Foretold Privacy Policy

Last updated: July 2026.

1. Introduction

This Privacy Policy explains how Hidalgo Collective LLC (“Hidalgo Collective,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects information when you use Foretold: Dream Interpretation (the “App”), contact support, request account deletion, or use Foretold pages operated through hidalgoapps.com (collectively, the “Services”).

Hidalgo Collective LLC is the developer and operator of Foretold and is the controller or business responsible for the personal information described in this Policy, except where a third party independently controls information under its own terms, such as Apple or Google for app-store billing.

Privacy and support contact: support@hidalgoapps.com

Mailing address: 2108 N ST STE N Sacramento, CA, 95816, USA

Privacy-policy URL: https://hidalgoapps.com/products/foretold-dream-interpretation/privacy-policy

2. Scope

This Policy applies to personal information processed through the App, the supporting Supabase backend, the public privacy-policy and password-reset pages, and support communications. It does not replace the privacy notices of Apple, Google, RevenueCat, Anthropic, OneSignal, fal.ai, Supabase, or other third parties that independently provide services or interact with you under their own terms.

3. Adults only

Foretold is intended only for adults who are at least 18 years old. We do not knowingly allow children under 18 to create or use a Foretold account, and we do not knowingly collect personal information from children. If you believe a person under 18 has provided personal information through Foretold, contact us so that we can investigate and take appropriate action.

4. Important notice about dreams, sensitive content, and artificial intelligence

Dream narratives are personal. Depending on what you choose to write, they may reveal or imply information about your health, mental or emotional state, relationships, sex life, religious or philosophical beliefs, trauma, identity, work, finances, or other sensitive matters. You control what you submit. Do not include information about another person unless you have the right to do so, and do not submit information that you would not want processed by the service providers described below.

When you choose to submit a dream for interpretation, you ask us to process the dream and related intake answers using automated artificial-intelligence services. Where consent is the appropriate legal basis, your affirmative submission constitutes your express request and consent for us and our processors to process the content solely for the purposes described in this Policy. You may withdraw consent for future processing by not submitting additional content and by deleting relevant content or your account, but withdrawal does not invalidate processing already completed.

Foretold’s interpretations, reports, and artwork are generated for private reflection and entertainment. They may be incomplete, inaccurate, unexpected, or unsuitable for your circumstances. They are not medical, mental-health, therapeutic, legal, financial, employment, or crisis advice. Foretold is not a healthcare provider and should not be used to store protected health information or to make decisions about treatment, safety, or emergencies.

Foretold is not a social network or public-content platform. The App does not provide a public feed, public profiles, comments, direct messaging, public posting, or user-to-user exposure of dream narratives or generated readings. Foretold does not intentionally publish your dream text or generated output for other users to browse.

We use prompt-level, provider-level, and product-level safety measures designed to reduce or prevent generation of graphic, exploitative, hateful, deceptive, instructional, or otherwise restricted or harmful content. These measures are not infallible. If a generated reading or image appears offensive, unsafe, or inappropriate, report it through the App’s in-app reporting or Contact & Feedback feature, or contact support@hidalgoapps.com. We review reports and may use them to improve filters, prompts, moderation, and product safeguards.

5. Information we collect

5.1 Account and profile information

Foretold uses an anonymous-first account model. When you first use the App, Supabase may create an anonymous account and assign a unique user identifier. If you choose to register or protect your data with email authentication, we collect your email address and the authentication information required to create and secure the account. Supabase processes authentication credentials. We do not receive or store your password in readable plaintext.

We also collect profile and preference information that you provide or that the App records, such as your first name, age range, onboarding status, notification choices, reminder time and timezone, depth-report alert preference, premium status, and account settings.

5.2 Dream, journal, and intake content

We collect the dream narratives you enter, answers you select during the interpretation intake, timestamps, and identifiers used to associate the content with your account. Dream content may include sensitive personal information if you choose to include it. Foretold does not require you to provide real names or identifying details within a dream narrative.

5.3 Generated interpretations, reports, and artwork

We create and may store AI-generated interpretations, insights, outlooks, cultural or symbolic context, seasonal depth reports, report metadata, and generated artwork associated with your dream history. We may derive temporary scene descriptions or search terms from your content to complete these features.

Generated artwork may be processed and temporarily hosted by fal.ai or its underlying media-model and content-delivery providers. Provider-hosted media may be delivered through a URL. We do not intentionally publish or index your artwork, but a URL-based file should not be treated as secret, and anyone who obtains the URL may be able to access it until it expires or is removed.

