs. No dream is sent.
  • Find patterns in recent dreams (Dream signs): your most recent dreams that have text, up to 14 of them, with only each one's title and text (up to 2,000 characters each), and the names of the dream signs already on your list. The dialog says how many dreams and which nights before anything is sent.
• What comes back. Plus gets an answer from an AI model and returns it to you, without keeping what you sent or got back. Answers are shown only on your device. Only what you choose to keep is saved, like anything else you write in Oneira: dream signs you add, a plan you save on a dream, a title you pick, or reminder text you keep for a dream sign (you can go back to the usual text). Almost-lucid moments aren't saved.
• Your Plus status. While you're signed in, Oneira asks Plus whether you have Oneira Plus and how many credits are left, when it opens and when you come back to it. That request carries only your sign-in.
• Signing out of Plus (Settings, Oneira Plus) removes the sign-in from this device; on the website it also signs you out of the accounts service.

Journal lock

If you turn on the optional journal lock (Settings, Journal lock), Oneira keeps a salted hash of your PIN on this device, never the PIN itself, and it isn't backed up or included in your data download. If you also turn on fingerprint unlock, your phone checks your fingerprint or face and only tells Oneira whether it matched; Oneira never receives it. The lock hides the journal from other people using the device; it doesn't encrypt it. "Forgot your PIN?" erases Oneira's data on this device and signs it out of backup.

Downloading your data

Settings, Your data, Download my data saves a copy of everything above (except unsaved drafts) as a JSON file. The file is made on your device and is never sent to us. On Android, your phone's share sheet opens so you can choose where it goes, such as your Files app or Google Drive; on the website, your browser downloads it. Once saved, the file is yours to keep, and whoever can open it can read your journal, so keep it somewhere private.

Reminders and alarms

Reality check reminders (including ones tied to your dream signs), bedtime reminders, the morning journal prompt and the Wake Back to Bed alarm are scheduled on your phone. We don't send push notifications. A reminder tied to a dream sign shows that sign's name (or the reminder text you kept for it), so it can appear on your lock screen like any notification. On the website, reminders only appear while Oneira is open.

Optional account and encrypted backup

You can use Oneira fully without an account. If you create one, Oneira backs up your journal, practice and profile (not your theme, text size, motion, haptics or drafts) and keeps your devices in step.

• Encrypted on your device. Before anything leaves your device, it's encrypted with a key that only your password or your recovery key can unlock. Your password and recovery key never reach us.
• What our server stores: your email address, a check value derived from your password (stored only after hashing it again), your encryption key locked by your password and by your recovery key, the encrypted records, and sign-in sessions. We can see how many records you have, their sizes and when they last changed, but not what they say.
• Your email is used only to sign you in. We don't send you email or marketing.
• Security: to protect accounts, our server counts failed sign-ins and briefly limits repeated attempts from the same IP address.

Because we can't read your backup, we can't reset your password for you. If you lose both your password and your recovery key, your backup can't be opened by anyone, including us.

Contacting us

If you use the contact form, your message, the topic you pick, your email address and your name (optional) are delivered to our inbox through Heartforms, our own form service, which keeps a copy so we can answer you, along with the app version and whether you're using Android or the web. Please don't include dream details you want to keep private. The Email us button opens your own email app instead.

The news by email link opens the signup on our company blog (blog.happyheartsoftware.com), outside the app. If you sign up there and confirm, we receive your email address and use it only to email you new posts, at most once a month; the blog's privacy policy covers it. Oneira itself sends nothing when you tap the link.

Updates to the Android app

While Oneira's Android app is installed from our website, it checks oneira.happyheartsoftware.com for a newer version when it opens. This sends nothing about you beyond the request itself.

What we don't do

There are no ads, tracking or crash reporting, and Oneira doesn't set cookies. Apart from the cookieless visit counts on the web version (see Analytics), Oneira doesn't measure how you use it. We don't sell your information or share it for advertising. The Android app asks only for permission to show notifications.

Analytics

The web version of Oneira uses Cloudflare Web Analytics to count visits. It's run by Cloudflare, which already hosts Oneira, not by an advertising company. It doesn't use cookies or store anything on your device, doesn't give you an identifier, and doesn't follow you to other websites, so nothing links separate visits back to you.

It records, in total across all visitors:

• which pages were viewed and the site that linked to them (the referrer)
• the general browser, operating system and device type
• the approximate country, worked out from your IP address, which isn't used to identify you
• how quickly pages loaded

The Android app doesn't use Cloudflare Web Analytics or any other analytics tool.

Services involved

• Cloudflare hosts the website, the Android app download and our backup server and database, provides visit counts for the web version (Cloudflare Web Analytics), and keeps request logs, including IP addresses, for security.
• Happy Heart Plus and Happy Heart Software accounts, our own services, run Oneira Plus and its sign-in, only if you use it. Their privacy policies (linked above) list the services they use, including the AI model providers.
• Heartforms, our own form service, receives contact form messages and keeps a copy until we delete it. It runs on Cloudflare and sends the email through Resend. Our inbox is hosted by Google Workspace.

Deleting your data

• Delete any dream from your journal. With backup on, the deletion reaches your other devices too.
• Settings, Account & backup, Delete account and backup removes your account and everything backed up with it from our server straight away. Copies in our database's recovery history are gone within 30 days. Your journal stays on your device.
• Signing out stops backing up and leaves your journal on your device.
• Signing out of Oneira Plus removes its sign-in from your device. Your Plus purchases and account are managed on Plus's and the accounts service's own pages.
• Uninstalling the app, or clearing this site's data in your browser, removes everything Oneira stored on that device.

Health information

Oneira offers general information about sleep and lucid dreaming, not medical advice. If sleep problems, nightmares or anything else affects your health, talk with a doctor.

Children

Oneira isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has sent us information, contact us and we'll delete it.

Your choices and rights

You can ask us what personal information we hold about you, and ask us to correct or delete it. Email contact+oneira@happyheartsoftware.com and we'll help. Depending on where you live, you may have additional rights, and we'll honor them.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top. If a change affects information we already hold, we'll tell you in the app before it takes effect.

Contact us

Questions about your privacy? Email contact+oneira@happyheartsoftware.com.