Privacy Policy

This policy explains how the Aish app and the website aish-talk.com ("Aish", "we") handle your data. The data controller is SmartThings LLP, a company registered in the Republic of Kazakhstan (details at the end of this document). We process data in accordance with the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" and, for users in the European Union, the General Data Protection Regulation (GDPR).

By using the app you agree to this policy. If anything here does not suit you, do not use the app and contact us — we will delete your data.

1. What we collect

Account data

• A guest account is created automatically on first launch: a random user identifier and a device identifier. At that point we know neither your name, phone number, nor email.
• Email address — if you sign in so your journal survives a change of device: we send a one-time sign-in code to it. We also use it to confirm account deletion and to send you the archive of your data.
• Phone number — optional, if you add it as a backup way to sign in when you lose access to your email. That code is sent through Telegram.
• Sign in with Apple or Google — if you choose it, we receive from Apple or Google a permanent account identifier, your email address (with Apple, possibly a private relay address that forwards to your inbox, and only on the first sign-in), and your name if you share it. With Apple we also keep a token that lets us revoke the sign-in when you delete your account. We do not receive your Apple or Google password.
• Preferences: language, time zone, and the options you pick.

Dream conversations

• Voice — audio of what you say is streamed in real time for speech recognition and Aish's reply. If your phone cannot recognize speech itself, the app sends a recording of your reply to our server, which passes it to Google for recognition and returns the text to you; the recording is not stored.
• Conversation text — the transcript of your words and Aish's replies.
• Results — the pictures, comics, videos, and reflections created from your dream, and your dream journal.

Dreams can be deeply personal — about health, relationships, feelings. We process such content only to hold the conversation and create the result. We do not use it for advertising or profiling.

Aish's memory

So that the next conversation can pick up where the last one left off, after each conversation Aish keeps a few short notes about you: how to address you and what you have told about yourself, images that recur in your dreams, one line about each dream, patterns found in practices, and the question where you stopped in the Memory Diary. The notes are written by the Gemini model from the conversation text, and in later conversations they are passed to it together with the instructions so that Aish can draw on them.

• What Aish does not remember: health and diagnoses, sex life, religion and politics, money and debts, addresses, phone numbers, documents, and passwords — even if you talked about them. About other people — nothing beyond their name and who they are to you. So the model that writes the notes is instructed; if such a note appears anyway, you can delete it in the app.
• Your control: memory is on by default. You can view the notes, delete any of them or all at once, and turn memory off in the app: Profile → What Aish remembers. While memory is off, no new notes are made and saved ones are not used in conversations.
• Storage: the notes are stored encrypted in our database. Like conversation text, they appear in Langfuse traces (section 4).

Technical data

• Device model, operating system and app version, app identifiers on the device, system language.
• IP address, request timestamps, error codes, and server logs.
• App usage events (screen opened, conversation started, format chosen) — never the content of your dreams.

Purchases

Sparks and the Pro subscription are bought only inside the app, through the App Store and Google Play. From them we receive a transaction and subscription identifier, the item, the amount and currency, and the status — never your card details. The website does not sell anything.

Waitlist

If you join the waitlist on our website, we keep your email address to confirm your sign-up with a welcome email, to tell you once when Aish launches, and to send a promo code for 2 weeks of Pro and bonus Sparks. You can ask us to remove it at any time through the contact form.

Support requests

What you write in the contact form, the email address you leave for a reply, and any details you attach.

2. Why we process data

3. Artificial intelligence

Aish runs on Google Gemini models. Your voice, conversation text, and dream description are sent to Google through its API for speech recognition, dialogue, Aish's voice synthesis, and the creation of pictures, comics, and videos. We use the paid Gemini API terms, under which Google does not use the data we send to train its models.

Aish's conversation and dream reflections are generated automatically. They are not dream interpretation or predictions, not therapy, and not medical, psychological, or any other professional advice; any decisions based on them are your own.

4. Who receives your data

We do not sell data. Dream content, conversations, and results are never shared with advertising or analytics services. Data reaches only the services below:

• Google (Gemini API, Google Cloud) — processing voice and text and creating results.
• Langfuse — an observability service that stores conversation traces (text, request parameters, cost) so we can investigate errors and account for spending. Only the team has access. Traces are kept for no more than 90 days and are then deleted automatically.
• Apple and Google — processing in-app purchases and subscriptions, and Sign in with Apple and Google sign-in if you use them.
• Google Firebase (Google Analytics for the app and Crashlytics, United States) — app usage statistics and crash reports. Firebase receives service events (first launch, session start, sign-in and sign-out, account deletion and plan), the device model, OS and app version, approximate location derived from the IP address, and an installation identifier, and, when the app crashes, a technical description of the error. So that we can find crash reports when you contact us, Firebase also receives your Aish account ID (the one shown in the app settings) and, if your voice cannot be heard in a conversation (no microphone access or speech is not recognized), an event with the name of the speech recognition service on your phone. Advertising identifiers are not collected. Your phone number, email address, and the content of your dreams, conversations, and results never reach Firebase.
• Cloudflare — delivering the website and protecting it from attacks; it processes IP addresses and request data as our processor.
• Google Analytics on the website — only if you allow analytics cookies in the cookie banner (visitors from the EU, EEA, UK, and Switzerland are asked first; everyone can change the choice via “Cookie settings” at the bottom of any page). It records pages visited, the device and approximate location, and funnel events: joining the waitlist and signing in. We use it to see how visitors find and use the site and to measure our Google Ads campaigns. Google Analytics does not receive your phone number, email address, or anything about your dreams.
• Google reCAPTCHA — protecting the contact, sign-in, and waitlist forms on the website from bots; subject to Google's privacy policy and terms.
• Telegram (Telegram Gateway) — sending the backup sign-in code to the phone number you added.
• Hosting provider — running our servers and storing data.
• Email — sign-in codes, deletion confirmations, data archives, and waitlist messages are sent from our own mail server, which runs alongside our other servers.

