CITT

    Scan results

    Oniri - Your Dream Journal

    Android

    Oniri is a comprehensive dream journal app with AI-powered dream interpretation and lucid dreaming techniques. Features include dream recording, vocal notes, image integration, dream analysis, and subscription-based access to advanced features like statistics and PDF exports.

    CITT SCORE
    40
    out of 100
    unTRUSTED

    Quick Verdict

    Best for: Dream journalers comfortable with behavioral analytics

    Not For: You keep sensitive personal thoughts in your journal

    What It Means For You

    Dream entries and usage habits are tracked by Mixpanel for behavioral analytics, and crash data is sent to Sentry. Subscription activity flows through RevenueCat. Journal content may not be fully protected if stored data is not adequately secured.

    Method and Limitations

    Static analysis only. CITT reviewed the code of this build without running the app, so runtime behavior was not observed. The findings below describe the analyzed build and may not reflect server-side controls or later versions. CITT makes no determination about compliance with any law or platform policy; it reports what the artifacts contain and cites the published guidance so a reader can compare.

    How CITT scores an app

    Findings (15)

    Data Security

    8 total
    1 Critical
    2 High
    1 Medium
    4 Low

    Code Security

    3 total
    2 Medium
    1 Low

    Privacy

    4 total
    1 Critical
    2 High
    1 Medium

    Third-Party Services

    Sentry, Mixpanel, RevenueCat, MongoDB Realm

    Security Strengths

    • ✓Proper SSL/TLS certificate validation with system TrustManager
    • ✓Secure WebView implementation (JavaScript disabled, no bridges)
    • ✓Secure pre-signed URL architecture for file storage
    What changed since the last scan

    Version diff is on the Developer plan. See developer plans.

    Context Tags

    health
    sensitive data
    biometric
    analytics
    ads

    Package

    io.oniri.oniriapp

    Version

    1.40.3 (Build 65)

    Analysis Date

    Feb 4, 2026

    0

    Was this analysis helpful?

    Feedback helps us improve our analysis

    View on Play Store

    Recommendation: Use With Caution

    Key Findings

    Data Security - 8 findings (1 critical, 2 high, 1 medium, 4 low)

    Network Security - 0 findings

    Code Safety - 0 findings

    Privacy - 4 findings (1 critical, 2 high, 1 medium)

    Privacy Concerns

    What Data is Collected

    • Behavioral data: In-app actions and usage patterns are collected by Mixpanel for behavioral analytics.
    • Crash and diagnostic data: When the app encounters errors, Sentry receives details about the device state and app activity at the time of the crash.
    • Subscription data: Purchase and subscription activity is processed by RevenueCat.
    • Journal and app data: Entries are stored using MongoDB Realm, a local and cloud-connected database service.

    Third-Party Data Sharing

    User data is shared with the following third-party services:

    • Mixpanel - behavioral analytics and usage tracking
    • Sentry - crash reporting and diagnostics
    • RevenueCat - subscription and purchase management
    • MongoDB Realm - data storage

    Understanding the Scores

    CategoryScore
    Security45/100
    Privacy35/100
    Data Security40/100
    Network Security100/100
    Code Safety85/100
    Data Collection45/100
    Data Sharing50/100
    User Control60/100

    Positive Security Features

    • No notable positive security practices were identified in this version.

    Areas for Improvement

    • The way journal data is stored on the device leaves it accessible in ways that could expose private entries to other apps or background processes.
    • Multiple third-party services collect data about how the app is used, with limited options available to opt out or control what is shared with each company.
    • Subscription and usage patterns are processed by an external service, expanding the number of companies with access to user activity.

    About This Analysis

    This scorecard is based on static analysis of the published app binary. Scores and findings represent the state of the app at the time of the scan and may not reflect subsequent updates.

    App Details

    • App Name: Oniri - Your Dream Journal
    • Package ID: io.oniri.oniriapp
    • Version: 1.40.3 (Build 65)
    • Scan Date: 2026-02-04

    Right of Reply

    Developer not yet contacted