5.4 Subscription and purchase information

If you purchase or restore a subscription, Apple App Store or Google Play processes the payment. We and RevenueCat may receive information such as your app user identifier, product purchased, purchase and renewal status, entitlement status, transaction or receipt/purchase-token metadata, price and currency information, refund or cancellation events, and limited device/store context needed to validate and support the subscription. We do not receive your complete payment-card or bank-account number.

5.5 Notification and device information

If you enable notifications, OneSignal and the device platform may process a push token or subscription identifier, your Foretold user identifier, notification permission and subscription status, notification delivery or interaction events, and device/app information such as operating system, app version, language, timezone, country or region, device model, carrier, session timing, and IP address. Foretold does not require precise GPS location and does not intend to enable OneSignal precise-location collection.

5.6 Usage, eligibility, and technical information

We process information required to operate Foretold, such as free-credit usage, dream and report counts, premium eligibility, cache and hydration status, request timestamps, error information, webhook event identifiers, delivery status, security logs, fraud or abuse signals, and technical information needed to maintain reliable service.

5.7 Support and website information

When you contact support or submit a privacy or deletion request, we collect the information you provide, such as your email address, message, screenshots, account identifier, or transaction/order details. Our website and hosting providers may also process standard web-server information such as IP address, browser/user-agent information, request time, security logs, and cookies or local storage strictly necessary to operate the page. We do not currently intend to use the public privacy page for targeted advertising or cross-site behavioral tracking.

6. How we collect information

• Directly from you when you enter a dream, answer intake questions, create an email account, configure settings, purchase a subscription, or contact support.
• Automatically from the App, device, backend, and integrated SDKs when needed to authenticate, process a request, deliver a notification, validate an entitlement, secure the Services, or diagnose an error.
• From Apple, Google, RevenueCat, OneSignal, and other processors when they return transaction, delivery, request, or operational information.
• By deriving information from your submitted content, such as a scene description for artwork, a report summary, or non-identifying catalog search terms.

7. How we use information

• Create and maintain anonymous and email-linked accounts and associate your content with the correct account.
• Generate dream interpretations, artwork, insights, and seasonal depth reports that you request.
• Store and display your journal, archive, and report history.
• Apply free-use limits, premium gating, and subscription entitlements.
• Process, validate, restore, and support subscriptions and purchases.
• Deliver reminders and depth-report alerts when you opt in.
• Personalize the requested experience using the profile information you provide, such as first name and age range.
• Operate, secure, debug, maintain, and improve the reliability of the Services.
• Prevent fraud, abuse, duplicate processing, and unauthorized access.
• Respond to support, privacy, account-deletion, and legal requests.
• Apply safety controls to AI requests and outputs, investigate reports of offensive or harmful generated content, and improve moderation and filtering.
• Comply with applicable law, enforce our terms, and protect users, Hidalgo Collective, and others.

8. Legal bases for processing in the EEA, United Kingdom, and similar jurisdictions

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract or steps requested by you: to create your account, provide the interpretation/report/artwork you request, maintain your journal, and administer premium access.
• Consent: for optional notifications; for processing content that may include sensitive information where consent is required; and for other optional processing presented to you. You may withdraw consent prospectively through settings, device controls, content/account deletion, or by contacting us.
• Legitimate interests: to secure, troubleshoot, prevent abuse, maintain service reliability, understand operational performance, and support users, provided those interests are not overridden by your rights.
• Legal obligation: to comply with accounting, tax, consumer-protection, security, law-enforcement, and other applicable requirements.
• Vital interests or public interest: only in rare circumstances where recognized by applicable law.

If you choose to submit special-category or sensitive information in a dream narrative, we process it only to provide the feature you requested and under an available condition such as your explicit consent. Avoid submitting such information when it is not necessary for your use of the App.

9. Artificial-intelligence processing

Foretold sends the information required for a requested AI feature to Anthropic’s commercial Claude API through our Supabase backend. Depending on the feature, this may include the dream narrative, selected intake answers, first name, age range, dream/account request identifiers, or prior dream/report data needed for a seasonal report. We seek to exclude email addresses, passwords, payment data, and unrelated account information from AI prompts.