Our servers, database, and stored files (voice recordings, pictures, videos) are located in the Netherlands (European Union).

The website uses cookies; which ones and how to control them is described in the Cookie Policy.

Some of these companies are located outside your country, including in the United States and the United Kingdom. Transfers rely on contractual data-protection safeguards (EU standard contractual clauses and similar mechanisms) or on adequacy decisions where they exist.

5. How long we keep data

• Voice recordings — up to 7 days after the conversation; then the files are deleted automatically.
• Conversation text, dreams, and results — as long as your account exists or until you delete them.
• Aish's memory notes — as long as your account exists or until you delete them; a new note on the same subject replaces the old one.
• Account and purchase data — as long as the account exists; payment records for as long as tax and accounting law requires.
• Technical logs — a limited period, usually no longer than a few months.
• Guest accounts that have not been used for a long time may be deleted together with their data.

6. Your rights

At any time you can:

• find out what data we hold about you and receive a copy;
• correct inaccurate data;
• view and delete Aish's memory notes or turn memory off (Profile → What Aish remembers);
• delete your account together with dreams, results, and conversation history;
• object to processing based on legitimate interest, including analytics;
• withdraw consent where processing relies on it;
• lodge a complaint with the data-protection authority of your country (in Kazakhstan — the Information Security Committee of the Ministry of Digital Development).

You can download a copy of your data in the app (Profile → Download my data) and delete the account yourself — see the next section. For anything else, contact us and quote the user ID from the Profile screen of the app or the phone number you added for sign-in, or write from the email address linked to your account. We reply within 30 days.

Account and data deletion

You can delete your account at any time without contacting us: in the app (Profile → Delete account) or on the account deletion page after signing in with a code sent to your email.

• Confirmation by email: we send a link to the email confirmed in your account. It works for 24 hours and only once; until you open it and confirm, nothing is deleted.
• Without an email: if no email is confirmed in the account (for example, a guest account), you can either add one first to receive the archive, or confirm deletion right in the app. In that case you are signed out on all devices right away, no archive is made, and the account is deleted the same way, usually within minutes.
• After you confirm: you are signed out on all devices right away and can no longer sign in to the account. We email you a link to an archive with your dreams, dream reflections, conversations with Aish, Aish's memory notes, and the pictures, comics, and videos with the Aish watermark. The account is then deleted, usually within minutes; if a conversation or a generation is in progress, after it ends.
• The archive is kept for 7 days after the account is deleted so you can download it, and then deleted automatically. Until then we keep it together with the email address the link was sent to.
• Deleted: the account with your phone number, name, email, and Apple and Google sign-in identifiers (if you signed in with Apple, we also ask Apple to revoke the app's access); dreams, conversations with Aish, voice recordings, pictures, comics, videos, and dream reflections; Aish's memory notes; feedback surveys, messages from the contact form, and the waitlist entry for your email. Copies of conversations in Langfuse traces (section 4) are deleted automatically within 90 days of the conversation.
• Kept without personal data: records of payments and Sparks (amounts, products, dates, and the payment provider's transaction numbers) — for as long as tax and accounting law requires. They are unlinked from the account and contain no phone number, name, or email.
• Data exports you requested in the app are deleted together with the account; otherwise the download link and the archive expire after 24 hours.
• Subscriptions bought in the App Store or Google Play are not cancelled by deleting the account — cancel them in the store.

Deletion is irreversible. Signing in again with the same email creates a new, empty account.

7. Children

The app is not intended for anyone under 16, and we do not knowingly collect their data. If you learn that a child is using Aish, contact us — we will delete the account.

8. Security

Data travels over encrypted connections (TLS); access to servers and services is limited to the team and protected by keys and authentication. Links to media files are temporary and expire. No storage method is absolutely secure, so please do not dictate passwords, card numbers, or document numbers to Aish.

9. Changes

We update this policy when the app or the law changes. The revision date is shown at the top of the page; we announce material changes in the app. Continuing to use Aish after a change means you accept the new version.

10. Contact

Questions about data and requests to exercise your rights are accepted through the contact form.