Oneira Privacy Policy

Effective October 2, 2026

Who we are

Oneira (the web app at oneira.happyheartsoftware.com and its Android app) is made by Happy Heart Software LLC, doing business as Happy Heart Software, based in Ohio, USA ("Happy Heart Software", "we", "us"). This policy covers Oneira only.

What stays on your device

• Your dream journal: entries, titles, tags, moods, lucidity and vividness ratings, and unsaved drafts.
• Your practice: reality checks, technique courses, Wake Back to Bed sessions, lessons read and dream signs.
• Your profile and settings: goals, sleep schedule, chosen technique, reminder settings, milestones, theme and text size.

This is kept in the app's storage on your phone, or in your browser's storage on the website. Without an account, we never receive it. If Android backup is turned on for your phone, Android may include the app's data in your Google backup.

Dream signs are found on your device by counting words and tags across your entries. No AI service or server reads your journal.

Reminders and alarms

Reality check reminders, the morning journal prompt and the Wake Back to Bed alarm are scheduled on your phone. We don't send push notifications. On the website, reminders only appear while Oneira is open.

Optional account and encrypted backup

You can use Oneira fully without an account. If you create one, Oneira backs up your journal, practice and profile (not your theme, text size or drafts) and keeps your devices in step.

• Encrypted on your device. Before anything leaves your device, it's encrypted with a key that only your password or your recovery key can unlock. Your password and recovery key never reach us.
• What our server stores: your email address, a check value derived from your password (stored only after hashing it again), your encryption key locked by your password and by your recovery key, the encrypted records, and sign-in sessions. We can see how many records you have, their sizes and when they last changed, but not what they say.
• Your email is used only to sign you in. We don't send you email or marketing.
• Security: to protect accounts, our server counts failed sign-ins and briefly limits repeated attempts from the same IP address.

Because we can't read your backup, we can't reset your password for you. If you lose both your password and your recovery key, your backup can't be opened by anyone, including us.

Contacting us

If you use the contact form, your message, the topic you pick, your email address and your name (optional) are delivered to our inbox through Heartforms, our own form service, which keeps a copy so we can answer you, along with the app version and whether you're using Android or the web. Please don't include dream details you want to keep private. The Email us button opens your own email app instead.

Updates to the Android app

While Oneira's Android app is installed from our website, it checks oneira.happyheartsoftware.com for a newer version when it opens. This sends nothing about you beyond the request itself.

What we don't do

There are no ads, analytics, tracking or crash reporting, and Oneira doesn't set cookies. We don't sell your information or share it for advertising. The Android app asks only for permission to show notifications.

Services involved

• Cloudflare hosts the website, the Android app download and our backup server and database, and keeps request logs, including IP addresses, for security.
• Heartforms, our own form service, receives contact form messages and keeps a copy until we delete it. It runs on Cloudflare and sends the email through Resend. Our inbox is hosted by Google Workspace.

Deleting your data

• Delete any dream from your journal. With backup on, the deletion reaches your other devices too.
• Settings, Account & backup, Delete account and backup removes your account and everything backed up with it from our server straight away. Copies in our database's recovery history are gone within 30 days. Your journal stays on your device.
• Signing out stops backing up and leaves your journal on your device.
• Uninstalling the app, or clearing this site's data in your browser, removes everything Oneira stored on that device.

Health information

Oneira offers general information about sleep and lucid dreaming, not medical advice. If sleep problems, nightmares or anything else affects your health, talk with a doctor.

Children

Oneira isn't directed to children under 13, and we don't knowingly collect their personal information. If you believe a child has sent us information, contact us and we'll delete it.

Your choices and rights

You can ask us what personal information we hold about you, and ask us to correct or delete it. Email contact@happyheartsoftware.com and we'll help. Depending on where you live, you may have additional rights, and we'll honor them.

Changes to this policy

If we change this policy, we'll post the new version here and update the date at the top. If a change affects information we already hold, we'll tell you in the app before it takes effect.

Contact us

Questions about your privacy? Email contact@happyheartsoftware.com.