Privacy notice

C.S. VENTURE LAB (SASU — Société par actions simplifiée à associé unique), 4 Rue du Pensionnat Notre-Dame de France, Cité du Numérique, 43000 Le Puy-en-Velay, France — SIREN 130 812 811. Contact: privacy@phantasos.eu.

Dreams, moods and voice notes can reveal very personal information, including about your health or private life. We process this content only to provide the journal features you use, never for advertising, and you decide what to write. The astrology feature is currently unavailable and we do not collect new birth details. If you added a birth date, time or place before, those details stay stored in your profile until you ask us to delete them. Phantasos is intended only for people aged 18 or over.

• Dream text, mood are sent to Google Gemini and OpenAI models through the Lovable AI Gateway to produce interpretations and image prompts. If you choose how you appear in images, we use that choice only to create your artwork.
• Voice notes are sent to OpenAI for transcription; audio is not kept after transcription.
• Artwork is generated with Google Gemini image models. Films made before film creation was paused were generated with Google Veo. Films you created earlier stay stored in your account until you delete them.
• Results (interpretations, images) are saved in your account.
• C.S. Venture Lab does not use your private Phantasos content to train AI models. Content is sent to the providers' API services, which process it under their own service terms, including limited retention for security and abuse monitoring.
• AI output is generated content and may be inaccurate. It is not a prediction, diagnosis or professional advice.

• Contract: your account, journal, voice transcription, AI features, payments and support.
• Explicit consent: processing of health or other private details in what you write or record, given by ticking the consent box before your first dream is saved. You can withdraw it at any time by deleting the entries or your account.
• Consent: optional preference and analytics storage, and birth details added before the astrology feature was paused.
• Legal obligation: accounting and tax records for payments.
• Legitimate interest: security, fraud prevention and service diagnostics.
• International transfers: EU–US Data Privacy Framework where the provider is certified, otherwise the European Commission's Standard Contractual Clauses.

• Lovable (hosting and AI gateway) and Cloudflare (hosting network).
• Supabase (authentication, database and file storage).
• Google (Gemini; previously Veo for films; Google sign-in if you use it) and OpenAI (AI processing and transcription).
• Stripe (payments and subscription billing).
• Google Play (Google Ireland Ltd.): payments and subscription billing for purchases made in the Android app.
• Email delivery: Lovable (sign-in, password reset and service emails sent from notify.phantasos.eu).
• Analytics: we use no third-party analytics tool. Optional usage and error diagnostics are processed by Lovable, only with your consent where required.
• Some of these providers are located in or access data from the United States. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.

Your journal content, AI interpretations, astrology data and other private product data are kept while your account exists and are deleted when your account is deleted. They are not kept longer because you once made a payment.

Invoices and accounting records that C.S. Venture Lab is legally required to retain may be kept for up to the applicable statutory retention period, which is generally 10 years for accounting records in France. Such information is retained only for that purpose and is not used for ordinary Phantasos functionality.

To access, export, correct, delete, restrict or object to processing of your data, or for portability, email privacy@phantasos.eu. You can edit or delete individual dreams directly in the app. Account deletion and data export are currently handled on request by email.

We will respond to valid privacy and deletion requests without undue delay and normally within one month of receiving the request. Where a request is particularly complex or numerous, this period may be extended by up to two additional months, and we will inform you within the initial one-month period if an extension is required.

You may complain to the CNIL (www.cnil.fr) or your local data protection authority.