Dreamtime (“we”, “us”, “our”) is committed to protecting the privacy of you and your family. This policy explains what personal data we collect, how we use it, and your rights under UK GDPR.
If you have any questions, contact us at privacy@trydreamtime.com.
1. Who we are
Dreamtime is an AI-powered bedtime story service. We are the data controller for all personal data collected through our app and website.
2. What data we collect
Account data
- Email address and password (hashed) used to create your account
- Household name and timezone
- Subscription and billing status (payment details are held by our payment processor, not us)
Children's data
- First name and date of birth for each child you add
- Story theme and value preferences you select for each child
We do not collect any data directly from children. All children's data is provided by the parent or guardian managing the account. We treat children's data with heightened care and do not use it for any purpose other than generating personalised stories.
Usage data
- Stories generated and read (to power streaks and progress tracking)
- App interactions (to improve the service)
- Device type and OS version (for technical support)
3. How we use your data
- Story generation — children's names, ages, and preferences are sent to our AI provider (Anthropic) to generate personalised stories. No data is stored by Anthropic beyond what is needed to fulfil the request.
- Illustration generation — illustration prompts (which contain no personal data) are sent to our image generation provider (Fal AI).
- Audio narration — story text is sent to our text-to-speech provider (Inworld AI) to generate audio. No personal data is included in these requests.
- Account management — to provide, maintain, and improve the service.
- Communication — to send service-related emails (e.g. password resets). We will only send marketing emails if you have opted in.
- Billing — subscription management via our payment processor.
- Advertising measurement — if you accept advertising cookies, we use the Meta (Facebook) Pixel to measure how our ads perform and to reach similar parents. This is optional; declining it does not affect the service.
4. Legal basis for processing
- Contract — processing necessary to provide the service you have subscribed to.
- Legitimate interests — improving our service, fraud prevention, and security.
- Consent — for advertising cookies (the Meta Pixel), which load only if you accept them via our cookie banner. You can withdraw consent at any time.
- Legal obligation — where we are required to retain data by law.
5. Data sharing
We do not sell your personal data. We share data only with the third-party service providers needed to operate Dreamtime:
- Supabase — database and file storage (EU region)
- Anthropic — AI story generation
- Fal AI — illustration generation
- Inworld AI — audio narration
- Stripe — payment processing
- Meta Platforms — advertising measurement, only if you accept advertising cookies
Our other providers are bound by data processing agreements and are prohibited from using your data for their own purposes. Meta acts as an independent controller for advertising data; we share data with Meta only where you have given consent.
6. Data retention
- Account and household data is retained for as long as your account is active.
- Generated stories and audio are retained indefinitely so your library remains accessible.
- After account deletion, all personal data is removed within 30 days, except where retention is required by law (e.g. billing records for 7 years).
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — request deletion of your data (“right to be forgotten”).
- Restriction — ask us to limit how we process your data.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email privacy@trydreamtime.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
8. Cookies
We use essential cookies required for authentication and session management. Our website analytics (Plausible) are cookieless and collect no personal data.
With your consent, we also use advertising cookies — the Meta (Facebook) Pixel — to measure how our ads perform and to reach similar parents. These load only after you accept them via our cookie banner; if you decline, no advertising cookies are set and the rest of the site works exactly the same. You can change or withdraw your choice at any time using the “Cookie settings” link in the footer — withdrawing stops the pixel and removes its cookies.
9. Security
We use industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but will notify you promptly in the event of a data breach.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email or in-app notification. Continued use of Dreamtime after changes take effect constitutes acceptance of the revised policy.
Questions? Email us at privacy@trydreamtime.com.