Dreamweave Privacy Policy

Personalised bedtime stories for children

Children's app notice: Dreamweave is designed for children ages 3–10. We comply with the Children's Online Privacy Protection Act (COPPA) and collect only the minimum information needed to provide the service.

1. Who We Are

Dreamweave is a mobile application that generates personalised AI bedtime stories for children. References to "we", "us", or "our" in this policy refer to the developer of the Dreamweave app.

To contact us regarding privacy matters: privacy@dreamweave.app

2. Information We Collect

Account information (parent/guardian)

Child profile information

We do not collect the child's full name, school, location, photos, or any other personally identifying information beyond what is listed above.

Story data

Usage analytics

We use Aptabase for anonymous, privacy-first analytics (no personally identifying data, no cross-app tracking, no cookies). Analytics data is used solely to improve the app.

3. How We Use Information

We do not sell personal data. We do not use child profile data for advertising or marketing purposes.

4. COPPA Compliance

Dreamweave is directed to children under 13. We require a parent or guardian to create the account and set up the child profile. By creating an account you confirm that you are the parent or guardian of the child who will use the app.

We do not knowingly collect personal information from children without verifiable parental consent. If you believe we have inadvertently collected such information, please contact privacy@dreamweave.app and we will delete it promptly.

5. Third-Party Services

The following third-party services are used to operate Dreamweave:

These services process data only as necessary to provide their function and are not permitted to use data for other purposes.

6. Data Retention and Deletion

You can delete your account and all associated data at any time from the Settings screen in the app. This permanently removes:

Deletion is processed within 30 days. Locally cached files on the device are removed immediately when you delete the account or uninstall the app.

7. Data Security

All data is transmitted over HTTPS/TLS. Stories and profiles are stored in a Supabase database with row-level security policies that prevent one user from accessing another user's data. API keys for AI services are stored only in server-side environment variables and are never exposed to the app client.

8. Children Under 13 in the EU / UK

If you are in the European Economic Area or the United Kingdom, processing of your child's data is based on your consent as parent or guardian (GDPR Art. 6(1)(a) / UK GDPR). You have the right to access, correct, or erase the data at any time. Use the in-app account deletion feature or contact privacy@dreamweave.app.

9. Changes to This Policy

We may update this policy as the app evolves. Material changes will be notified in-app. Continued use after changes take effect constitutes acceptance of the updated policy.

10. Contact

For any privacy questions or data requests: privacy@dreamweave.app

Last updated: March 2026