Drevia
Find My Dream

Privacy Policy

Last updated: 2026-08-11

This page describes what Drevia actually collects and does with your information today, based on how the product is actually built, not a generic template. It is not a substitute for a review by a qualified lawyer before this product handles data from real users at scale, and it does not claim compliance with any specific regulatory framework (GDPR, CCPA, or otherwise). If you operate this product for real users, have this reviewed by counsel first.

What we collect

  • Account information: your email address and a securely hashed password. We never store your password in plain text. It's hashed using ASP.NET Core Identity's standard algorithm before it ever touches a database.
  • Profile information: your display name, an optional bio, an optional avatar image URL, and your time zone.
  • Dream and planning content: your Dream Statement, goals, missions, actions, milestones, business ideas, and experiment records. This is the core content you create using the product.
  • Journal entries: always private. No sharing mechanism exists for journal content anywhere in the product. Only you can ever read what you write there.
  • AI coaching conversations: the messages you exchange with Drevia Coach. See our AI Usage Disclosure for exactly what's sent to our AI provider.
  • Community and mentorship content: posts, comments, mentor profiles, and help requests you choose to share. Visible according to the privacy level you pick for each post (private, community, or public).
  • Usage and security records: login timestamps, moderation actions, and similar account-security events, kept in an internal audit log for accountability and fraud/abuse investigation. This log is not visible to other users.

What we don't do

  • We don't sell your data to anyone.
  • We don't run third-party advertising or ad-tracking on this product.
  • We don't use any product analytics or tracking tool today beyond what's described on this page. See our Cookie Policy for the complete list of cookies this product sets.

Who we share data with

When you use Drevia Coach, the content of that specific conversation (plus limited context like your Dream Statement, if the conversation is about your Dream) is sent to Anthropic, the company that operates the AI model powering Coach, solely to generate a response. It is not sent for any other conversation or feature. See our AI Usage Disclosure for more detail. We don't share your data with any other third party.

How your data is protected

  • Passwords are hashed, never stored or logged in plain text.
  • Your session is kept in an HttpOnly cookie your browser's JavaScript can't read, reducing the risk of a compromised script stealing your session.
  • Every account-changing request is protected against cross-site request forgery.
  • Repeated failed login attempts temporarily lock an account to slow down password-guessing attacks.
  • Account lockouts, content moderation actions, and account deletions are recorded in an internal audit trail.

How long we keep your data

We keep your data for as long as your account is active. If you delete your account, everything tied to it (your login credentials, profile, Dream, journal, goals, actions, experiments, business plans, AI conversations, community posts and comments, and mentorship activity) is permanently removed immediately. Some records persist afterward regardless, for security and accountability reasons: an internal record that an account deletion occurred (but not its content), and system backups taken before the deletion for a limited retention period. See our internal DISASTER_RECOVERY.md document for the current backup retention approach.

Your choices

  • You can view and edit your profile information at any time from your account settings.
  • You can permanently delete your entire account and everything in it from your account settings at any time.
  • You can choose the visibility (private, community, or public) of each Community post individually.
  • We don't currently offer a self-service data export tool. If you'd like a copy of your data, contact us and we'll help manually.

Changes to this policy

If this policy changes in a material way, we'll update the date at the top of this page. Continued use of Drevia after a change means you accept the updated policy.

Questions

See our Contact page for how to reach us.