Privacy Policy

Effective Date: January 1, 2026

This Privacy Policy explains how Dreamliy collects, uses, and protects your personal data.

1. Data We Collect

Account Information: Name, email address, password (encrypted), subscription plan, billing information (managed by LemonSqueezy).

Child Information: Child's name, age range (2–10), preferred story themes. No photos or identity documents are collected.

Voice Data: Voice recordings uploaded for narration. Used only for voice cloning and story creation. Not retained after story generation unless saved by the user.

Usage Data: Pages visited, stories created, session durations (anonymized via PostHog).

Technical Data: IP address, browser type, device type, operating system, cookies.

2. How We Use Your Data

• To provide and improve our services
• To process subscription and billing
• To generate personalized stories
• To communicate service updates and important notices
• For security and fraud prevention
• For anonymized analytics and product improvement

3. Third-Party Providers

We share data with the following providers only as necessary to deliver our service:

3a. Commerce Consent Records

Dreamliy records consent information at the time of each commercial transaction to ensure that user agreement can be demonstrated.

These records may include:

• a summary of the product or package purchased,
• the text and version of the terms accepted,
• a reference ID for the payment transaction,
• IP address, country, and browser information at the time of consent,
• the date and time consent was given,
• the language and locale used.

These records may be used as evidence in the event of a payment dispute, chargeback, legal proceeding, or regulatory audit.

Commerce consent records may be retained for a legally required retention period even after an account deletion request.

4. Data Retention

• Account data: Retained while account is active, deleted within 30 days of account deletion request
• Stories: Retained until user deletes them or account is closed
• Voice recordings: Deleted after story generation (unless user saves them)
• Usage logs: Retained for 12 months in anonymized form

5. Right to Deletion

You may request deletion of your account and all associated data at any time. Send a deletion request to hello@dreamliy.com. Requests are processed within 14 business days.

6. Data Security

Dreamliy uses industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Row-level security in our database
• Regular security audits

7. Data Sharing

We do not sell your personal data to third parties. We share data only with service providers listed above and only as necessary to provide our service.

8. Children's Privacy (COPPA)

Dreamliy collects minimal information about children (name and age range only). We do not collect photos, contact information, or any other personally identifiable information about children. Parents or guardians are responsible for managing their account and child data.

9. Cookies

Dreamliy uses essential cookies for session management and preferences. We do not use advertising or tracking cookies.

10. International Data Transfers

Your data may be processed in countries outside your country of residence (primarily the United States and European Union) by our service providers. All transfers are subject to appropriate safeguards.

11. Your Rights

Depending on your location, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Request data deletion
• Object to or restrict processing
• Data portability

To exercise these rights, contact: hello@dreamliy.com