Your privacy, in plain words.
Last updated: October 2026
This policy explains what DreamFrame collects, how we use it, and your rights. Written plain so you can read it in one sitting.
What we collect
When you create a DreamFrame account we store your email, display name, and a hashed password (handled by Supabase Auth). When you generate a video or audio clip we store the prompt text you typed, the image or audio you uploaded, the finished output, and metadata about which model handled it. When you buy credits or subscribe, PayPal gives us the order id, the amount paid, and the currency — never your card number.
How we use it
Your account details let you sign in and keep your gallery private. Your prompts and uploads are sent to the AI providers that render your output (Fal.ai, OpenRouter/Anthropic, ElevenLabs, HeyGen). We log request metadata so we can refund you automatically if a render fails. We do not sell your data, we do not train models on it, and we do not use your uploads to seed anyone else's output.
Content you upload
You keep ownership of anything you upload. You grant us the limited right to pass it to the AI model that produces your output and to store the finished video in your private gallery. You can delete any video from the gallery at any time; deletion is immediate and removes the file from Supabase Storage.
AI generations
Outputs are rendered by third-party models. Those providers have their own usage policies and may filter prompts for safety. We don't guarantee any specific result and we don't claim copyright over AI-generated frames — rights to AI output vary by jurisdiction, so please check your local law before publishing commercially.
Where your data lives
Account rows, prompts, and the credit ledger live in Supabase (Postgres). Rendered media lives in Supabase Storage. The backend runs on DigitalOcean App Platform in London (LON1). Payments flow through PayPal in a live environment. All transit is TLS 1.2+.
Cookies and tracking
We only set the first-party cookies that keep you signed in. We don't run advertising trackers. If we add product analytics later (e.g. PostHog) we'll update this page and give you a way to opt out.
Your rights (UK GDPR, GDPR, CCPA)
You can request a copy of everything we hold on you, correct it, or ask us to delete your account. Email [email protected] from the address on your account and we'll action it within 30 days.
Children
DreamFrame is not intended for anyone under 13. We don't knowingly collect data from children. If you believe a child has signed up, email us and we'll remove the account.
Changes
If we materially change this policy we'll show you the updated version the next time you open the app and ask you to re-accept.
Contact
Questions, requests, or deletion asks: [email protected]. We're a small team and we'll reply within a couple of business days.