Privacy Policy

• You sign in with your Apple or Google account, with no password to create. Your dreams, boards and progress are kept in your account, and everything comes back on any device.
• The affirmation recorded in your voice never leaves your device. It isn't sent to our servers.
• The text of your vision only goes to OpenAI with your consent, which we ask for before the first time it's sent and which you can withdraw in Settings. Without it, your vision is organized on the device itself.
• We don't sell your data and we don't use anything you create for advertising. There's no advertising identifier and no ad network in the app.
• You can turn off sharing of usage data in Settings → Privacy → “Share usage data”.
• You can delete everything from within the app, in Profile → Settings → Delete account and data, or by email.
• AttraVision is for people 18 and over.

AttraVision is a wellbeing and personal growth app that brings together a vision board, a daily ritual, affirmations, guided visualization and a gratitude journal.

Under Brazil's General Personal Data Protection Law (Law No. 13,709/2018 — LGPD), the controller of the data processed in the app and on this website is [preencher: razão social], registered under CNPJ No. [preencher: CNPJ], with its registered office at [preencher: endereço completo].

Data protection officer (DPO): [preencher: nome do encarregado], by email at contato@attravision.com. The same channel works for exercising any of the rights described in Your rights.

We process the minimum needed for the app to work. The table below lists each type of data, its purpose and its legal basis. Retention periods are in How long we keep data.

What we don't collect: location, contacts, messages or advertising identifiers (IDFA/AAID).

About personal topics: we don't ask for sensitive data (health, religion, love life). But what you write or say about your dreams may touch on these topics. That content is processed only to be shown back to you and, when sent to OpenAI, only with your specific consent (art. 11, I, of the LGPD).

In Describe my vision, you speak or write about what you want to live, and the app turns it into dreams. Here's how it works:

1. If you speak: your speech is turned into text by the system's own speech recognition (Apple on iPhone, Google on Android), which may process the audio on those companies' servers under their policies. The recording of what you said is saved only on your device, so you can listen to it again — it isn't sent to our servers.
2. Before the first time it's sent, the app asks for your consent to send the text of your vision to OpenAI, through our servers, using the gpt-4o-mini model.
3. If you agree: OpenAI returns a suggestion of dreams, each with a title, a meaning and a first step. You can edit all of it. The result is kept in your account.
4. If you don't: nothing is sent. Your vision is organized on the device itself, in a simpler way.

You can withdraw your consent whenever you want, in Settings → Privacy → AI use. Withdrawal applies to future submissions. Under OpenAI's current API policies, data sent to it isn't used to train its models and may be retained for up to 30 days to monitor abuse. We don't use what you write to train anything either.

In Affirmation in your own voice, you record yourself saying an affirmation (up to 30 seconds) to hear during the ritual and the guided visualization.

• The recording is saved only on your device. It isn't sent to our servers or to third parties.
• We don't use voice recognition to identify you, we don't create a voiceprint and we don't use the recording to train models.
• You can re-record or delete the recording in the app. Deleting the app also removes the recordings.
• Because the recording never leaves your device, it isn't backed up: if you switch phones, you'll need to record it again.

Photos in your boards, dreams and proof

The photos you add go to Supabase storage, in a private area of your account protected by server-side access rules: no one else can read your files. Your boards are private, and there are no public boards in the app. When you delete a photo, a board or your account, the related files are removed.

Inspirations

When you capture an inspiration, you can ask for a description of its visible elements. In that case, a reduced version of the image is sent to OpenAI (gpt-4o-mini model), only after you confirm. The system instructions forbid identifying people or inferring emotions, personality or income. What the image means is still up to you.

Visualize (a selfie in the setting of your dream)

With this feature, you send a selfie and a photo of a setting to generate an image of you inside your dream. Both images go to OpenAI, through our servers, only with your explicit consent, requested on that same screen. We don't use the selfie for facial recognition or to identify you.

Reference image search

When you search for images for a board, the term you type is sent, through our servers, to an image library (Pexels or Pinterest) to bring back results. These services don't receive your name or your email. The images found belong to their authors and follow those platforms' licenses — see the Terms of Use.

To show the “Your Vision” widget (available on iPhone), the app copies a reduced version of the dream photo, its title, the affirmation of the day and the ritual status to an area shared between the app and the widget (the “app group”), on your device. None of this is sent to servers. Keep in mind that the widget is visible on your Home Screen and, if you choose, on your Lock Screen. Deleting the app removes this copy.

To use AttraVision, you sign in with your Apple or Google account — no password to create. Your boards, dreams, rituals, gratitude notes and progress are kept in your account, with backup and sync: if you switch phones or reinstall the app, just sign in again with the same account.

Two things stay only on your device, outside your account: the affirmation recorded in your voice and the copy used by the widget (see the sections above). To delete your account and everything in it, use Profile → Settings → Delete account and data or see Delete account. Usage data and error reports follow the section below.

