Privacy Policy

Last updated: 14 May 2026

At Murkaverse ("we," "our," or "us"), operated by Dreamwarden OÜ, we are committed to protecting your privacy and the personal nature of the dreams you share with us. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it when you use the Murkaverse mobile application and any related web services (together, the "Service").

This policy is designed to mirror the App Privacy disclosures we provide to the Apple App Store and to comply with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

1. Data We Collect

We collect the following categories of data when you use Murkaverse. Each category is limited to what is necessary to operate the Service.

1.1 Contact Information

• Name. Provided by you when you create an account or use a profile feature.
• Email Address. Provided by you at sign-up, for account access, transactional communications, and customer support.

These are used for App Functionality and are linked to your identity.

1.2 Profile Information

At sign-up, we ask for a small set of profile details that help us personalise the way dream interpretations are framed and that give us a basic understanding of who uses the Service.

• Date of birth (required). Used to confirm that you are 18 or over, and to give context to interpretations (for example, life stage often affects the meaning of a recurring symbol).
• Cultural background (optional). Used to ground interpretations in symbolic traditions that may be more familiar or relevant to you. You can leave this blank.
• Gender (optional). Used to inform how interpretations are framed, where relevant. You can leave this blank or select "Prefer not to say."
• Occupation (optional). Used to give interpretations relevant context (work themes, role-related anxieties, etc.). You can leave this blank.

1.3 User Content

• Other User Content, your dreams and conversations. When you record a dream in the Dream Calendar or share dream content with Murka, our AI companion, that content is collected so we can return an interpretation and store it in your private archive. Dream content may include personal experiences, emotions, and other sensitive details.

This is used for App Functionality and is linked to your identity within your account. See Section 4 below for how we handle this content in greater detail.

1.4 Identifiers

• User ID. A unique account identifier that allows us to associate your dream archive, settings, and Dreamdust balance with your account.

This is used for App Functionality and is linked to your identity.

1.5 Analytics and Diagnostics

• App Usage Analytics. Collected via Google Firebase Analytics, linked to your user ID so we can understand which features are used and diagnose issues.
• Crash Reports. Collected via Google Firebase Crashlytics, used to identify and fix bugs.

Firebase Analytics is used for App Functionality and Analytics, and is linked to your identity via your user ID. Firebase Crashlytics is used for App Functionality and is not linked to your identity.

1.6 What We Do Not Collect

We do not collect precise or coarse location data, contacts, photos, browsing history outside the app, financial information, health data, advertising identifiers, or any other category not listed above. We do not use third-party advertising networks and we do not sell your personal data.

2. How We Use Your Data

We use the data described above only for the following purposes:

• Providing the Service. Operating your account, the Dream Calendar, your conversations with Murka, and the Dreamdust in-app currency.
• AI Dream Interpretation. Processing the dream content you share so that Murka can respond. See Section 3 for how this works.
• Communicating with You. Sending transactional messages such as account confirmations, security alerts, subscription information, and replies to support requests.
• Improving the Service. Using anonymised dream content and aggregated usage signals to refine and improve our prompts, interpretation quality, and overall product experience. See Section 4 for the safeguards we apply.
• Security and Abuse Prevention. Detecting and preventing fraud, abuse, and misuse of the Service.
• Legal Compliance. Meeting our legal obligations and, where necessary, responding to lawful requests.
• Understanding our user base. Using aggregated, non-identifying profile data to understand who uses Murkaverse and how the Service is used at a population level (for example, broad age distribution, common occupations among users).

Legal Bases (GDPR)

Where GDPR applies, our legal bases for processing your data are:

• Contractual necessity, to provide the Service you have signed up for.
• Legitimate interests, to keep the Service secure, to improve it, and to communicate with you about it, balanced against your rights.
• Consent, for any optional processing where we ask for it explicitly, which you can withdraw at any time.
• Legal obligation, where we are required to retain or disclose data by law.

3. Sharing of Data and Third-Party Processing

Murkaverse relies on a small number of third-party providers to operate. We disclose the categories below and the data they receive. We do not sell your personal data and we do not share it with advertisers.

3.1 Third-Party AI Providers

What is shared with the AI provider: the text of your dream entries and chat messages, plus prior messages in the same conversation thread to provide context for the AI's response.

What is NOT shared with the AI provider: your name, email address, date of birth, gender, occupation, cultural background, user ID, or any other profile data. None of these are included in any request sent to OpenAI or OpenRouter.

Your dream content and conversation messages with Murka are sent to OpenAI (accessed via the OpenRouter aggregator), which runs the large language models that generate Murka's responses. These providers process your content only to return a response, and they do not use it to train their public models when accessed through the commercial channels we use. Their handling of your data is governed by their own privacy and data-processing terms.

