1. INTRODUCTION
Your privacy is important to us. This Privacy Policy explains how Full Tilt Industries, LLC ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards information when you use the Dreamy Den mobile application (the "App").
Please read this policy carefully. If you do not agree with our practices, do not use the App.
2. INFORMATION WE COLLECT
2.1 Information You Provide Directly
Account Information:
- Email address and password (for login and authentication)
- Name (optional, for profile display)
- Phone number (for SMS opt-in verification)
Payment Information:
- Credit card details (processed securely via RevenueCat and Apple/Google; we do not store full card numbers)
- Billing address and subscription status
- Transaction history
Child Profile Information:
- Child's name
- Child's age
- Child's gender (Boy/Girl)
- Avatar emoji selection
- Story preferences and generation history
Content You Create:
- Story preferences (themes, characters, character types, moral lessons, additional details)
- Generated stories and illustrations (stored in your account)
- Audio narration files
- Saved/archived stories
2.2 Information Collected Automatically
Device Information:
- Device type (iOS/Android)
- Operating system version
- App version
- Unique device identifier
- Device language and timezone
Usage Information:
- Pages visited within the App
- Features used and interaction patterns
- Time and duration of App usage
- Story generation frequency
- Number of stories generated per month (to enforce free tier limits)
- Errors and crashes
Location Information:
- We do not intentionally collect precise location data
- General location may be inferred from IP address for service optimization
SMS Data:
- SMS opt-in/opt-out status
- Timestamp of SMS messages sent to you
- Your response to SMS (e.g., "STOP" to unsubscribe)
2.3 Third-Party Data
We may receive data from third-party services you link to your account:
- Apple ID / Google Account (if you use these for authentication)
- RevenueCat (subscription status and payment history)
- Analytics providers (aggregated usage data)
3. HOW WE USE YOUR INFORMATION
3.1 Core App Functions
- Authenticate your account and verify login credentials
- Create and manage child profiles
- Generate AI-powered bedtime stories
- Generate illustrations and text-to-speech audio
- Store and retrieve your stories
- Display child names and story metadata in your library
3.2 Subscription & Billing
- Process payments and manage subscriptions (via RevenueCat)
- Track story usage (5/month free tier vs. unlimited Pro)
- Send billing confirmations and renewal reminders
- Handle refunds and billing disputes
3.3 Communication
- Send SMS reminders about new stories (opt-in)
- Send account security alerts (login attempts, password changes)
- Send service-critical notifications
- Respond to support requests
3.4 Service Improvement
- Analyze user behavior to improve App features
- Train and refine AI models for better story generation (using anonymized data only)
- Identify and fix bugs or technical issues
- Personalize recommendations and story options
3.5 Legal & Safety
- Comply with applicable laws and regulations
- Enforce these Terms of Service
- Protect against fraud, abuse, or illegal activity
- Respond to legal requests from law enforcement
3.6 What We Do NOT Do With Your Data
- ❌ We do not sell your personal information to third parties
- ❌ We do not use your data for advertising or marketing to third parties
- ❌ We do not share child profile data with data brokers or marketing firms
- ❌ We do not use SMS data for spam or unsolicited marketing
4. DATA SHARING & DISCLOSURE
4.1 Service Providers
We may share information with service providers who help us operate the App:
| Provider | Purpose | Data Shared |
|---|
| Firebase (Google) | Authentication, data storage, analytics | Email, App usage, stories (encrypted) |
| Twilio | SMS delivery | Phone number, SMS opt-in status |
| RevenueCat | Subscription management | Email, subscription status, payment status |
| Anthropic | Story generation API | Story preferences, character details, moral selections |
| Google Cloud TTS | Audio narration | Story text (converted to audio, not stored) |
| Gemini (Google) | Illustration generation | Story themes, character descriptions |
| Apple/Google | App distribution & payment | App installation, subscription status |
All service providers are contractually bound to:
- Use data only as necessary to provide their services
- Maintain the confidentiality and security of your data
- Not use data for marketing or third-party purposes
4.2 Legal Requests
We may disclose your information if required by law or in response to:
- Court orders or subpoenas
- Government investigations or regulatory requests
- Requests to enforce our Terms of Service
- Situations involving potential harm or illegal activity
4.3 Business Transfers
If the Company is acquired, merges with another company, or files for bankruptcy, your information may be transferred as part of that transaction. We will provide notice before such a transfer.
4.4 Aggregated & Anonymized Data
We may publicly share aggregated, anonymized insights, such as:
- "Dreamy Den users generate 50,000 stories per month"
- "Adventure is the most popular story theme"
This data cannot be used to identify you.
