Privacy Policy

1. What we collect

• Account data: email address, display name, and password (stored hashed by our authentication provider, Supabase; we never see or store your raw password).
• Generated content: the prompts and lyrics you submit and the resulting videos, images, flyers and music, along with style/format choices and timestamps.
• Voice recordings and photos you choose to upload: if you record your voice (for example, singing in the Music Studio) or upload a photo, logo or product image, that file is stored so it can be used for the generation you asked for. The app only uses the microphone while you are actively recording.
• Credit & payment records: your credit balance, transaction history, and payment references. Card details are entered directly into Paystack's own checkout; we never receive or store your card number.
• Usage data: basic technical logs (e.g. request timestamps) needed to operate and secure the Platform.

2. How we use it

• To create and manage your account and authenticate you;
• To generate the videos, ads, stories, flyers, images and music you request (your prompt, and any recording or image you attach, is sent to our AI provider, fal.ai, solely to produce that generation);
• To process credit purchases via Paystack and maintain accurate credit balances;
• To operate the public creation feed, if you choose to keep a generation public;
• To detect abuse, enforce our Terms of Service, and keep the Platform secure;
• To respond to support requests.

3. Who we share data with

We don't sell your personal data. We share the minimum necessary data with:

• Supabase: our database, authentication, and hosting provider for account and content data;
• fal.ai: receives your generation prompts, settings and any recording or image you attach, to produce your video, image or music output;
• Paystack: processes your payment directly; we receive only a transaction reference and status, not your card details;
• Vercel: hosts the website and serverless functions that power the Platform.

We may also disclose data if required by law, or to protect the rights, safety, or property of Dreamsmore AI or our users.

4. Public content

Generations you create are public in the community feed by default, showing your display name, avatar initials, and the generated result. You can request removal of a specific creation by contacting us.

5. Data retention

We retain account and generation data for as long as your account is active, plus a reasonable period afterward for legal, accounting, and fraud-prevention purposes. You can delete your account and associated data yourself at any time, in the app or on the website. See how to delete your account.

6. Cookies & local storage

We use your browser's local storage to remember your theme preference (light/dark) and your login session token, so you stay signed in between visits. We don't use third-party advertising trackers.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these rights, contact us at officialxpressride@gmail.com.

8. Security

We use industry-standard measures to protect your data, including encrypted storage of sensitive configuration secrets and row-level security on our database. No system is perfectly secure, and we can't guarantee absolute security of information transmitted over the internet.

9. Changes to this policy

We may update this policy from time to time; the "Last updated" date above will reflect the most recent revision.

Data controller