Privacy Policy

1. Introduction

Welcome to Dreamlings ("we," "our," or "us"). We are committed to protecting the privacy of you and your family. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

Please read this Privacy Policy carefully. By using Dreamlings, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We collect minimal information necessary to provide our services:

Account Information:

• Email address (for authentication purposes only)
• Password (encrypted, never stored in plain text)
• Subscription status (trial, active, cancelled, expired)

Usage Data (Anonymous):

• Session dates and times
• Content preferences (meditation, story, soundscape selections)
• Age band preference (stored locally on your device)
• Feedback ratings (optional)

We DO NOT collect:

• Child names, ages, birthdates, or photos
• Parent names or demographics
• Location data
• Device advertising identifiers
• Data from third-party tracking tools

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your subscription and manage your account
• Customize content recommendations based on preferences
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the app
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Children's Privacy (COPPA Compliance)

Dreamlings is designed for families with children but is controlled by adult users. We take children's privacy very seriously and comply fully with the Children's Online Privacy Protection Act (COPPA).

• We do not knowingly collect personal information from children under 13
• We do not create child profiles or accounts
• We do not use persistent identifiers to track children
• Age band selection is stored locally on your device, not on our servers
• All content interaction data is anonymous and cannot identify any child

Parents control the app experience through their adult account.

5. Data Storage and Security

Your data is stored securely using industry-standard encryption:

• Account data is stored on Supabase (SOC 2 compliant servers)
• Passwords are encrypted using bcrypt hashing
• All data transmission uses SSL/TLS encryption
• Local preferences are stored on your device using secure storage

We retain your data only as long as necessary to provide our services or as required by law. When you delete your account, all associated data is permanently removed within 30 days.

6. Third-Party Services

We use the following third-party services:

• Supabase: Secure database and authentication (https://supabase.com/privacy)
• RevenueCat: Subscription management (https://www.revenuecat.com/privacy)
• Apple App Store / Google Play: App distribution and payments

We do NOT use:

• Analytics trackers (no Google Analytics, Firebase Analytics, etc.)
• Advertising networks
• Social media integrations
• Data brokers

7. Your Rights (GDPR Compliance)

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of data processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

8. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising privacy rights

Note: We do not sell personal information to third parties.

9. Data Retention

We retain your information as follows:

• Account data: Until you delete your account
• Usage data: 24 months (anonymized)
• Payment records: As required by law (typically 7 years)
• Local preferences: Until you uninstall the app

You can request deletion of your account and all associated data at any time through the app settings or by contacting [email protected].

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Compliance with Privacy Shield frameworks where applicable
• Data processing agreements with all service providers

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy in the app
• Updating the "Last Updated" date
• Sending an email notification for material changes

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Email: [email protected]

Dreamlings
PatternKind Ltd.

For data protection inquiries, please include "Privacy Inquiry" in your subject line.