Privacy Policy

Last updated: 7 September 2026

Your privacy matters to us. Yardena is built on a few core principles: we only collect what we genuinely need, we never share your personal data with third parties except where required by law or to operate the service, and AI features always require your explicit action.

1. Data Controller

Yardena is an independent product operated by Sikelia Labs (sikelialabs.cloud).
Sikelia Labs
Catania, Sicily, Italy
Email: [email protected]

The official public website for this product is yardena.sikelialabs.cloud.

2. What Data We Collect and Why

Yardena is a local-first app. Most data never leaves your device. We collect the following limited data:

No website signup collection: the website does not currently run email registration forms. Any future preview access is managed through official store channels (for example Google Play). We do not run marketing profiling, ad targeting, or remarketing on this website.
Account-deletion requests: the public deletion page prepares a message in your email app to our published privacy address. The website does not submit or store the typed account email itself. We use the account email only to receive the request and verify ownership before processing it.
Search Console technical monitoring: We may use Google Search Console to monitor indexing, crawl status, search visibility, and site ownership status for public website pages. Search Console is used for technical discoverability only and does not access private dream journal entries stored in the app.
Analytics (optional, consent-based): We use Google Analytics 4 to understand how users interact with our website. This is only activated after you give explicit consent. If you decline, no analytics data is collected.
Infrastructure / security: We use Cloudflare to serve our website and API. Cloudflare may process standard network data (e.g. IP address) as part of DDoS protection and content delivery.
AI reflection requests (when you choose a guide): When you select an AI guide in the app, the text of that specific dream entry is sent to our API for processing. We do not store the raw dream text on our servers beyond the time needed to generate the reflection. Reflections are generated through external AI providers selected by Yardena, and processing can involve transfers to countries outside the EEA depending on provider infrastructure.

3. Cookies and Third-Party Services

See our Cookie Policy for full details. In summary:

Cloudflare: technical cookies necessary for security and content delivery.
Google Search Console: technical monitoring for public pages only, with no marketing cookies set by Yardena for this usage.
Google Analytics 4: analytics cookies, only after your consent.
cookie_consent in localStorage: remembers your cookie preference.

4. Your Rights (GDPR)

If you reside in the European Economic Area (EEA), you have the right to:

Access the personal data we hold about you.
Request correction or deletion of your data.
Object to or request restriction of processing.
Withdraw consent at any time, without affecting prior processing.
Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) at garanteprivacy.it.

To exercise any of these rights, write to us at [email protected]. We will respond within 30 days.

5. Data Transfers

By using Cloudflare infrastructure, Google Search Console for public website visibility, Google Analytics (only after consent), and external AI providers for optional reflections, some technical and request-related data may be transferred to and processed on servers outside the EEA, including the United States. Providers apply contractual and organizational safeguards; where applicable, providers may rely on recognized transfer frameworks such as the EU-US Data Privacy Framework. Cloudflare's transfer safeguards are described in their privacy policy.

6. Data Retention

Consent preference: stored in local browser storage until you clear browser data or update your cookie settings.
AI reflection requests: dream text is not stored after the reflection is generated.
Terminal account security: a limited technical authentication identifier may be retained for up to 7 days + 1 hour, only to stop already-issued sessions or tokens from recreating deleted cloud ownership during their residual validity.
Deletion requests and operational proof: deletion intents, receipts, and operational audit are pseudonymized for up to 90 days.
Economic and legal records: credits, billing, purchase, and reconciliation records are pseudonymized for up to 365 days, or longer where a legal accounting obligation applies.
Provider-neutral anti-abuse: a pseudonymized identifier may be retained for up to 13 months to prevent fraud, repeated promotional or free-credit abuse, and deleted-account restore or reconnection abuse. It is not canonical Yardena identity, cannot restore the deleted account, and contains no dream journal content.
Analytics data: retained in Google Analytics according to your configured retention setting (default: 14 months).
Search Console data: retained under Google's service settings and policies for webmaster tools.

7. Cloud Account Deletion

You can request deletion in the app or through the public account-deletion page, without reinstalling or opening the app. A web request does not directly delete an account based on a typed email: we may contact you at the account email to verify ownership. The process deletes the Yardena cloud account and associated cloud account data. It does not sign you out, delete the local dream journal stored only on your device, or automatically cancel or refund a Google Play subscription. You may need to cancel the subscription through Google Play before deletion can complete.

8. Children's Privacy

Yardena is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Continued use of the app or website after changes constitutes acceptance.