5. DATA RETENTION
| Data Type | Retention Period | Notes |
|---|
| Account information | While account is active + 1 year after deletion | Retained for billing and legal compliance |
| Child profile data | While account is active + 30 days after deletion | Deleted after 30 days per user request |
| Generated stories & illustrations | While account is active + 30 days after deletion | You can manually delete stories anytime |
| Payment information | While account is active + 7 years | Required for tax and financial records |
| SMS records | 12 months | For support and opt-out verification |
| Usage analytics | 24 months | Aggregated and anonymized after 6 months |
| Device/technical logs | 90 days | Deleted after this period unless needed for security |
Your Right to Deletion:
You may request permanent deletion of your account and all associated data. We will delete your information within 30 days, except:
- Information required by law (tax records, payment history)
- Anonymized, aggregated data (cannot identify you)
6. DATA SECURITY
6.1 Security Measures
We implement industry-standard security practices to protect your information:
- Encryption in transit: All data sent to/from the App uses TLS/SSL encryption
- Encryption at rest: Sensitive data stored in Firebase is encrypted
- Access controls: Only authorized employees can access sensitive data
- Authentication: Multi-factor authentication (via email verification) available
- Regular audits: Periodic security reviews and vulnerability testing
6.2 Limitations
- No security system is 100% secure
- We are not responsible for unauthorized access due to user negligence (weak passwords, sharing credentials)
- Data breaches beyond our reasonable control (e.g., compromised third-party services) may occur
7. CHILDREN'S PRIVACY
7.1 Direct Collection from Children
- We do not knowingly collect personal information directly from children under 13
- Parents/guardians create child profiles on behalf of their children
- We do not require children to create their own accounts
7.2 Child Profile Data
- Child profile data (name, age, gender, avatar) is used solely for:
- Generating personalized stories
- Displaying child names in your story library
- This data is never used for marketing, profiling, or third-party sharing
- Parents have full control and may delete child profiles at any time
7.3 Parental Controls
Parents may:
- View all stories generated for their children
- Delete any story from their library
- Manage SMS notification settings
- Request deletion of child profile data
If you believe we have collected information from a child in violation of this policy, please contact support@dreamyden.app immediately.
8. YOUR PRIVACY RIGHTS
8.1 Right to Access
You have the right to request a copy of all personal information we hold about you.
8.2 Right to Correction
You may request corrections to inaccurate or incomplete information (e.g., email address, child profile names).
8.3 Right to Deletion
You may request deletion of your account and all associated data. We will comply within 30 days, except for:
- Information required by law
- Anonymized aggregated data
8.4 Right to Opt-Out
- SMS: Reply STOP or disable in Settings
- Analytics: Disable non-essential analytics in Settings (if available)
- Communications: Unsubscribe from marketing emails by replying "UNSUBSCRIBE"
8.5 Right to Data Portability
You may request your data in a portable format (e.g., CSV) for transfer to another service.
8.6 How to Exercise Your Rights
To submit a privacy request, contact:
📧 support@dreamyden.app
Include:
- Your full name and email address
- A description of your request
- Any relevant account information
We will respond within 30 days.
9. CALIFORNIA CONSUMER PRIVACY ACT (CCPA) / CPRA
If you are a California resident, you have additional rights under the CCPA/CPRA:
| Right | Details |
|---|
| Right to Know | Request what personal information we collect, use, and share |
| Right to Delete | Request deletion of your personal information (with exceptions) |
| Right to Correct | Request correction of inaccurate information |
| Right to Opt-Out | Opt out of the sale or sharing of personal information |
| Right to Non-Discrimination | We will not discriminate against you for exercising your privacy rights |
Special Notice: We do not sell personal information as defined by CCPA. We may "share" information with service providers for business purposes (e.g., Firebase, Twilio), but this is covered by service agreements and does not constitute a "sale."
10. EUROPEAN USERS (GDPR)
If you are located in the European Union or UK, your personal data is processed under GDPR principles:
- Legal Basis: We process your data based on your consent (e.g., for SMS opt-in) and for legitimate business interests (service delivery, security, analytics)
- Data Controller: Full Tilt Industries, LLC
- Data Processing: All data processing complies with GDPR requirements
- Your Rights: You have rights to access, correction, deletion, and data portability (see Section 8 above)
- Data Protection Officer: For GDPR inquiries, contact support@dreamyden.app
11. COOKIES & TRACKING TECHNOLOGIES
11.1 In-App Tracking
The App may use:
- Session tokens (for login persistence)
- Analytics SDKs (to track usage patterns, errors, and crashes)
- Crash reporting (to identify and fix bugs)
These are not traditional "cookies" but serve similar purposes.
11.2 Opting Out
- You may disable analytics tracking in App Settings (if available)
- You may disable crash reporting, though this impacts our ability to troubleshoot issues
- You cannot opt out of session tokens (required for authentication)
11.3 Third-Party Analytics
We use:
12. THIRD-PARTY LINKS & SERVICES
The App may link to external websites or services (e.g., support documentation, App Store listings). We are not responsible for the privacy practices of external sites. Please review their privacy policies before providing information.
13. CHANGES TO THIS PRIVACY POLICY
We may update this policy as needed. Changes are effective upon posting to the App. We will notify you of material changes via:
- In-app notification
- Email to your registered address
Your continued use of the App constitutes acceptance of updated policies.
14. CONTACT US
For privacy questions, concerns, or requests, contact:
Full Tilt Industries, LLC
📧 Email: support@dreamyden.app
📍 Address: 22424 S Ellsworth Loop Rd, Box 341
Queen Creek, AZ 85142
We aim to respond to privacy inquiries within 10 business days.
Last Updated: May 2, 2026
Effective Date: May 2, 2026
By using Dreamy Den, you acknowledge that you have read and understood this Privacy Policy.