Privacy Policy — DreamUp

This Privacy Policy explains what information the DreamUp app (the “App”) handles, why, who it is shared with, and the choices you have. DreamUp is developed and published by TriCode Studio (“we”, “us”, “our”). This policy covers DreamUp only. It replaces the earlier policy that covered DreamUp and Quick Switch together.

In short: DreamUp makes images in the cloud. When you create something, your photo or prompt is sent to our server and on to an AI provider to make the image, and our server does not keep it. Your creations are saved on your phone. You don’t need to sign up: the App gives each install an anonymous account, and signing in with Google is optional. Ads are shown by Google AdMob and its partners. We do not sell your personal information.

1. Quick summary

Question	Answer
Do I need an account?	No. An anonymous account is created automatically the first time you open the App. Signing in with Google is optional.
Where are my photos processed?	On our server and by one of our AI providers (section 5), only to make the image you asked for. Our server does not store them.
Where are my creations kept?	On your phone, in the App’s storage, and anywhere you choose to save or share them.
Does the App show ads?	Yes, through Google AdMob, with Unity Ads and Liftoff (Vungle) as mediation partners.
Do you sell my data?	No.
Can I delete my data?	Yes. See section 9.

2. Information you give us

Photos you choose. When you use a photoshoot style, Upscale or Remove Background, you pick a photo from your device or take one with the camera. The App sends it to our server, which passes it to an AI provider to create the result (sections 5 and 6). Please use photos of yourself, or of people who have agreed.
Prompts and choices. The text you type, and the style, shape and tool you choose.
Your Google account, if you sign in. We receive your Google account’s name, email address and profile-photo link, and keep them in your DreamUp profile together with your account ID.
Ratings and reports. If you rate a result or report it (for example as sexual, violent or hateful), the App sends us the prompt, your rating or report reasons, and a reference to the image. It does not send the image itself.
Messages to support. Whatever you write to us by email, and your email address.

3. Information collected automatically

Account ID. A random anonymous ID from Firebase Authentication, created on first launch. If you sign in with Google, your Google-linked account ID is used instead and your credits move to it. The ID is how we keep your credits and purchases.
Credits and purchases. Your credit balance and its history: what credits were added or used for, the amount, and when. When you buy credits or a subscription, Google Play processes the payment and gives us the product and a purchase token; our server checks the token with Google Play before adding credits, and keeps a record of it so the same purchase can’t be credited twice. We never receive your card or other payment details.
Usage and diagnostics. Firebase Analytics records how the App is used (for example screens opened and features used), together with your device model, operating system, language, approximate country and an app-instance ID. Firebase Crashlytics collects crash reports, and Firebase Performance Monitoring collects performance data such as how long network requests take. When a generation fails, our server logs your account ID, the tool used and the error, not your photo or prompt.
Advertising data. Google AdMob and its mediation partners (Unity Ads, Liftoff/Vungle) may collect device identifiers including your advertising ID, your IP address, and how you interact with ads, to show and measure ads and to prevent ad fraud. Where the law requires consent for personalised ads (such as in the EEA and the UK), the App asks for it using Google’s consent tool.
App integrity. Firebase App Check, using Google Play Integrity, checks that requests come from a genuine copy of the App on a genuine device. This protects the service and your credits from abuse.
Notifications. If you allow notifications, Firebase Cloud Messaging gives your device a token that lets us send you messages, such as new styles.
App settings. Firebase Remote Config downloads settings that adjust how the App behaves, such as which features are switched on.

DreamUp does not collect your precise location, contacts, call logs or messages.

4. How we use information

To create the images you ask for, and to show you your results.
To keep your credits, purchases and subscription, and to let you sign in.
To show ads, which pay for the free features.
To review reports, keep the service safe and prevent fraud and abuse.
To find and fix crashes and improve the App.
To send notifications, if you allowed them.
To answer your messages.

We do not use your photos to train AI models. We do not use your photos to identify you or anyone else, and we do not create face templates or other biometric identifiers from them.