We may send a derived visual description to fal.ai and its underlying image-model provider to generate artwork. The generated output and media URL may be returned to and stored by Foretold. We may also use public services such as MusicBrainz and Cover Art Archive to locate public album metadata or artwork using abstract search terms. We do not intend to send those public catalog services your email, Supabase user identifier, or full dream text.

Our AI providers process data under their commercial terms and privacy commitments. Anthropic states that retained commercial API data is not used for model training without express permission. Provider practices and available retention controls may change, and we configure the Services to minimize retention where reasonably available.

Foretold does not use AI output to make decisions that produce legal or similarly significant effects about you. The output is generated content for your review and may be corrected, deleted, or disregarded by you.

10. How we disclose information

We disclose information only as reasonably necessary for the purposes described in this Policy, including to the following categories of recipients:

• Supabase: authentication, database, storage, Edge Functions, security, and backend infrastructure.
• Anthropic: commercial AI generation for dream interpretation, scene extraction, and seasonal reports.
• fal.ai and underlying media-model/CDN providers: generated artwork and related processing.
• RevenueCat: subscription entitlement management, purchase validation, restore, and billing support.
• Apple and Google: app distribution, payments, subscriptions, refunds, and store-account management.
• OneSignal and Apple/Google push services: notification subscriptions, delivery, and delivery-event processing.
• MusicBrainz, Cover Art Archive, and related public catalog services: public metadata and artwork enrichment using non-identifying search terms.
• Website, email, security, and infrastructure providers: hosting public pages, receiving support requests, preventing abuse, and operating the Services.
• Professional advisers and authorities: legal, accounting, audit, insurance, security, dispute, and compliance purposes where permitted or required.
• A successor or transaction participant: in connection with a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to applicable law.

We may also disclose information when we reasonably believe it is necessary to comply with law or legal process; protect the safety, rights, or property of users, Hidalgo Collective, or others; investigate fraud or abuse; or enforce applicable agreements.

11. No sale, targeted advertising, or third-party ad tracking

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or targeted advertising as those terms are defined by applicable U.S. state privacy laws. The planned Foretold launch does not include third-party advertising SDKs. If these practices change, we will update this Policy and provide any notices or choices required by law before the new practice begins.

12. Notification choices

Notifications are optional. Foretold requests operating-system notification permission only at an intentional product moment, such as when you enable a dream reminder or depth-report alert. You can change Foretold notification preferences in the App and can revoke permission through your device settings. Disabling notifications does not delete your account or journal. Some preference or delivery records may remain for a limited period for security, troubleshooting, and duplicate-send prevention.

13. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing your account and requested features, maintaining security and reliability, resolving disputes, enforcing agreements, and meeting legal, tax, accounting, fraud-prevention, and regulatory obligations. When a fixed period has not been adopted, we use criteria such as whether your account remains active, whether the data is required to provide a feature, the sensitivity of the information, the risk of harm from continued retention, provider retention settings, and applicable legal requirements.

• Account, profile, dream, interpretation, report, and preference data: generally retained while your account remains active and until you delete the content or account, subject to backup and legal limitations.
• Anonymous guest data: associated with the anonymous Supabase user identifier. If the app is removed, local credentials are lost, or you sign out without linking an email account, you may lose access to that data even if it remains in our systems until deletion or an inactive-account cleanup process.
• AI-provider request data: retained under the provider’s commercial settings and our selected configuration. We seek to use available minimal-retention controls.
• Generated media: may remain available through a provider CDN until the configured expiration or deletion and may also be retained in Foretold storage while associated content remains in your account.
• Purchase and subscription records: may remain with Apple, Google, RevenueCat, and our billing/security records for the periods required for subscription administration, refunds, fraud prevention, accounting, tax, and legal compliance.
• Push and notification data: retained under OneSignal and platform settings and our operational log schedule; disabled subscriptions may still require deletion/de-identification through provider tools.
• Support and security records: retained for the period reasonably needed to resolve the matter, document compliance, prevent abuse, and protect legal rights.
• Backups: may persist for a limited period after deletion and will be overwritten or isolated under our normal backup lifecycle unless preservation is legally required.

14. Account and data deletion

Every Foretold user may permanently delete the Foretold account and associated app data from within the App by navigating to Settings → Delete Account and confirming the deletion. This authenticated in-app control is Foretold’s primary account-deletion method. If you can no longer access the App, encounter an error while attempting deletion, or require assistance with the process, contact support@hidalgoapps.com with the subject “Foretold Account Deletion.”

