Legal

Privacy Policy

Last updated: April 14, 2026

The short version: DREA runs entirely on your device. Your documents, queries, and AI responses never leave your Mac unless you explicitly choose to use the External AI feature — and even then, a trust proxy sanitizes your data first.

1. Who We Are

DREA is developed by Nulle LLC ("we", "us", "our"). DREA is a local-first, air-gapped AI platform designed to keep your data on your device.

2. Data We Do Not Collect

DREA is fundamentally different from cloud-based AI services. By design:

  • No document data — Your documents are ingested, embedded, and stored locally. We never see them.
  • No query data — Your search queries are processed locally by the helper LLM and embedding models.
  • No AI responses — All LLM inference happens on your Mac via llama.cpp.
  • No telemetry — DREA does not phone home. No usage analytics are sent to us.
  • No user accounts — DREA does not require sign-up, login, or any account creation.

3. Data That Stays on Your Device

All of the following data is created and stored exclusively on your Mac:

  • Ingested documents and their vector embeddings (ChromaDB)
  • AI model weights (BGE-small, GME-Qwen2-VL, Qwen3-4B, DeepSeek R1)
  • Search history and conversation logs
  • Agent memory and session data
  • Application logs and configuration files
  • Thumbnails and cached content

Default storage location: ~/Library/Application Support/DREA/

4. External AI Escalation (Optional)

If you choose to enable the External AI feature, DREA can send sanitized queries to third-party AI providers (Claude, ChatGPT, Copilot, or a custom provider). This is the only scenario where any data leaves your device.

How we protect your data during escalation:

  • Trust proxy sanitization — The helper LLM strips all PII, proper nouns, dates, amounts, and proprietary terminology before any query is sent externally.
  • Leak audit — A secondary check (regex and optionally LLM-based) verifies no sensitive data remains.
  • User review — You see exactly what will be sent and can edit or cancel before it goes out.
  • Scoped network access — Network connectivity is temporarily unblocked only for the external API call, then immediately re-engaged.
  • Audit logging — Every escalation attempt is recorded locally for your review.

External AI providers have their own privacy policies. We recommend reviewing them before enabling this feature.

5. Payment Information

Purchases are processed through Stripe. We do not store credit card numbers or payment details. Stripe's privacy policy applies to payment processing.

6. Website Analytics

The DREA website (discoverdrea.ai) may use privacy-respecting analytics (Plausible Analytics) to understand page views. No cookies are used. No personal data is collected. The DREA desktop application itself contains no analytics.

7. Children's Privacy

DREA is not directed at children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this policy as DREA evolves. Changes will be posted on this page with an updated date. Since DREA is local-first, policy changes don't affect your existing data — it stays on your device regardless.

9. Contact

Questions about this privacy policy? Contact us at [email protected]