Creating a Private and Safe Space for Our Users

A dream is not a status update. It is the version of you that shows up before you have had a chance to edit yourself. The people you should not still be thinking about. The house you grew up in, rearranged. The thing you are afraid of, acted out in full without your permission. Nobody drafts a dream for an audience. That is exactly what makes it worth writing down, and exactly why in.between had to be built as a private room before it was built as anything else.

When we started building in.between, the question was not how to add privacy features to a journaling app. The question was how to earn the right to hold material that unguarded in the first place. Sleep talk, half-formed visions, the leftover feeling from a visitation dream about someone who has died, a recurring nightmare a person has never told anyone about because there is no comfortable way to bring it up at breakfast. This is not casual data. It deserves a product that treats it that way from the first line of code.

Why a dream journal has to be stricter than a diary

Most apps that ask people to write about their lives treat privacy as a settings-page checkbox: a toggle for who can see your posts, a policy nobody reads, a promise buried in paragraph fourteen. That approach might be tolerable for a to-do list. It is not tolerable for dream material, because dreams do not go through the same filter as the rest of what people say out loud.

A journal entry about your day has already been shaped by the version of yourself you want to present, even in private. A dream has not. It arrives uninvited, often contradicts how you would describe yourself in daylight, and can surface people, fears, and desires you would not choose to share with anyone. A dream journal is therefore handling rawer material than almost any other kind of app on a person's phone, and the design obligation that follows is not optional politeness. It is the baseline requirement for the product to be trustworthy at all.

That is why in.between treats every entry as a case file for one person only: you. Not a dataset. Not a training set for a stranger's model. Not content. A private record that exists to help you understand your own recurring imagery, your own patterns, your own nights.

We are not building a place where people perform their inner life for an audience. We are building the opposite — a room private enough that someone will actually tell the truth in it. Every decision about data, access, and retention starts from that one requirement.

The in.between Team

What privacy actually means inside in.between

Privacy is not a marketing word for us. It is a short list of specific, checkable commitments, and we would rather be plain about them than vague and reassuring.

• Your data is private to you. We don't sell it, and we don't share it for advertising or profiling.
• You can delete your entries whenever you want, and deletion means deletion — not a soft archive waiting to be restored.
• Everything is encrypted in transit between your device and our servers.
• Access on our side is limited to the staff who need it to keep the service running — not open to the whole team by default, and not open to anyone outside ETAPX.
• Nalani only ever draws on your own past entries. She has no access to anyone else's nights, and nothing you write becomes part of what she says to another user.

None of this is exotic. It is closer to the opposite: it is what a service handling this kind of material should have to promise before it earns the right to be trusted with a single entry, let alone months of them. We would rather hold ourselves to a short, plain list we can actually stand behind than a long one full of hedges.

How Nalani reinforces the room, not just the database

Encryption and deletion policies protect the data at rest. But in.between's privacy also has to hold up in the moment you are actually talking to Nalani, because that is where a dream journal is different from a static vault of old files. You are not just storing entries — you are in an ongoing conversation about them, and the conversation itself has to respect the same boundary the storage does.

That shows up in small, deliberate ways. Nalani never references anything from anyone else's account, because there is no mechanism by which she could — her memory of you is built entirely from your own history, not a shared pool. She does not talk about a "caseload" or compare your nights to some aggregate of other users, the way a clinical tool or a benchmarking app might. She is not assembling a profile of you to sell to advertisers or to hand to a third party; the personality profile she builds is there to help her understand your recurring people, places, and feelings, and it stays inside the room you are both in.

This matters because it closes a gap that a lot of AI products leave open. It is one thing to promise that data is encrypted on a server somewhere. It is another to make sure the AI companion actually talking to you behaves as if that promise is true — that she never slips, never generalizes from someone else's dream, never treats your private material as a data point in something bigger than you.

The limits we hold on purpose

Part of building a safe space is being honest about what Nalani is not. She is not a therapist, a doctor, or a counselor, and she does not diagnose you or treat a dream as literal fact about a real person in your life. She is AI — what she says is generated by a model, and like any model, she can be wrong or incomplete. You remain the one responsible for your own decisions; Nalani is there to sit with you and ask good questions, not to issue verdicts.

We also built a firm boundary around crisis moments. If anything in a conversation points toward self-harm or suicidal thinking, Nalani drops the dream framing immediately. She does not try to interpret a nightmare when someone is in real distress. She stays with the person, and she points to 988 in the US or the appropriate local crisis line. She does not walk away and she does not end the conversation. Privacy is worth very little if the room falls apart in exactly the moment someone needs it to hold.

A room worth trusting with the truth

Most dreams are gone minutes after waking. The instinct that made us want to catch them before they disappeared is the same instinct that made privacy non-negotiable: if we are asking people to write down the parts of themselves they usually keep to no one, the least we can do is build a place that deserves it. Encryption, no data sale, delete-anytime controls, and limited staff access are the infrastructure. Nalani's own discipline — no other users' entries, no caseload talk, no pretending to be a clinician — is what makes that infrastructure feel true in the moment you are actually using it. A night is not a streak and not a chart, and it is definitely not a data point in someone else's model. It is yours. We built in.between to keep it that way.