Privacy Policy

1. Introduction

DreamCraftr ("we," "us," or "our") operates the DreamCraftr platform, an AI-powered storybook creation service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services. We are committed to protecting your privacy and handling your data in an open and transparent manner.

By using DreamCraftr, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access or use our services.

2. Data Controller

DreamCraftr is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at the details provided in Section 14.

3. Information We Collect

3.1 Information You Provide

• Account Information: When you create an account, we collect your name (display name), email address, and password. If you sign in with Google, we receive your name, email address, and profile photo from Google.
• Story Content: When you create stories, we collect the story topics, character names and descriptions, target audience preferences (age group), art style preferences, and the generated story text and images.
• Reviews and Interactions: When you review published stories, we collect your rating, review text, and display name. We also record likes and views on public stories.
• Payment Information: When you purchase credits or subscriptions, payment processing is handled by our third-party payment processor. We store transaction records including amounts, order IDs, and payment status, but we do not store your credit card numbers or bank details.

3.2 Information Collected Automatically

• Authentication Data: Our authentication service manages your login sessions and may store session tokens in your browser.
• Usage Preferences: We store minimal local preferences (such as whether a UI tutorial has been shown) in your browser's local storage.

3.3 Information We Do Not Collect

• We do not use analytics or tracking cookies.
• We do not use advertising pixels or remarketing tools.
• We do not sell your personal data to third parties.
• We do not collect location data, device identifiers, or browsing history.

4. How We Use Your Information

We use the information we collect for the following purposes:

• Provide our services: To create your account, generate storybooks based on your inputs, and manage your content library.
• Process payments: To facilitate credit purchases and manage subscriptions through our payment processor.
• Community features: To display your name and reviews on publicly shared stories, and to track likes and views.
• Account management: To send password reset emails and enable you to manage your profile settings.
• Improve our services: To understand how our platform is used and make improvements.

5. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract performance: Processing your account data, story content, and payment information is necessary to provide our storybook creation service to you.
• Consent: When you sign in with Google, you consent to sharing your Google profile information with us. When you publish stories or leave reviews, you consent to making that content public.
• Legitimate interest: We have a legitimate interest in improving our services and preventing misuse of the platform.

6. How We Share Your Information

We share your information with the following categories of third-party service providers, solely to provide and improve our services:

• Authentication and infrastructure providers: We use third-party cloud services for user authentication, database storage, and file hosting. These providers process your account information, stories, and user content on our behalf.
• Payment processor: We use a third-party payment processor to handle credit and subscription purchases. Your payment details (such as card information) are collected and processed directly by the payment processor. We only receive transaction records such as order IDs, amounts, and payment status.
• AI service provider: We use a third-party AI service to generate storybook text and illustrations. Story prompts, character details, and your account identifier are shared with this provider to fulfill your requests.

We do not sell, rent, or trade your personal information. We may disclose information if required by law, legal process, or government request.

7. Data Storage and Security

Your data is stored on secure cloud infrastructure that uses industry-standard encryption at rest and in transit. Our servers are located in the United States. By using our service, you consent to the transfer of your data to the United States for processing and storage.

We implement appropriate technical and organizational measures to protect your personal data, including secure authentication, access controls, and encrypted data transmission (HTTPS/TLS). However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

• Account data: We retain your account information for as long as your account is active.
• Story content: Your stories are retained until you delete them or delete your account.
• Payment records: Transaction records may be retained for up to 7 years to comply with financial and tax regulations.
• Account deletion: When you delete your account, we permanently remove your profile, all stories, published content, and reviews from our database. Some data may persist in backups for a limited period (up to 30 days) before being permanently deleted.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: You can view your personal data in your profile settings and story library at any time.
• Right to rectification: You can update your display name and profile information through your account settings.
• Right to erasure: You can delete your account and all associated data through the Profile Settings page. This permanently removes your profile, stories, published content, and reviews.
• Right to data portability: You can request a copy of your data by contacting us.
• Right to restrict processing: You can contact us to request restriction of processing of your personal data.
• Right to object: You can object to processing of your personal data based on legitimate interests by contacting us.
• Right to withdraw consent: Where we rely on consent, you may withdraw it at any time by adjusting your settings or contacting us.

To exercise any of these rights, please contact us using the information in Section 14. We will respond to your request within 30 days.

10. Public Content

When you publish a story or leave a review, your display name, profile photo (if provided via Google), and the content you share become visible to other authenticated users. You can unpublish stories at any time through your story settings, and you can delete your reviews. When you delete your account, all public content associated with your account is permanently removed.

11. Children's Privacy

DreamCraftr is a tool for creating children's storybooks, but the platform itself is intended for use by adults (parents, educators, and guardians) who create stories for children. We do not knowingly collect personal information directly from children under the age of 13 (or 16 in the EEA).

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. We will take steps to remove that information from our systems.

The target audience selections available during story creation (such as age groups) refer to the intended audience of the storybook being created, not the age of the user creating the story.

12. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers maintain servers. When we transfer data outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or the service provider's certification under applicable data transfer frameworks.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your data rights, please contact us:

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local Data Protection Authority.