To learn what helps and what gets in the way, we use PostHog and Firebase Analytics. They record usage events — for example, that a screen was opened or that a ritual was completed — along with technical information about the device and the app version. Once you sign in, events are linked to an internal account identifier, not to your name.

For errors and crashes, we use Sentry and Firebase Crashlytics. Sentry is configured not to send personal data (no IP address, cookies or account data); reports carry the technical context of the error, not the content you created.

• We don't use advertising identifiers (IDFA/AAID), we don't work with ad networks and we don't combine your data with data from other apps or websites to track you.
• On iPhone, iOS shows the App Tracking Transparency prompt. If you decline, Firebase Analytics collection is turned off on the device.
• You can turn all of this off in Settings → Privacy → “Share usage data”. With that option off, the app stops sending usage data and error reports.

Ritual reminders, affirmations throughout the day and the reminder before your free trial ends are local notifications: scheduled and triggered by the device itself. We don't send notifications from a server and we don't collect a push token. They're optional and can be turned off in the app or in your system settings.

System permissions (microphone, photos, camera and notifications) are requested when you use the related feature, and you can deny or revoke them at any time — the rest of the app keeps working.

If you join the waitlist on this website, we process your email (and, for security, your browser type and where the sign-up came from).

• Purpose: let you know when AttraVision launches in the stores. We don't send other campaigns or share the list.
• Legal basis: your consent (art. 7, I), given when you submit the form.
• Where it's kept: in the Supabase database, in a table that only accepts new sign-ups from the website — reading it is restricted to our team.
• For how long: until the app launches and for 12 months after that, or until you ask to leave — whichever comes first.
• How to leave: email contato@attravision.com with the subject “Leave the list”. We'll remove your email and confirm.

We don't sell, rent or hand over your data. We share only what's necessary with companies that provide services to us (processors), limited to our instructions:

We may also share data when there is a legal obligation or court order, or to defend our rights in legal proceedings. In the event of a merger, acquisition or sale of the business, data may be transferred to the successor, which will be bound by this policy — and we'll let you know beforehand.

The companies above run servers outside Brazil, generally in the United States. This means personal data is transferred internationally.

These transfers follow articles 33 to 36 of the LGPD and rely on standard contractual clauses, as set out in ANPD Resolution CD/ANPD No. 19/2024, and on the data processing agreements signed with each provider, in addition to being necessary to perform the contract between you and us. We require all of them to maintain compatible security measures and prohibit them from using your data for their own purposes.

We keep each piece of data only for as long as its purpose requires — or for the period required by law.

Article 18 of the LGPD gives you the right to request, at any time and free of charge:

• confirmation and access — to know whether we process your data and to receive a copy;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of data that is unnecessary, excessive or processed in breach of the law;
• portability to another provider, under ANPD regulations;
• deletion of data processed based on consent, except where the law requires it to be kept;
• information about who we share your data with and about the possibility of not giving consent and its consequences;
• withdrawal of consent and objection to processing based on legitimate interest.

How to exercise them

• Delete your account and data: in the app, under Profile → Settings → Delete account and data. Deletion is immediate and permanent. If you can't access the app, see Delete account.
• Withdraw consent for AI use or turn off usage data: Settings → Privacy.
• Any other request (access, copy, correction, portability, objection): email contato@attravision.com.

We may ask for information to confirm your identity before acting on a request — it's a protection for you. We reply within 15 days. If we can't fulfill a request, we'll explain why.

If our answer doesn't resolve the issue, you can file a complaint with the Brazilian National Data Protection Authority (ANPD).

This website is informational. It doesn't use advertising cookies or analytics tools and doesn't share your browsing with ad networks. Our hosting provider may log technical data needed to run the site and keep it secure (such as IP address and browser type) for a short period.

If we ever add measurement or marketing to the website, we'll update this section and ask for your consent when the law requires it.

If you're responsible for a child or teenager who created an account, email contato@attravision.com: we'll check and delete the data.

Security isn't a promise of perfection; it's a set of measures we maintain and review:

• all traffic between the app and the servers is encrypted in transit (HTTPS/TLS);
• the database uses row-level access rules (Row Level Security): each account can only reach its own records;
• files are kept in private areas, with no public link and temporary access granted only to the account they belong to;
• keys for external services (such as OpenAI's) stay on the server, never inside the app;
• passwords are never stored in readable text.

If a security incident poses a relevant risk to you, we'll notify you and the ANPD as set out in article 48 of the LGPD.

This policy may change when the product changes or when the law requires it. The effective and last-updated dates are always at the top. When a change is significant — a new purpose or a new processor, for example — we'll let you know in the app or by email before it takes effect and, when processing depends on consent, we'll ask for it again.

Questions, requests or complaints about privacy? Email contato@attravision.com. A real person reads and replies.

See also the Terms of Use, the Support page and how to delete your account.