We use these service providers to run the App. Each handles data under its own terms and privacy policy:

Provider	What it receives	Why
Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Analytics, Crashlytics, Performance Monitoring, Cloud Messaging, Remote Config, App Check). Privacy	Account ID, profile, credits and purchase records, usage and diagnostic data, notification token; photos and prompts pass through our Cloud Functions	Running the App, sign-in, credits, diagnostics
Google Gemini API. Terms	Your photo and prompt	Creating images
Stability AI. Privacy	Your photo or prompt	Creating images, upscaling, removing backgrounds
fal.ai. Privacy	Your photo or prompt	Creating images
Google AdMob. Privacy	Advertising ID, device and ad-interaction data	Showing and measuring ads
Unity Ads. Privacy	Advertising ID, device and ad-interaction data	Showing ads (through AdMob)
Liftoff (Vungle). Privacy	Advertising ID, device and ad-interaction data	Showing ads (through AdMob)
Google Play. Privacy	Purchase details, integrity checks	Payments, subscriptions, app integrity

We may also disclose information if the law requires it, to protect the rights and safety of our users or others, or as part of a sale or transfer of the App, in which case this policy would continue to apply to your information.

6. Your photos and the AI providers

When you create an image, our server receives your photo or prompt, sends it to the AI provider that makes that kind of image, and returns the result to your phone. Our server does not save your photo, your prompt or the result. The provider processes the request under its own terms, linked above, which also say how long it may keep the data and whether it uses it. The finished image is stored on your phone, not on our servers.

7. Where information is processed

Our server and database run on Google Cloud in the United States, and our providers may process information in the United States and other countries. These countries may have different data-protection laws from yours. Where the law requires it, these transfers rely on the safeguards the providers offer.

8. How long we keep information

Photos and prompts you send to create images: not stored by our server; held only while your image is made.
Your creations: on your phone until you delete them in the App or uninstall it. Images you saved to your gallery or shared stay where you put them.
Profile, credits and purchase history: while your account exists. See section 9 for deletion.
Purchase records: the record of each purchase token is kept after an account is deleted, for as long as needed to stop the same purchase being credited twice and to meet accounting and legal obligations.
Ratings and reports: kept to improve and moderate the App. Email us to have yours deleted.
Server error logs: kept in Google Cloud Logging, which deletes them after 30 days by default.
Analytics, crash and performance data: kept by Firebase for the retention periods its services apply.

Versions of DreamUp before the current credit system kept free-credit counts under the device’s Android ID. Those records are no longer used by the App.

9. Your choices and rights

Use the App without signing in. Google sign-in is optional.
Delete your account. If you signed in with Google, open the Profile tab, tap Settings (the gear) and choose Delete Account. This deletes your sign-in account, your profile, and your credit balance and history. If it doesn’t work, or you no longer have the App, request deletion on our account deletion page or email support@tricodestudio.com, and we will delete them within 30 days. Purchase records are kept as described in section 8. Deleting an account does not refund unused credits or cancel a Google Play subscription: manage subscriptions in Google Play. If you never signed in, your anonymous account isn’t linked to your name or email.
Delete your creations. Delete images in the App, or uninstall it to remove everything stored in the App.
Advertising. You can reset or delete your advertising ID, or limit ad personalisation, in your device’s Google settings. Where consent is required, you can choose whether to allow personalised ads.
Notifications and camera. Both are optional. You can turn notifications off and deny camera access in your device settings; you can still pick photos from your gallery.
Your legal rights. Depending on where you live (for example in the EEA, the UK or California), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how it is used, and to withdraw consent. To use these rights, email support@tricodestudio.com. You may also complain to your local data-protection authority.

10. Legal bases (EEA and UK)

Performing our agreement with you: creating your images, keeping your credits, purchases and sign-in.
Legitimate interests: keeping the service secure, preventing fraud and abuse, fixing crashes and understanding how the App is used.
Consent: personalised ads where consent is required, and notifications.
Legal obligations: keeping purchase records.

11. Children

DreamUp is not directed to children and is not meant for anyone under 13, or the minimum age required in their country. We do not knowingly collect personal information from children. If you believe a child has given us information, email us and we will delete it.

12. Security

Information travels between the App, our server and our providers over encrypted connections. Your credit balance and history can be read only by your own account, and App Check helps block requests that don’t come from the genuine App. No system is perfectly secure, but we work to protect your information.

13. Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top.

14. Contact us

Questions about this policy or your information: support@tricodestudio.com. TriCode Studio is the developer of DreamUp and is responsible for the information described here.