Last updated: January 2025
This Privacy Policy explains how Dreamy (“Dreamy”, “we”, “us”) collects, uses, stores, and protects personal data when you use our service.
Dreamy is operated from Cyprus and is designed to be used by parents or legal guardians on behalf of their children.
1. Who This Policy Applies To
This Privacy Policy applies to:
- Parents or legal guardians who use Dreamy
- Children whose images or data are uploaded by their parent or legal guardian
Dreamy does not allow children to create accounts independently.
2. Information We Collect
2.1 Information You Provide
We may collect the following information when you use the Service:
- Account information
- Email address
- Authentication identifiers from our login provider
- Uploaded content
- Photos uploaded by you (including images of children)
- Text prompts describing scenes
- Order information
- Shipping details (within Cyprus)
- Order history and product selections
- Support communications
- Emails or messages sent to customer support
2.2 Voice Input
- Voice input is processed using a third-party service provider.
- Dreamy does not store voice recordings.
- Voice data is processed transiently to enable voice-based features.
2.3 Automatically Collected Information
We may automatically collect limited technical information, such as:
- Device type and browser
- IP address (for security and fraud prevention)
- Usage data (e.g. feature interactions, error logs)
3. How We Use Your Information
We use personal data only for purposes necessary to operate Dreamy, including to:
- Provide and operate the Service
- Generate AI-based images
- Process and fulfill orders
- Communicate with you about your account or orders
- Provide customer support
- Improve the quality, reliability, and performance of the Service
- Detect fraud, abuse, or security issues
- Comply with legal obligations
We do not use uploaded photos or generated images for advertising or marketing purposes.
4. AI Processing and Anonymized Data
Dreamy uses third-party AI providers to generate images and process inputs.
- Original uploaded photos are used only to provide the Service.
- Dreamy may use anonymized, non-identifiable data to improve the Service.
- Anonymized data cannot be used to identify you or your child.
We do not train AI models using identifiable images of children.
5. Data Retention
We retain personal data only as long as necessary:
- Uploaded photos and generated images are stored for up to 12 months
- Account and order information may be retained longer if required by law (e.g. accounting)
- Support communications may be retained for quality and legal purposes
You may request deletion at any time (see Section 8).
6. Sharing of Information
We may share limited data with trusted third parties only when necessary, including:
- Authentication providers (for login)
- AI service providers (for image and voice processing)
- Payment processors (for handling payments)
- Printing and delivery partners (to fulfill physical orders)
- Legal or regulatory authorities, when required by law
We do not sell personal data.
7. International Transfers
Dreamy operates from Cyprus. Some third-party service providers may process data outside the European Union.
When data is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, in accordance with applicable data protection laws.
8. Your Rights (GDPR)
If you are located in the EU, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Request data portability
- Withdraw consent where applicable
Deletion Requests
Dreamy does not currently offer self-service deletion.
To request deletion of your account or data, please contact us at:
Email: legal@dreamy.photos
Deletion requests are handled manually and may take a reasonable amount of time to process.
9. Children’s Privacy
Dreamy is designed for use by parents or legal guardians.
- We rely on parents or legal guardians to provide lawful consent for uploading children’s images.
- We do not knowingly collect personal data from children without parental involvement.
- If you believe a child’s data has been provided without proper consent, please contact us immediately.
10. Security
We take reasonable technical and organizational measures to protect personal data, including:
- Secure authentication mechanisms
- Encrypted connections
- Limited access to personal data
However, no system can be completely secure, and we cannot guarantee absolute security.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
If changes are significant, we will make reasonable efforts to notify users through the Service or by email.
Continued use of Dreamy after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Contact Information
Dreamy is currently operated from Cyprus.
If you have any questions about this Privacy Policy or how we handle personal data, please contact:
Email: legal@dreamy.photos