We do not share your name, email address, profile information (date of birth, cultural background, gender, occupation), or other contact information with OpenAI or OpenRouter as separate data fields. Your profile information is used on our side to shape the prompts we send and to give relevant context to interpretations; only the content of your dream entries and conversation messages, along with a non-identifying technical reference, is transmitted. By using Murkaverse, you acknowledge and agree to this AI processing by OpenAI (via OpenRouter) of your dream content for the purpose of providing the Service.

We have reviewed OpenAI's API Data Usage Policies and OpenRouter's data handling policies and consider them to provide protections substantially equivalent to those set out in this Privacy Policy. Specifically: (a) data sent through OpenAI's commercial API is not used to train their public models, (b) data is retained for up to 30 days for abuse monitoring before deletion, and (c) OpenRouter does not store request content beyond what is necessary for routing the request to the upstream provider.

3.2 Infrastructure and Service Providers

We use third-party providers for hosting, database storage, authentication, subscription and entitlement management, crash and performance reporting, transactional email delivery, and customer support. These providers process data only on our instructions and only to the extent needed to provide their service to us. They are bound by data processing agreements that meet GDPR Article 28 requirements.

Specifically, we use Google Firebase Analytics and Firebase Crashlytics for app usage analytics and crash reporting. Google's data processing terms provide protections substantially equivalent to those in this Privacy Policy.

3.3 App Store Platforms

When you purchase a subscription or Dreamdust top-up, the transaction is processed by Apple (App Store) or Google (Google Play). We do not see or store your full payment details. Apple and Google's handling of your purchase data is governed by their respective privacy policies.

3.4 Legal Requirements

We may disclose your data if required by law, valid legal process, or where necessary to protect the rights, property, or safety of Murkaverse, our users, or the public.

3.5 No Sale of Data

We do not sell your personal data. We do not share it with advertisers. We do not use it for behavioural advertising on or off the Service.

4. Dream Content, How We Handle It

Your dreams are personal. We treat them accordingly.

• Storage. Dreams you record in the Dream Calendar and conversations you have with Murka are stored as part of your private archive within your account, so that you can return to them over time.
• No public exposure. Your dream content is not visible to other users.
• Your control. You can export your data at any time and you can delete your account, which will remove your personal dream archive from active systems. See Section 6.
• Retention. Dream content is retained while your account is active and you have not requested deletion. We do not commit to a fixed retention window because users typically value the ability to revisit their archive over long periods, but you can remove individual entries, export your data, or delete your account at any time.

5. Data Security

We apply industry-standard technical and organisational measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) for all communication between the app and our servers.
• Encryption at rest for stored personal data, including dream content.
• Access controls limiting which staff and systems can access user data.
• Authentication and session management designed to prevent unauthorised account access.
• Regular review of our security posture and the security practices of our processors.

No system is perfectly secure. We encourage you to use a strong, unique password and to keep your device secure.

6. Your Rights

You have rights over your personal data. Where GDPR or comparable laws apply, these include:

• Access, request a copy of the personal data we hold about you.
• Correction, ask us to correct inaccurate or incomplete data.
• Deletion, ask us to delete your account and associated data. This is also available directly in the app.
• Portability, request an export of your data in a portable format. Murkaverse also provides a self-serve export option in the app.
• Restriction and Objection, ask us to limit or stop certain processing.
• Withdraw Consent, withdraw consent for any processing based on consent.
• Complain, lodge a complaint with your local data protection authority. In Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise any of these rights, contact us at support@murkaverse.com.

7. International Transfers

Murkaverse is operated from Estonia (European Union). Some of our service providers, including AI providers, are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or equivalent mechanisms.

8. Age Requirement

Murkaverse is intended for users aged 18 and over. By creating an account or otherwise using the Service, you confirm that you are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will close the account and delete the associated personal data. If you are a parent or guardian and believe that a minor has provided us with personal data, please contact us at support@murkaverse.com and we will take prompt action.

9. Subscriptions and Dreamdust

Murkaverse offers a free daily allowance of messages with Murka, plus a starter bonus on first use. A subscription extends conversations and unlocks additional features as they are released. Dreamdust top-ups are available between renewals. Subscriptions and purchases are processed by Apple or Google through their respective app stores. Payment details (card numbers, billing addresses, and similar) are handled by Apple and Google, not by us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you in the app, by email, or by updating the "Last updated" date and posting a notice. Your continued use of the Service after an update constitutes acceptance of the revised policy.

11. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or your data, please contact us: