Privacy Policy

Last updated: 6 August 2026

Drømmeby is an app where children and parents create personal bedtime stories together. We've built it to be a safe, ad-free place. This policy explains what information we process, why, and what rights you have.

The data controller is M2A ApS (Denmark). If you have questions, write to help@drommeby.com.

In short

• We show no ads and use no tracking for marketing.
• We never sell your data.
• We only collect what's needed for the app to work.
• Our servers and images are in the EU (Germany).
• You can delete your account and data yourself, in the app.

What information we process

Account information

When you sign in with Apple, Google, or an email code, we receive a name and/or an email address. With Sign in with Apple you can choose to hide your email. We also store your chosen language and your subscription status.

Stories and choices

The stories you create, and the choices you make along the way (such as the main character's name, topic and tone), are saved to your account so you can read them again. Your own stories are private and are not shown to other users. The library in the app consists of stories that Drømmeby creates itself.

So that pictures load quickly, the illustrations themselves are served directly from our storage in Germany over a long, randomly generated web address. They are not listed anywhere and cannot be browsed or searched, but anyone given such an address could open that single picture. The illustrations are drawn by a computer and contain no photographs of children; the words of your story are never served this way.

Notifications

If you allow notifications, we store a device token so we can let you know when a story is ready. You can turn this off again at any time.

Technical data

We process ordinary technical log data (such as the time of requests and errors) that is necessary to operate and secure the service. We use no analytics or advertising SDKs.

Why we process the information

• To create your account and sign you in.
• To create, save and read stories aloud for you.
• To notify you when a story is ready (only if you've said yes).
• To keep the service safe, stable and child-friendly.

The legal basis is performance of the agreement to provide the service, as well as our legitimate interest in a safe and well-functioning app. Notifications are based on your consent.

Processors we use

We only share information with trusted providers that help us run the service:

• OpenAI — generates the stories' text, images and read-aloud based on the choices you make. Content is screened to keep it child-friendly.
• Apple & Google — secure sign-in.
• Brevo — sends emails with one-time sign-in codes.
• RevenueCat — manages and validates subscription purchases.
• Expo — delivers push notifications.
• Hetzner — hosting and image storage (EU/Germany).
• Fastmail — email, if you contact us.

Children's privacy

Drømmeby is made for families. An account is created and managed by a parent or guardian, and both purchases and account deletion sit behind a parent gate. We do not knowingly collect personal information directly from children beyond the content the family enters themselves to create a story. If you're a parent and want to access or delete data, please contact us.

Storage and deletion

We keep your information for as long as your account is active.

You can delete your account at any time in the app: open the grown-up corner, choose Delete account, and confirm. This removes your account, the stories you made and your favourites straight away and for good — it cannot be undone. If a subscription is still running, cancel it in the App Store first. You can also write to help@drommeby.com and we will delete it for you without undue delay.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, rectify and erase your information, as well as to object to or restrict processing. You can also lodge a complaint with your data protection authority. Write to us and we'll help you.

Security

All communication with the app is encrypted (HTTPS), and data is stored on secure servers in the EU. We limit access to information to what's necessary.

Changes

We may update this policy. Significant changes will appear here with a new date at the top.

Contact

M2A ApS · help@drommeby.com