Privacy policy

Privacy Policy

Last updated: May 2, 2026

This Privacy Policy explains how Brainwave Music collects, uses, stores, shares, and protects personal information when you use our website, WooCommerce store, user accounts, web player, mobile apps, dream journal, dream analysis tools, optional community features, subscriptions, payments, downloads, and other services that link to this policy.

In this policy, “Brainwave Music,” “we,” “us,” and “our” means Brainwave Music / Kurt Attard, unless a different legal entity is listed on the website.

Read this policy together with our Terms and Conditions and Cookie Policy.

If you have questions, contact us at contact@brainwavemusic.com.

1. Privacy promise

Your private dream journal is private.
Brainwave Music does not sell your private dream journal entries, voice recordings, sleep data, wearable data, listening history, or personal account information to third parties.

We use your information to provide the Services, protect your account, process purchases, personalize your experience, improve our services, and power features you choose to use.

Dreams are only shared publicly if you choose to submit them to a public feature (such as a Dream Board) or a separate content submission program (such as possible use in YouTube or other media), and only under the terms shown at the time you submit.

We use reasonable safeguards to protect personal information. No system is completely secure, and we cannot promise that information will never be accessed, disclosed, altered, or misused. We may share information with service providers who help us operate the Services, and we may disclose information when required by law or as described in this policy. AI analysis is for reflection and wellness support only—not medical, psychological, or professional advice.

2. Wellness, dreams, and sensitive information

Brainwave Music is a wellness and music experience. It is not a medical device and does not provide medical diagnosis, treatment, therapy, crisis support, or emergency services.

Dreams, sleep-related data, voice notes, and wearable data (if you connect it) can feel very personal or be health-adjacent. Do not enter information you are not comfortable processing through our systems, and do not record or submit another person’s voice or private content unless you have permission and the legal right to do so.

If you are in distress or need urgent help, contact emergency services or a qualified professional.

3. Information we collect

We collect information in different ways depending on how you use Brainwave Music.

3.1 Account information

When you create an account or sign in, we may collect name, email address, username or display name, password or authentication credential, login method (such as email, Google, Apple, or other supported login), account settings, subscription status, purchase history, and support communications.

We do not store your plain-text password.

3.2 Store, payment, and subscription information

When you make a purchase, subscribe, or download products, we may collect billing details, order details, product and download history, subscription plan, payment status, transaction identifiers, tax or invoice details where required, and refund or support information.

Payments may be processed by third parties such as Stripe, PayPal, Apple, Google, WooCommerce, or other payment or subscription services. We do not intentionally store full payment card numbers on our own servers.

3.3 App and usage information

When you use our apps, website, or web player, we may collect tracks played, playlists or favourites, listening history, sleep timer or alarm settings, reality check or related tool settings, app preferences, device and browser type, operating system, app version, crash reports, performance logs, approximate region, pages or screens viewed, referral source, and feature usage. This helps us operate, improve, troubleshoot, and personalize the Services.

3.4 Dream journal information

If you use the dream journal, we may store written dream entries, titles, dates, tags, notes, lucid markers, symbols, categories, reflections, and related metadata.

Your private dream journal entries are private by default. We do not sell them. We do not publish them unless you separately choose a public feature or submission program.

3.5 Voice recordings and transcriptions

If you use voice recording or voice-to-text, we may collect recordings, transcriptions, metadata (such as date, duration, file type), processing status, and error logs. Recordings may be processed by our systems or trusted providers for transcription, storage, playback, or analysis. We do not sell private voice recordings.

3.6 AI dream analysis information

If you choose AI dream analysis, we may process the dream text you submit, prompts or questions, generated responses, tags or summaries, pattern insights, and feedback you provide about the analysis.

AI analysis is optional. Outputs may be inaccurate, incomplete, or unsuitable for your situation. AI dream analysis is for reflection, journaling, creativity, personal insight, and general wellness support only—not medical, psychological, psychiatric, therapeutic, legal, financial, or professional advice.

3.7 Dream Board and community information

If we offer a Dream Board or similar feature, we may collect dreams you choose to submit publicly, display name or anonymous label, tags, interactions, reports, moderation status and notes, and related permissions.

