Privacy Policy
Last updated 29 July 2026
DreamLayer is a memory layer for the real world, built to run on your own devices. This policy explains what the DreamLayer apps do with your information. The short version: by default your data stays on your devices, there are no accounts, and we do not track you or run ads.
- The iOS app collects no personal data and requires no account.
- The camera is used to scan a pairing QR code, and — only when you tap Look — to take one photo and send it to your own paired Brain, which answers on your hardware. The photo goes to your Brain, never to us and never to a third party; the file expo-camera writes to disk is deleted immediately.
- Your memories, messages, and mail are processed by your own Mac "Brain" on your own machine.
- Cloud AI is off by default and opt-in. When you turn it on, only the text of that request is sent to the AI provider you choose.
- You can erase everything at any time from the app.
1. The DreamLayer iOS app
The iOS app is a companion and hub for the DreamLayer system (the Brilliant Labs Halo glasses and an optional self-hosted Mac "Brain"). On its own, the app:
- Collects no personal information and has no login or account.
- Uses the camera for two things and no others: to scan a pairing QR code shown by your Mac Brain (those frames are read on-device and never leave it), and — only on an explicit Look tap — to take one photo and send it to your own paired Brain for an answer. Look is blocked while Incognito is on, and the on-disk copy of that photo is deleted as soon as it has been sent.
- Stores its settings and any sample/paired state locally on your device.
- Can show a Demo Mode with clearly-labeled sample data so you can explore the app without any hardware. Demo data is fictional and never leaves your device.
The app requests permission to send you local notifications (e.g. a morning brief). These are generated on your device; we do not operate a push server.
2. Your Brain (Mac app) and glasses
The substantive features run on hardware you control:
- The Mac "Brain" app reads content you point it at — for example your Messages and Mail, and folders you choose — locally, read-only, on your own machine. It keeps structured memory (short summaries, names, places, reminders, timestamps), not raw audio or video recordings.
- The phone talks to your Brain over your home network, or over a relay you host, using a pairing token. This traffic goes between your own devices, not to us.
- The glasses capture is on-device, and DreamLayer never looks a face up in any public or third-party database — matching only ever happens against an index held on your own Brain (face_index.json in your Brain's config folder, written owner-only). A default install cannot recognise a face at all: that needs two things it does not have — the optional face package (InsightFace buffalo_l), which is in no install profile, and the model weights present on disk and passing their integrity check. With either missing, every frame is declined, and nothing is downloaded on the recall path. If you install both, turn face recognition on, and accept the biometric consent, DreamLayer computes a face template — 512 numbers describing a face, which is a biometric identifier — for one face per frame: the largest face in view, and only if it fills at least a tenth of the frame's shorter side, so a face in the background is never templated. With auto-enrol off (the default), that template is compared against the contacts you enrolled by name and then discarded: a face that matches none of them leaves nothing behind — no template, no count, no log line — and if you have enrolled nobody, no template is computed at all.
- With auto-enrol on, a template that matches nobody is instead saved to your Brain without a name, together with when and how often that face has been seen, so it is recognised next time as someone you have seen before. That includes people who never agreed and cannot agree in the app: the consent you accept is yours, not theirs, and collecting biometric identifiers without the subject's consent is restricted or unlawful in some places (for example Illinois' BIPA and GDPR Article 9). Auto-enrolled faces you never name are deleted by the Brain's retention sweep once they have not been seen for the warm window (90 days by default); faces you give a name are kept until you delete them. There is no continuous recognition loop — a template is computed only for a frame explicitly submitted to your Brain. The Privacy Veil blocks the whole path, and Erase all memories deletes every stored template. DreamLayer still does not record covertly.
- DreamLayer never clones your voice, or anyone else's. It does synthesise Juno's voice — an optional offline engine lets her speak in her own voice rather than a stock one, and the only reference clips it is ever given are her own pre-recorded takes, hard-coded in the app. No microphone audio, and no recording of you or of anyone near you, is ever used as a voice reference.
3. Optional cloud AI (opt-in)
For the hardest questions, DreamLayer can use a cloud AI model. This is off by default. When you enable the Cloud switch or add your own API key, the text of that specific request (and only that request) is sent to the provider you selected so it can answer. Depending on your choice, that provider may be:
- OpenAI
- Anthropic
- Google (Gemini)
- OpenRouter, or a local / self-hosted model (e.g. Ollama), in which case nothing leaves your machine.
Your provider API keys are stored on your own devices, never on our servers. Every cloud request is counted and logged locally so you can see exactly what left your devices. Incognito mode forces cloud off and keeps everything on your local network. Anything marked private never uses the cloud in any configuration.
4. What we do not do
- No user accounts, and no collection of your name, email, or contacts by the app.
- No advertising, no ad identifiers (IDFA), and no third-party analytics or tracking SDKs.
- No selling or sharing of personal data. We do not receive your memories, messages, or media.
5. Your control and data deletion
Because your data lives on your devices, you control it directly. In the app, Settings → Danger zone → Erase all memories purges kept memory on the phone and instructs a paired Brain to drop its stored anchors too. Uninstalling the apps removes their local data. There is no server-side account to delete because none is created.
6. Children
DreamLayer is not directed to children under 13, and we do not knowingly collect information from them.
7. Changes
We may update this policy as the product evolves (for example, when shipping hardware arrives). Material changes will be reflected here with a new "last updated" date.
8. Contact
Questions about privacy? Email [email protected].
DreamLayer — private by architecture. Yours to run, yours to keep.