Dreamland — Personalised Bedtime Stories
Effective Date: 8 July 2026Dreamland is a personalised bedtime story application operated by Dreamland ("we", "us", "our"), based in Cyprus. You can reach us at hello@visitdreamland.com.
Dreamland creates personalised AI-generated bedtime stories for children. Features include Family Narrator (voice recordings by grandparents and loved ones), AI-generated audio narration, and personalised story illustrations. This Privacy Policy applies to all users of the Dreamland mobile application and website at visitdreamland.com.
Dreamland is designed for parents and caregivers. All accounts are created by a parent or guardian aged 18 or over. Children do not create accounts independently. The parent or guardian is the account holder responsible for all child profile information.
When you create an account we collect your email address and a securely hashed password. We never store passwords in plain text.
We store the stories generated for your child — including story text, AI-generated audio, and illustrations — linked to your account. Stories belong to you and can be deleted at any time.
When a family member uses the Family Narrator feature, we store their voice recording securely. Before recording begins, the narrator sees a clear consent notice: by submitting the recording, they consent to their voice being stored and played back to the named child. Recordings are linked to a family code so loved ones can contribute across devices, and are stored separately from your account. For this reason, Family Narrator recordings are not automatically deleted when you delete your account. To request deletion of a narrator recording, email hello@visitdreamland.com and we will remove it.
If you choose to photograph your child's toy to personalise illustrations, the photo is stored so your child's stories keep their illustrations. Specifically, the photo is embedded within the associated story record and stored on our servers, and a copy is also held in your device's local storage. The photo is sent to our AI providers (Anthropic and OpenAI — see Section 5) to describe the toy and generate the illustration. Toy photos are retained for as long as the associated story and account exist, and are deleted when you delete the story or your account. On your device, the local copy is removed when you delete your account or uninstall the app. We only ever use a photo of the toy — never a photo of the child.
We ask for your consent before collecting any usage data. Usage logging is off by default. If you opt in, we record a small amount of anonymised usage information (such as which features are used) in our own backend and database infrastructure, to help us understand how the app is performing and improve it. This information is first-party only: it is not linked to advertising, is not sold, and is not shared with any third-party analytics provider.
You can withdraw consent at any time in app Settings, which stops all further usage logging. If you do not consent, no usage data is collected and full app functionality is unaffected.
We collect your device type, operating system version, and IP address for security, rate limiting, and service operation. IP addresses are not linked to user accounts and are retained for up to 90 days.
A unique family code is generated server-side and tied to your account. This links your account to Family Narrator recordings from loved ones and persists across devices and reinstalls when you are logged in.
We do not store payment card details. All billing is handled by the Apple App Store, Google Play Store, or RevenueCat. We receive only a confirmation of your subscription status.
| Purpose | Data Used | Legal Basis (GDPR) |
|---|---|---|
| Generate personalised bedtime stories | Child name, age, gender, toy description | Contract performance |
| Generate AI audio narration | Story text | Contract performance |
| Store and play Family Narrator recordings | Voice recording, linked story and user | Consent (obtained before recording) |
| Manage your account and subscription | Email, subscription status | Contract performance |
| Improve the product (if you consent) | Anonymised, first-party usage information | Consent |
| Prevent abuse and protect the service | IP address, request patterns, bot-protection check | Legitimate interests |
| Send bedtime reminders and narration alerts (if enabled) | Push notification token / device identifier | Consent |
We do not:
Dreamland contains no advertising of any kind, on any screen — including parent-facing screens. The information a parent provides about their child is used solely to generate that child's personalised stories.
We do not knowingly collect personal information directly from children under 13. All child data is provided by and managed by parents or guardians. If you believe we have inadvertently collected information from a child under 13 without parental consent, contact us immediately at hello@visitdreamland.com and we will delete it promptly.
For users in the European Economic Area, the United Kingdom, and Cyprus, we process personal data in accordance with GDPR. We apply data minimisation and best-interest-of-the-child principles required by the UK Children's Code and GDPR-K throughout our product design.
We share limited data with trusted services to operate Dreamland. We do not sell personal data. We do not share children's personal data with any advertising platform.