Public submission is separate from your private journal. Private dreams do not become public automatically. Public submissions may be reviewed, edited for safety, rejected, removed, or hidden. Do not submit content that identifies other people without permission.

3.8 YouTube and public content submissions

If we offer a program to submit dreams for possible use in YouTube, social media, animation, narration, marketing, or similar content, we may collect the submitted story, permission choices, attribution preference, contact details if you provide them, editorial notes, and usage status.

That program is separate from private journaling and from Dream Board. Submission does not guarantee publication. If you participate, separate terms may apply at the time of submission.

3.9 Sleep tracking and wearable data

If we offer sleep tracking or wearable integrations and you choose to connect them, we may collect data such as sleep or wake times, duration, quality signals, movement, heart rate, HRV, respiratory or stress-related signals, sleep stages if provided by the platform, device source, and synced timestamps.

We only collect this where you connect the feature and grant permissions. We do not sell wearable or sleep data. The app is not a medical device.

3.10 Cookies and similar technologies

We use cookies and similar technologies as described in our Cookie Policy, including essential cookies, login or session cookies, WooCommerce cart and checkout cookies, analytics or marketing technologies where enabled and permitted, embedded media cookies, local storage, app storage, and signed session or authentication tokens where we use them.

3.11 Support and communications

If you contact us, we may collect your name, email, message content, screenshots or attachments, and order or account details needed to help you.

4. How we use information

We may use personal information to:

• provide and improve Brainwave Music services;
• create and manage accounts;
• process payments, orders, downloads, and subscriptions;
• operate the dream journal, voice features, and AI analysis when you request them;
• personalize playlists, recommendations, and experiences;
• operate timers, alarms, reminders, and related tools;
• troubleshoot, secure, and prevent fraud or abuse;
• provide support and service messages;
• send marketing where permitted;
• measure advertising or campaigns where permitted;
• moderate public or community content;
• enforce our Terms and Conditions;
• comply with law;
• create aggregated or de-identified insights that do not reasonably identify you.

5. We do not sell private user data

Brainwave Music does not sell private dream journal entries, private voice recordings, private transcriptions, private AI dream analysis content, wearable data, sleep tracking data, listening history, personal account information, payment card numbers, or email lists for money or other consideration.

We may use trusted service providers to operate the Services; they must process information for our purposes under appropriate agreements and are not allowed to use your personal information for their own unrelated purposes.

6. Aggregated and de-identified data

We may create aggregated or de-identified information (for example, popular tracks, feature usage trends, anonymous theme statistics, session lengths, or general subscription trends) for product improvement, internal analytics, public reports, marketing insights, research and development, or business planning. We do not intentionally include personal identifiers in those insights.

7. AI features and dream analysis

If you use AI features, content you submit may be sent to AI or hosting providers under configurations appropriate to the feature. AI outputs are not guaranteed accurate or safe for every situation. We may use safeguards, filters, logging, or review to improve safety and prevent misuse.

If you are experiencing a mental health crisis or thoughts of harming yourself or others, seek help from a qualified professional or emergency service—not from an app feature.

8. Private dream journal

We may access private journal content only where reasonably necessary to provide the feature, store and sync entries, provide transcription or AI analysis when you request it, troubleshoot technical issues, investigate abuse or security issues, comply with law, enforce our terms, or protect the rights, safety, or security of users, Brainwave Music, or others.

We do not use private dreams for public content unless you separately opt in to a public feature or submission program.

9. Dream Board and public sharing

Before you submit publicly, we may ask you to confirm that you understand visibility, that you have removed identifying details where appropriate, that you have the right to submit the content, and that Brainwave Music may moderate, edit, reject, hide, or remove content. Public dreams may be displayed under a chosen or anonymous name, tagged, saved, reported, moderated, or used in aggregated community insights.

10. When we share information

We may share information with trusted third parties where necessary to operate, improve, secure, or provide the Services, including hosting, storage, payments, subscriptions, app stores, authentication, analytics, crash reporting, email and support tools, AI or transcription providers, security and fraud prevention, moderation tools, and professional advisers.

These providers process information on our behalf. We do not allow them to sell your private dream journal entries, voice recordings, sleep data, wearable data, or personal account information.

We may also disclose information if required by law, to respond to lawful requests, to enforce our terms, to protect safety or rights, to prevent fraud or harm, or in connection with a merger, acquisition, restructuring, or sale of assets subject to applicable safeguards.

11. Payments

Payments may be handled by Apple, Google, Stripe, PayPal, WooCommerce payment providers, or others. Those providers handle payment data under their own policies. Brainwave Music does not intentionally store full credit card numbers on its own servers.

12. Marketing communications

If you opt in or where law allows, we may send product updates, app news, subscription information, offers, educational content, or feature announcements. You can unsubscribe from marketing emails using the link in the email. We may still send important service messages about account, payment, security, orders, or policies.

13. Security

We use reasonable technical, organizational, and administrative safeguards, which may include secure hosting, access controls, encryption where appropriate, authentication controls, signed session tokens, password hashing, restricted admin access, security monitoring, backups, patching, and payment-provider security controls.

No method of storage or transmission is completely secure. You are responsible for keeping credentials secure and notifying us of suspected unauthorized access.

14. Data retention

We keep personal information for as long as reasonably necessary for the purposes in this policy, including account and subscription status, legal and tax obligations, fraud prevention, disputes, backups, support history, and deletion requests. Private dream content may remain while your account is active unless you delete it or request deletion where available. Some information may persist in backups for a limited period. We may retain aggregated or de-identified information.

15. Your rights, deletion, and choices

Where available and required by law, you may request access, correction, deletion of your account, deletion of private dream entries or voice recordings, export of data, withdrawal of optional permissions, objection to certain processing, or opt-out of marketing.

Some information must be retained where required for legal, tax, accounting, fraud prevention, security, dispute, or compliance reasons. To make a request, contact contact@brainwavemusic.com. We may verify your identity before completing certain requests.

You may also control information through account or app settings, Cookie Policy tools where available, device privacy controls, app permissions, notification settings, and email unsubscribe links. Disabling certain features may limit functionality.

16. Children and minors

Brainwave Music is not intended for children under 13. If a higher minimum age applies in your country, that age applies. Users under 18 should use the Services only with a parent or guardian’s permission. Dream journal, public features, AI analysis, and submissions may involve sensitive content; we may restrict some features for minors. If you believe a child has provided personal information without appropriate permission, contact us.

17. International data transfers

We may use providers in Australia, the United States, Europe, or other regions. Your information may be processed or stored outside your country. Where required, we take steps designed to protect personal information when it is transferred internationally.

18. Legal bases and consent

Where applicable law requires a legal basis, we may rely on your consent, performance of a contract, legitimate interests (operating, securing, and improving the Services), legal obligations, or other bases permitted by law. Where we rely on consent, you may withdraw it where the law allows, which may affect certain features.

19. Third-party links and services

The Services may contain links, embeds, or integrations (YouTube, app stores, payments, social platforms, analytics, wearables, login providers, affiliates). Third parties have their own privacy policies. We are not responsible for their practices.

20. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date. If changes are significant, we may provide additional notice where appropriate. Your continued use of Brainwave Music after the updated policy is published means the updated policy applies, except where additional consent is required by law.

21. Contact

For privacy questions or requests:

Brainwave Music
Email: contact@brainwavemusic.com
Website: brainwavemusic.com

22. Notes for our product and engineering teams

Public dream or community features should use clear opt-in, moderation tooling, reporting, and separate submission terms where needed. AI and transcription providers should use business-appropriate configurations; disable provider training on user content where possible; document vendors in privacy materials. Marketing pixels and analytics must not receive sensitive dream text, voice audio, wearable or sleep-stage payloads, or AI analysis output as ad events—limit to generic commerce events where consent and platform rules allow. Wearables require a dedicated permission flow, disconnect and deletion options, and no sale of that data. These notes support consistent implementation; they do not change your legal rights stated above.