Privacy is part of the circle.

First, a clear boundary

This is a working draft.

This page is a reasonable starting point for legal review. It is not legal advice, it is not DreamCircle’s final Privacy Policy, and it should not be published as final until a qualified New York attorney has reviewed the practice, the vendors, the data flow, and the retention schedule.

What is collected

Only what the work needs.

Contact details

DreamCircle collects the name, email address, and other contact details a dreamer chooses to provide. These details are used to communicate about the submission and deliver the finished translation.

The submitted dream

DreamCircle collects the dream itself and any context the dreamer chooses to include with it. The dream may contain deeply personal material. DreamCircle therefore treats the submitted dream as sensitive information and as protected health information for handling purposes, whether or not HIPAA legally applies in a particular situation.

Dreamers should not place a dream, health information, or other sensitive material in the general contact form. Dreams belong only in the secure intake.

How the dream enters

The dream travels through a protected doorway.

Dream content is submitted through a secure third-party form provider that agrees to handle protected information under a Business Associate Agreement, or BAA. The form provider receives and stores the submission within its protected system.

How it is used

For the translation, and nothing else.

DreamCircle uses the submitted dream only to prepare the dreamer’s written translation. Daniel personally reads the dream, reviews and edits the translation, and signs the work that returns to the dreamer.

Contact details are used only to manage the request, communicate about the service, and deliver the translation. DreamCircle does not use dream content for advertising, audience profiling, public examples, or unrelated research.

DreamCircle never sells personal information

DreamCircle does not sell, rent, trade, or license dream content or contact details. DreamCircle does not share them with data brokers or advertising networks.

Who can access it

A narrow circle, with human responsibility.

Daniel can access the submitted dream. Authorized providers may process it only as needed to operate the secure form, protected storage, delivery workflow, or approved drafting tools, and only under contracts and settings intended for sensitive health information.

Clear disclosure of AI assistance

DreamCircle may use an AI service to help prepare a first-pass draft of a translation. When AI assistance is used, the service receives only the information needed for that task through a protected, BAA-backed workflow. DreamCircle does not permit the service to use a dream for advertising or unrelated model training.

AI does not decide what a dream means and does not send a final translation to the dreamer. Daniel reads the original dream, reviews and changes the draft, and signs the final translation. The dreamer remains the final authority on what rings true.

Security

Care must have a structure.

DreamCircle uses or requires safeguards appropriate to the sensitivity of dream content, including:

• BAAs and confidentiality terms with providers that handle dream content;
• encryption in transit and at rest where the provider supports it;
• access limited to Daniel and authorized providers with a need to perform the service;
• account protections such as strong passwords and multi-factor authentication;
• no dream text in ordinary email, general contact forms, website analytics, or advertising tools;
• vendor review, secure deletion practices, and a process for responding to a suspected breach.

No method of transmission or storage can be guaranteed completely secure. If DreamCircle learns of an incident affecting a dreamer’s information, DreamCircle will investigate and provide notice as required by applicable law.

The legal floor, not the ceiling

Protection does not begin and end with HIPAA.

HIPAA may apply differently depending on Daniel’s clinical relationship with a dreamer and how the service is operated. DreamCircle’s handling standard does not depend on waiting for that answer: dream content is treated as protected health information.

Even where HIPAA may not apply, DreamCircle honors New York privacy and security requirements, including the SHIELD Act where applicable, and applicable Federal Trade Commission health-data rules, including the FTC Health Breach Notification Rule where applicable. These laws may require reasonable safeguards and notices after certain breaches. Attorney review should confirm exactly which requirements apply to the final service and its vendors.

Retention and choice

Kept only as long as the work requires.

DreamCircle’s draft retention position is to keep dream content in the secure provider only for as long as reasonably needed to prepare and deliver the translation, resolve a request, and meet applicable legal or professional obligations. It is then securely deleted. Contact and transaction records are kept only as long as needed for service, tax, legal, and recordkeeping purposes.

Attorney review point: the final policy must state specific retention periods after Daniel confirms professional-record obligations and the selected vendors’ deletion capabilities.

The dreamer’s rights

Subject to applicable law and professional obligations, a dreamer may ask DreamCircle to:

• confirm whether DreamCircle holds the dreamer’s information;
• provide access to or a copy of that information;
• correct inaccurate contact information;
• delete dream content or other personal information;
• explain which providers processed the submission; or
• withdraw a request before the translation is completed.

DreamCircle may need to verify the requestor’s identity and may retain limited information where law or professional duties require it. If a request cannot be honored, DreamCircle will explain why.

Questions and requests

Write to the circle.

For a privacy question, a rights request, or a concern about how information was handled, use the DreamCircle contact page and begin the message with “Privacy.” Do not include a dream or health details in that message.

This DRAFT is for attorney review and is not a final Privacy Policy or legal advice.