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Secure database and backend hosting (EU region) | Account, child profile, story, toy photo, and narrator recording data are stored here. | supabase.com/privacy |
| Anthropic (Claude) | Generating story text and describing the toy photo | Story prompts including child's first name, age range, and toy description, and the toy photo for description. No email or account data. | anthropic.com/legal/privacy |
| OpenAI | Generating story illustrations and audio narration | The toy photo and story details for the illustration, and story text for audio. No email or account data. OpenAI does not use API data to train its models by default. | openai.com/privacy |
| RevenueCat | Subscription management (mobile) | User ID and subscription status only. Payment processing handled by Apple or Google. | revenuecat.com/privacy |
| OneSignal | Delivering push notifications (only if enabled) | A device/push identifier, used only to send notifications you have enabled (such as bedtime reminders or narration-ready alerts). | onesignal.com/privacy_policy |
| Google Sign-In (only if you choose it) | Used only if you sign in with Google, to authenticate your account. We receive basic account identifiers from Google. | policies.google.com/privacy | |
| hCaptcha | Bot protection on web-based sign-up and promo redemption | A bot-protection check on the web. No personal profile or child data is sent. | hcaptcha.com/privacy |
| SMTP email provider | Sending transactional emails | Your email address, used only to send account-related emails such as password resets. | — |
We ask for your consent clearly, before collecting the relevant data. Here is what requires consent and when:
| What | When We Ask | If You Decline |
|---|---|---|
| Usage data collection | Before any usage data is recorded (off by default) | No usage data collected. Full app functionality unaffected. |
| Family Narrator voice recording | Shown in the recording screen before the narrator begins | Recording does not proceed without acknowledgement. |
| Push notifications (bedtime reminders, narration alerts) | When you enable reminders in Settings | No notifications sent. Can be enabled later. |
| Microphone access | When you first use Family Narrator recording | Recording feature unavailable. All other features work normally. |
| Camera access | When you first photograph your child's toy | Manual toy description used instead. |
You can review and withdraw any consent at any time in app Settings or by contacting us.
| Data Type | Retention Period |
|---|---|
| Account information (email, hashed password) | Until account deletion, then permanently deleted |
| Child profile information | Until account deletion |
| Generated stories, AI audio, and illustrations | Until you delete them or delete your account |
| Toy photos | Until you delete the story or your account |
| Family Narrator voice recordings | Stored separately from your account (linked to a family code) until you request deletion via hello@visitdreamland.com |
| Anonymised usage information (if you consent) | Retained in aggregate to help improve the app, until you withdraw consent |
| IP address and server logs | Up to 90 days for security purposes |
| Subscription status | Until account deletion |
You can delete your Dreamland account at any time directly within the app:
Deleting your account permanently removes your account data, child profile information, saved stories, AI-generated audio and illustrations, and toy photos from our database. A local copy of some data may remain in your device's local storage until you uninstall the app.
Family Narrator voice recordings are stored separately (linked to a family code) and are not automatically deleted when you delete your account. To request deletion of narrator recordings, email hello@visitdreamland.com and we will remove them.
If you have an active subscription, please cancel it via the App Store (iOS) or Google Play (Android) before or after deleting your account, as account deletion does not automatically cancel a store subscription managed by Apple or Google. Some records maintained by our service providers (such as OneSignal and RevenueCat) may be retained according to their own retention policies; you can request their removal by contacting us.
You can also request account deletion by emailing hello@visitdreamland.com. We will complete deletion within 30 days.
Under GDPR and applicable data protection law, you have the right to:
You can delete your account and most associated data directly in the app (see Section 8). For data without an automatic in-app deletion path (such as Family Narrator recordings), or to exercise any other right, contact us at hello@visitdreamland.com.
To exercise any right, contact us at hello@visitdreamland.com. We will respond within 30 days.
To make a complaint: in Cyprus — Commissioner for Personal Data Protection (dataprotection.gov.cy). In the UK — Information Commissioner's Office (ico.org.uk).
Our security measures include:
We will notify you promptly of any data breach affecting your personal data as required by GDPR Article 33.
The Dreamland app uses device local storage (not browser cookies) to store your session, preferences, and cached story data. This data stays on your device.
We do not use tracking cookies, and we do not use advertising identifiers. Dreamland contains no advertising.
The visitdreamland.com website uses only essential cookies necessary for the site to function.
We may update this policy as the product evolves or as legal requirements change. For material changes, we will notify you by email and via an in-app notice at least 14 days before changes take effect. The effective date above always reflects the most current version. Previous versions are available on request.
Continued use of Dreamland after changes take effect constitutes acceptance. If you do not agree, you may delete your account as described in Section 8.