1. Introduction
Welcome to DreamBound ("the App"), operated by Fatmir Maloku ("we," "our," or "us"). We are committed to protecting your family's privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use DreamBound.
DreamBound is a tool for parents and guardians. The App is designed to be operated by adults (18+) to create personalized bedtime stories for their children. It is not intended for direct, unsupervised use by children.
2. Who This Policy Applies To
This policy applies to all users of the DreamBound app, including:
- Parents and guardians who create and manage the app and child profiles
- Any data relating to child profiles entered by parents/guardians
3. Information We Collect
3.1 Information You Provide
- Child Profile Data: Name, age, gender (optional), physical description (optional), and interests/hobbies entered by the parent/guardian to personalize stories. This data is stored in Google Firebase, linked to an anonymous account — no real identity, email, or phone number is required.
- Story Preferences: Story tone selections, chosen ingredients (location, companion, item), and saved story content.
3.2 Information Collected Automatically
- Anonymous Usage Analytics: Crash reports and performance metrics collected to improve the App (no personally identifiable information).
- Device Information: Device type, OS version, and app version for compatibility and debugging purposes.
3.3 Information We Do NOT Collect
- We do not collect names, emails, or phone numbers of parents or guardians
- We do not collect photos or voice recordings of children
- We do not collect location data
- We do not serve behavioural advertising
- We do not use tracking technologies for commercial profiling
4. Children's Privacy — COPPA & GDPR-K Compliance
DreamBound takes children's privacy seriously and complies with the Children's Online Privacy Protection Act (COPPA) and GDPR provisions for children (GDPR-K).
4.1 Our Position Under COPPA
The App is not directed at children under 13 as the primary user. It is a parental tool — all accounts are created by and controlled by a parent or guardian. Children do not create accounts, log in, or interact with the app independently.
4.2 What Data Relates to Children
Child profile data (name, age, interests) is entered by the parent to personalise story content. This data is:
- Stored under the parent's anonymous account in Firebase
- Used solely to generate story content
- Never shared with advertisers, third-party marketers, or data brokers
- Never used to track children across other apps or services
4.3 Parental Rights
Parents and guardians may at any time:
- Access all data stored for their child profiles within the app
- Edit or delete child profiles directly in the app (via Settings → Manage Profiles)
- Delete all data by deleting their account (Settings → Delete Account)
- Contact us to request data deletion at: support@dreambound.app
4.4 Parental Gate
To prevent children from accidentally accessing settings, deleting profiles, or making purchases, the App uses a Parental Gate — a simple arithmetic challenge that must be solved before accessing sensitive actions. This ensures only an adult can perform critical operations.
4.5 No Third-Party Marketing to Children
We do not allow any third-party advertising networks, behavioural tracking, or social sharing features that could expose child data to external parties.
5. How We Use Information
| Purpose |
Data Used |
Legal Basis |
| Generate personalised stories |
Child profile data (name, age, interests) |
Contractual (service delivery) |
| Improve app performance |
Anonymous crash logs |
Legitimate interest |
| Subscription management |
Purchase tokens via RevenueCat |
Contractual |
6. Data Sharing & Third-Party Services
We do not sell your data. We share limited data only with the following service providers to operate the App:
When a story is generated, the following child profile data is sent to Google Gemini for story and image creation: child's first name, age, gender/pronouns, physical appearance description (hair, skin tone, build), and story preferences (theme, tone, ingredients). No account identifiers, device identifiers, or email addresses are attached to these requests.
7. Data Storage & Security
- All profile data is stored in Google Firebase (Firestore) with security rules that allow only authenticated sessions to read/write their own data.
- Accounts are fully anonymous — no email or identity is linked.
- Data is stored on Firebase servers in the United States and/or European Union depending on your region.
- We apply industry-standard security measures and follow Firebase's security best practices.
8. Data Retention
- Child profiles and saved stories: Retained until the parent deletes them or deletes the account.
- Anonymous crash logs: Retained for a maximum of 90 days.
- Deleted accounts: All associated data is permanently deleted within 30 days of account deletion request.
9. International Users (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under GDPR:
- Right to access — request a copy of your data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to data portability — receive your data in a portable format
- Right to object — object to certain processing activities
To exercise these rights, contact us at support@dreambound.app. We will respond within 30 days.
10. App Store Age Rating & Parental Controls
- Apple App Store rating: 4+ (no objectionable content)
- Google Play rating: ESRB Everyone / PEGI 3
- Parents are encouraged to use device-level parental controls (Screen Time on iOS, Family Link on Android) for additional oversight.
11. Changes to This Policy
We may update this Privacy Policy as the App evolves (e.g., when adding new features like cloud sync or additional AI providers). When we make material changes:
- The "Last Updated" date at the top will be revised
- If the change significantly affects how child data is handled, we will provide in-app notice
Continued use of the App after changes constitutes acceptance of the revised policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your data:
Email: support@dreambound.app
Developer: Fatmir Maloku
Response time: Within 5 business days
For COPPA-specific inquiries or to request deletion of your child's data, please email with the subject line: "COPPA Data Request"