Once you confirm deletion through the authenticated in-app control, or once a verified fallback support request is approved, Foretold is intended to delete the account and associated active-system data that Hidalgo Collective controls, such as the profile, dreams, interpretations, reports, usage/eligibility records, and preferences. We also direct applicable processors to delete or de-identify associated data where required and technically available. Some information may remain temporarily in backups or may be retained when reasonably necessary for security, fraud prevention, dispute resolution, tax/accounting, legal compliance, or the defense of legal claims.

Deleting Foretold does not automatically cancel a recurring Apple or Google subscription. You must separately manage or cancel the subscription through the Apple App Store or Google Play account used to purchase it. Deleting the account may also prevent you from recovering the prior Foretold journal even if a store entitlement can later be restored.

The in-app deletion flow relies on the authenticated Foretold session and a confirmation step. For an email-based fallback request, we may need to verify that the requester controls the relevant account or connected email before completing the deletion. We will process verified fallback requests without undue delay and within the period required by applicable law.

15. Security

We use administrative, technical, and organizational safeguards designed to protect information, including authenticated Supabase sessions, row-level access controls, server-side secrets, encrypted network connections, restricted service credentials, and access controls appropriate to the system. No method of transmission, storage, or processing is completely secure. You are responsible for protecting access to your device, email account, app-store account, and Foretold credentials. Contact us promptly if you believe your account or data has been compromised.

16. International processing

Hidalgo Collective is based in the United States. Our service providers may process information in the United States and other countries, which may have different data-protection laws from your country. Where required, we rely on contractual safeguards, adequacy mechanisms, consent, or another lawful transfer mechanism. You may contact us for information about applicable transfer safeguards.

17. Your privacy rights and choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to restrict or object to certain processing; to withdraw consent; to opt out of sale, sharing, or targeted advertising; to limit certain uses of sensitive personal information; and to appeal a decision concerning a privacy request. These rights are subject to legal exceptions and verification requirements.

You may exercise applicable rights by using in-app controls or contacting:

support@hidalgoapps.com

Describe the request and the Foretold account or email involved. Do not send your password, private authentication token, service-account credentials, or complete payment-card information. We may ask for information reasonably necessary to verify identity and authority. Authorized agents may submit requests where permitted by law, subject to verification. We will not discriminate against you for exercising an applicable privacy right.

Residents of the EEA or United Kingdom may also lodge a complaint with their local data-protection authority. We encourage you to contact us first so that we can address the concern directly.

18. California privacy notice

California residents may have rights under the California Consumer Privacy Act, as amended, including rights to know, access, correct, and delete personal information; to opt out of sale or sharing; to limit certain uses or disclosures of sensitive personal information; and to receive equal service and pricing when exercising a right. Hidalgo Collective does not sell personal information or share it for cross-context behavioral advertising. Because legal thresholds and exemptions may apply, the availability of a specific statutory right depends on the circumstances and applicable law.

The categories of personal information we may collect are described in Section 5, the purposes are described in Sections 7 and 9, and the recipient categories are described in Section 10. We retain information according to Section 13. To submit a request, use the contact method in Section 17. Where required, we will honor legally recognized browser or device opt-out preference signals for practices that constitute sale or sharing; Foretold does not currently engage in those practices.

19. Children’s privacy

Foretold is not directed to children and is intended only for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we collected information from a minor contrary to this requirement, we will take reasonable steps to delete it. A parent or guardian may contact us using the information in Section 17.

20. Third-party services, links, and store billing

The Services may link to third-party pages, app-store subscription settings, reset pages, public album information, or provider resources. Third parties control their own services and privacy practices. Apple and Google independently control the store account, payment method, transaction history, subscription cancellation, and refund process. Review the relevant third-party policies before providing information directly to them.

21. Changes to this Policy

We may update this Policy to reflect changes in the App, service providers, law, or data practices. We will post the updated Policy at the public privacy-policy URL and revise the effective date. When required, we will provide additional in-app notice or obtain consent before a materially different use begins. Continued use after an update is subject to applicable law and does not replace consent where consent is required.

22. Contact us

Questions, concerns, privacy requests, and requests for assistance with account deletion may be directed to:

Hidalgo Collective LLC
2108 N ST STE N Sacramento, CA, 95816, USA
Email: support@hidalgoapps.com
Privacy policy: https://hidalgoapps.com/products/foretold-dream-interpretation/privacy-policy