Privacy Policy

• Book generation:Your child's name, age, gender, and photo are used exclusively to create your personalized picture book.
• Co-creation: Your story details, reference photos, and confirmed people or objects are used to draft the story plan, artwork, page previews, read-through, and optional print file.
• Order fulfillment: Your email and shipping address are used to deliver digital and physical books.
• Account management: Your email is used for authentication, order confirmations, and essential service communications.
• Service improvement: Aggregated, de-identified usage data may be used to improve our platform.

We do not sell your personal information. We do not use child photos, private family details, or co-creation source material for targeted advertising. If analytics or conversion measurement tools are enabled, they should receive only appropriate event fields and should not receive uploaded source material.

We use third-party service providers to operate the platform. Each processes data only as necessary to provide its specific function. Current provider categories include:

• Supabase - Authentication, database hosting, and file storage
• Stripe - Payment processing (PCI DSS compliant; we never see or store your full card number)
• Google Cloud Translation - Translating story text into your selected language
• OpenAI, Anthropic, and Google Gemini - AI text, image, and structured generation where configured for your book
• Replicate - Image upscaling for print-quality illustrations where configured
• Prodigi - Print production and shipping fulfillment for hardcover orders
• Email, support, and CRM providers - Transactional email and customer support workflows where enabled
• PostHog, Google Analytics, and Google Ads - Product analytics and conversion measurement where enabled and limited to appropriate event fields

Photos and private source material are transmitted to service providers only when needed to provide the requested generation, storage, support, print, payment, or delivery function. Provider retention, abuse-monitoring, and model-training rules depend on the provider, service tier, and contract terms, so DreamInk maintains these as a provider register rather than making one blanket promise here. DreamInk does not authorize providers to use customer source material for advertising or public sample galleries.

We retain your data for as long as your account is active or as needed to provide our services. Specifically:

• Account data is kept until you request deletion.
• Book data (including generated images and text) is kept so you can access your library and reorder.
• Payment records are retained as required by applicable financial regulations.

You may request deletion of your account and all associated data at any time by contacting us at hello@dreamed.ink. We will process deletion requests within 30 days. Some data may be retained in backups for a limited period or where required for active orders, payment records, fulfillment, support, legal obligations, or security. Co-creation draft material can usually be removed from DreamInk-controlled project records and storage before checkout; printed or paid orders may require a support or legal retention review before destructive deletion. Where project material has already been processed by a payment, print, support, or generation provider, DreamInk will handle deletion or erasure requests according to that provider relationship and applicable law.

DreamInk is designed for parents and guardians to create personalized books for their children. We take children's privacy seriously and handle child information through parent- or guardian-led flows.

• We do not knowingly collect personal information directly from children under 13. Only a parent or legal guardian may create an account and submit their child's information.
• Where verifiable parental consent is required, DreamInk may use the consent method shown in the product flow, such as a temporary refundable card transaction. The current card verification amount is $0.70 and may change if processor minimums change. The product flow should provide the direct notice and consent details before collecting child personal information where that notice is required.
• Child information is used to create, review, support, store, print, ship, and operate the requested book, and to maintain required safety, fraud, consent, support, and legal records. It is not sold or used for public marketing without separate permission.
• Parents may review, request deletion of, or refuse further collection of their child's information at any time by contacting us at hello@dreamed.ink.

If you are a California resident and DreamInk is subject to the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), you may have the following rights:

• Right to Know: You may request details about the personal information we have collected about you and how it is used.
• Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
• Right to Delete: You may request that we delete the personal information we have collected about you, subject to certain exceptions.
• Right to Opt-Out of Sale or Sharing: DreamInk does not sell personal information. If analytics, conversion measurement, or advertising tools are configured in a way that is treated as sharing under California law, you may request an opt-out. DreamInk does not sell or share child photos, private source material, or generated books for cross-context behavioral advertising.
• Right to Limit Sensitive Personal Information: You may request limits on uses of sensitive personal information where applicable.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, contact us at hello@dreamed.ink. We will respond within 45 days.

We implement reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS)
• Row-level security policies in our database ensuring users can only access their own data
• Secure authentication via Supabase Auth
• PCI DSS-compliant payment processing via Stripe

While no system is completely secure, we take commercially reasonable steps to protect your data from unauthorized access, alteration, or destruction.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website prior to the change becoming effective. Your continued use of DreamInk after any changes constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy, your data, or your rights, contact us: