Privacy Policy

1. Who processes your data

Your personal data is processed by RB Media FZC LLC, registered in the Ajman Media City free zone, UAE (License No. 4374, registered address: BLB-S5-378, Fifth Floor, AMC BOULEVARD-B BUILDING, AJMAN MEDIA CITY, Ajman, UAE) — referred to below as the "Company", "we".

This Policy describes what data we collect through the dream2share platform, why and how we use it, and what rights you have over your data.

2. What data we collect

When you register for and use the Service, we collect:

• account data — email, password (stored only as an irreversible cryptographic hash, never in plain text), display name, and an optional avatar and profile bio if you provide them;
• content you publish — the text and category of a dream, tags, a visibility setting (public / followers-only / anonymous), progress updates, comments, advice, reactions, and follows of other users;
• uploaded photos and videos — stored in secure S3-compatible storage and reviewed by a moderator before appearing in the public feed;
• technical data — your IP address and standard server logs (for abuse prevention and rate limiting), and an authentication session token stored in your browser (localStorage) and sent to the server with each request.

3. Cookies and browser local storage

We use a single strictly necessary cookie (NEXT_LOCALE) to remember your chosen interface language — it is not used for tracking or advertising.

Your browser's local storage also holds your authentication token (so you don't have to log in on every visit) and your chosen theme (light/dark) — this is technical, device-level information, not directly tied to your identity.

We do not currently use any advertising or analytics trackers.

4. How we use your data

We use the data we collect to:

• provide the Service's functionality — publishing dreams, reactions, comments, advice, and notifications;
• keep accounts secure and prevent abuse (spam, vote manipulation, unauthorized access);
• moderate content in response to user reports;
• contact you about your account or a support request.

5. Legal basis for processing

We process data based on: your consent given at registration; the necessity of performing our contract to provide the Service; the Company's legitimate interest in keeping the platform secure; and as otherwise required by applicable law.

6. Anonymous posts

If you publish a dream anonymously, other users only see a generated alias — your profile and identity are not disclosed to them. The link between an anonymous post and your account is nonetheless retained in our internal systems and may be used by moderators when reviewing reports, or disclosed if lawfully required by a competent authority.

7. Third-party services

Interface fonts are loaded from Google Fonts servers — when a page loads, your browser connects directly to Google, which results in your IP address being shared with Google as part of that service's normal operation.

We use a third-party hosting provider to run the Service's infrastructure, acting as our technical processor under appropriate contractual safeguards.

8. Data storage and security

Passwords are stored as an irreversible hash (Argon2) and cannot be recovered by us in their original form. The connection between your device and the Service is encrypted (HTTPS/TLS). Access to data within the Company is limited to staff who need it to perform their duties.

9. Retention period

Account data and content are retained while your account is active. After we receive a deletion request, we delete or anonymize your data within a reasonable time needed to complete the technical process, unless a longer retention period is required by applicable law (for example, to resolve disputes or comply with a request from a competent authority).

10. International data transfers

The technical infrastructure running the Service may be located outside the UAE. In such cases, we take reasonable steps to protect transferred data to a standard consistent with UAE personal data protection law.

11. Your rights

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data ("right to be forgotten");
• object to or restrict certain processing of your data;
• withdraw consent you previously gave;
• request your data in a structured format to transfer to another provider, where applicable.

To exercise any of these rights, write to noc@rbmedia.io. We will respond within a reasonable time. These requests are currently handled manually by our team, as self-service tools for them are not yet built into the Service's interface.

12. Children

The Service is not intended for anyone under 16, and we do not knowingly collect data from children under that age. If you believe a child under 16 has provided us with their data, please let us know at noc@rbmedia.io and we will delete it.

13. Changes to this Policy

We may update this Policy from time to time. We will announce material changes on the site or by email. We recommend checking back periodically for the current version.

14. Contact

For any questions about how we handle personal data, write to noc@rbmedia.io or to the Company's registered address listed in Section 1.