Privacy Protocol

Data Sovereignty • Nueva Vista Ventures, LLC

1. Zero-Training Guarantee

Your dreams are sacred. We never sell them, never share them for anyone else's purposes, and never use them to train any model of ours. Readings are generated through third-party AI processing providers on paid commercial tiers whose terms prohibit using your content to train their models. Your record is isolated and processed solely for your individual journey, and deleting your account erases it.

2. The Vessel Data

We remember the devices you sign in from: a coarse label such as "iPhone · Safari", when each was last active, and a random identifier kept in a cookie on that device for up to two years (we store only a scrambled form of it). This is how we email you when your record is opened on a device it hasn't been opened on before, and how you can see and sign out your devices under Account. Signing out other devices, or securing your record, also forgets those devices. If you choose to add a passkey (Face ID, a fingerprint or your device's screen lock), your face or fingerprint never leaves your device and we never see it; we keep only the passkey's public key, an identifier for it, an anonymous account tag it carries, technical details your device reports (a signature counter and how it connects), which kind of passkey app made it, whether it syncs across your devices, which device it was added from, and when it was added and last used. Our security log notes each passkey sign-in with the device it came from. You can remove a passkey under Account at any time; signing out other devices removes the passkeys added on them, and securing your record removes them all. The rest is kept until you delete your account. This data is never sold to third parties.

3. Sign-Up Context

When you join, we note your time zone, language and device type (phone, tablet or computer) so messages arrive at a sensible hour and in the right language. We do not track your location. If you type where you slept, it is kept with that dream and used only for its reading. This is never sold.

4. Secure Processing

Your record is stored in our own PostgreSQL database, on a server Nueva Vista operates directly, not on a third-party backend platform. Every connection to Somnium is encrypted (TLS). The words of your dreams, your readings, your reflections and your sigils are encrypted with AES-256 before they are written to the database, with a key of your own; those keys are locked by a master key kept in a protected file on our server, separate from the database and never in its backups. Our server uses that key while it runs, because it has to open your record to show it to you and to prepare a reading, so Somnium is not end-to-end encrypted, and we won't say it is. Our nightly backups are encrypted again, with a key that is kept off the server. To generate a reading, we send your dream (its words, or the recording if you spoke it), the details you add such as mood, place and wake time, and context from your record (your earlier dreams in your own words, what you remembered later, and the titles and symbols of earlier readings) over an encrypted connection to one of our AI processing providers. Your sigil's symbol names go to an image model the same way. None of it is used by them for training. A dream you are still writing is kept only on your own device until it reaches your record, and is cleared from the device once it does or when you sign out. We do not store raw audio files once the transcription ritual is complete, and we never sell your dreams or share them with data brokers, advertisers, or any party for their own purposes.

5. Your Reflections

Reflections you write on a reading are private by default. A private reflection stays in your record and is never sent to our AI processing providers. If you choose "Council may remember" on a reflection, it is included as context when the Council reads your future dreams, the same way your earlier dreams are. You can switch a reflection back to private, or delete it, at any time, and deleting your account erases them all.