Privacy Policy

We collect only the minimum information necessary to provide a safe, personalized bedtime story experience. We do not collect real email addresses, precise location data, photographs, or payment information.

Information you provide directly:

• Username — A chosen display name used to identify your account. This is not a real email address. Your account uses a generated identifier in the format username@dreamweaver.app, which serves only as an internal login credential.
• Child's Age Group — The age group selection (0-1, 1-3, 4-5, 6-8, 8-12, or 12+) used to personalize story content for developmental appropriateness.
• Content Preferences — Preferred story themes (such as animals, nature, fantasy, adventure, space, friendship, and others), preferred language (English or Hindi), and preferred narrator voice.

Information collected automatically:

• Interaction Data — Stories and poems you like or save, playback history, and content generation requests. This data helps us improve content recommendations.
• Device Preferences — Voice selection, language preference, and theme settings stored locally on your device via localStorage.
• Basic Usage Analytics — App usage patterns such as session duration and feature usage, collected in aggregate form to improve the app experience. These analytics do not identify individual children.

We use the limited information we collect solely for the following purposes:

• Personalized Content — To generate age-appropriate bedtime stories and poems tailored to the selected age group and preferred themes.
• Account Functionality — To allow users to log in, save favorite stories, and maintain their preferences across sessions.
• Audio Playback — To deliver stories and poems using text-to-speech in the selected narrator voice.
• Content Recommendations — To suggest stories and poems based on past interactions, liked content, and age group.
• App Improvement — To understand how the app is used in aggregate so we can improve features, fix issues, and enhance the overall experience.
• Safety and Moderation — To ensure all generated content remains appropriate and safe for children.

Dream Valley is designed with children's safety as a top priority. We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:

• We do not require children to provide any personal information beyond a chosen username and age group to use the app.
• We do not collect real email addresses, real names, or any other personally identifiable information from children.
• The username@dreamweaver.app format is an internal-only credential and does not correspond to an actual email inbox.
• We do not enable children to make their personal information publicly available.
• We do not use behavioral advertising or targeted advertising directed at children.
• All AI-generated content is filtered and reviewed for age-appropriateness before being presented to children.
• The app does not contain social features, chat functionality, or user-to-user communication.
• We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary.

We take data security seriously and implement appropriate measures to protect information:

• Cloud Storage — Account data (username, age group, preferences, saved stories) is stored securely using Google Firebase, which provides enterprise-grade security including encryption at rest and in transit.
• Local Storage — Device preferences (voice selection, language, theme settings) are stored locally on your device using browser localStorage. This data never leaves your device.
• Authentication — We use Firebase Authentication with secure token-based authentication. Passwords are hashed and never stored in plain text.
• Data Transmission — All data transmitted between the app and our servers is encrypted using industry-standard TLS/SSL protocols.
• Access Controls — Access to stored data is restricted to authorized personnel only and is limited to what is necessary for app operation and maintenance.

Dream Valley uses the following third-party services to operate. These services are carefully selected for their security standards and privacy practices:

• Google Firebase — Used for user authentication and cloud data storage (Firestore). Firebase is operated by Google and complies with major privacy regulations. Firebase processes the username-based credentials and stores user preferences and saved content. See Google's privacy policy at privacy.google.com for more information.
• AI Content Generation Services — We use AI language models to generate bedtime stories and poems. The information sent to these services is limited to the content request parameters (age group, theme, language) and does not include any personally identifiable information about the user. Generated content is filtered for child safety.
• Text-to-Speech Services — We use text-to-speech technology to convert generated stories into audio. Only the story text and voice selection parameters are sent to these services. No user-identifying information is transmitted.

Parents and legal guardians have the following rights regarding their child's information:

• Right to Review — You may request to review the personal information we have collected from your child by contacting us at privacy@dreamvalley.app.
• Right to Deletion — You may request that we delete all personal information associated with your child's account. We will process deletion requests within 30 days.
• Right to Refuse Further Collection — You may request that we stop collecting information from your child and delete their account entirely.
• Right to Data Portability — You may request a copy of your child's data in a commonly used, machine-readable format.
• Right to Restrict Processing — You may request that we limit the processing of your child's information to essential app functions only.

We retain user data according to the following guidelines:

• Account Data — Username, age group, and preferences are retained for as long as the account is active. Upon account deletion, this data is permanently removed within 30 days.
• Generated Content — Saved stories and poems are retained as long as the account is active. They are deleted when the account is deleted or when the user removes them.
• Interaction Data — Likes, saves, and playback history are retained for as long as the account is active and are deleted upon account deletion.
• Local Data — Data stored in localStorage on your device can be cleared at any time through your browser or device settings.
• Inactive Accounts — Accounts that have been inactive for more than 24 months may be automatically deleted, along with all associated data. We will make reasonable efforts to notify users before such deletion where possible.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy.
• For material changes that affect how we handle children's information, we will provide prominent notice within the app before the changes take effect.
• If required by COPPA or other applicable law, we will obtain verifiable parental consent before implementing changes that materially expand our collection or use of children's information.
• Continued use of Dream Valley after changes become effective constitutes acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your family's information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@dreamvalley.app
• Subject Line: Use "Dream Valley Privacy Inquiry" for general questions, or "Parental Rights Request" for requests related to your child's data.
• Response Time: We aim to respond to all inquiries within 5 business days and process all data requests within 30 days.