Privacy Policy

01

Who is responsible?

Dreambits is operated by Valentin Labs AB, the controller responsible for the personal data described here. Our company and contact details are at the end of this page. This policy covers the Dreambits web library, account and reading experience.

02

For parents and guardians

Dreambits is an ad-free library for children and their families. An adult creates and manages the Family Account and its bookshelves. Each bookshelf can have an optional display name and a preset avatar. We suggest a nickname or the default bookshelf number. Children do not have separate sign-ins. We do not ask for dates of birth, photographs or precise location.

Bookshelves store the books you choose to add. We save the link between the Family Account, bookshelf and book, without an added-at timestamp. The app does not save the page a child reached or a reading history. Reading statistics are disabled and the Top Books list is hidden.

Reading is not anonymous: sign-in and book delivery require technical information. Our hosting providers may process IP addresses, browser information and requests containing book or file references. These can reveal which book was requested. We use this information for delivery and security, not advertising or assessing a child’s reading ability.

You can remove books, export account data or delete the account in Account. Contact support@dreambitslibrary.com to request access, correction or deletion of information that may relate to your child, or to stop further processing. We may need to verify your authority to make the request. Some essential information is required to continue providing access to the service.

An adult should handle sign-in, payments and support. Do not send children’s names, photographs, passwords or other sensitive information to support. We do not request additional information about a child to provide access to books.

03

The information we handle

You provide an email address and password when creating an account. Our authentication provider manages password verification, sessions and account-security information. We do not store readable passwords in the Dreambits application.

Contract confirmations and withdrawal notices: agreement reference, terms version and text, price, language, email address, agreement and receipt times, and email delivery status. Withdrawal requests are also sent to support. Application records are included in account export and deleted with the account. Separate support, payment and backup copies follow their own retention periods.

• Account and preferences: your account ID, email, language choices and books saved to your bookshelf. A server-controlled history records your terms acceptance: document version, language, when you acknowledged it, when the server recorded it, the registration or Account flow used, and document fingerprints that identify the terms and privacy text shown.
• Bookshelves store account ID, bookshelf ID, order slot, optional display name, selected preset avatar and book IDs, without timestamps for book selections. They are included in account exports. In Account, you can edit names and avatars or remove an additional bookshelf and its book selections. At least one bookshelf remains until the Family Account is deleted. Local favorites are not imported automatically. Local page progress is no longer saved; older values are cleared when the updated reader opens.
• Reading statistics: no new reading activity is collected for statistics or Top Books. Any retained older records remain subject to the retention, export and deletion rules below.
• Subscriptions: Stripe customer and subscription identifiers, selected plan, trial history, status and access dates. Stripe handles card details and payment records; Dreambits does not store your full card number.
• Service and support: messages you send us and technical request information needed to deliver and protect the service. Hosting, authentication and payment providers may process IP addresses, browser information and security logs. Our application’s rate-limit records use a time-limited keyed hash instead of a raw IP address.
• Previous statistics choices and withdrawals may remain with the account to respect your choices. New activation is blocked.

04

Why we use it

We process the adult’s account and subscription information where necessary for our contract with the adult. Essential account emails include confirmation, password recovery and service messages. Where book choices, language settings and technical requests relate to a child, the necessary processing relies on our and the family’s legitimate interest in providing the requested reading service and remembering the family’s own choices, giving particular weight to the child’s privacy. We do not use this information for advertising or behavioral profiling.

Security and abuse prevention rely on our legitimate interest in protecting the service, taking account of users’ rights and particularly children’s interests. Temporary payment checks are kept briefly after closure for our and the customer’s legitimate interest in investigating payment errors. Reading statistics are disabled. We use payment or support records where necessary for legal obligations or claims. Using Dreambits or accepting its terms does not constitute consent to reading statistics.

We do not sell personal information, display advertisements or use reading activity for advertising profiles, individual assessments of children or maximizing their engagement.

05

Reading statistics are disabled

Reading statistics cannot be enabled in the current service. Top Books is not displayed. Before introducing this feature, we would need to assess its privacy safeguards and explain the new processing. A Family Account, accepted terms or registered payment card is not itself verified parental consent.

06

Cookies, local storage and device features

Sign-in uses cookies for a secure session. Recovery and registration use short-lived verification cookies. Browser storage remembers language and reader settings, but not page progress. Older progress values are cleared when the updated reader opens. Previous local favorites are not automatically imported into the account. The signed registration receipt cookie lasts at most 24 hours and is removed after processing or sign-out.

You can clear or block browser storage, but this may sign you out or remove local settings. It does not delete your account or cloud bookshelf, or cancel your subscription.

Optional device tilt is processed on your device to move the reading card. Dreambits does not send these motion readings to our server. Audio playback does not require access to your microphone.

For Book Workshop administrators, “Remember this device for 30 days” can store a signed security receipt in a protected cookie. It applies to the current browser and sign-in session and is not extended by activity. Sign-out, password changes or revoked access can end its validity earlier. It is not used for reading statistics.

The active bookshelf ID is stored in sessionStorage for the current browser tab. This keeps your selection when navigating or reloading, rather than recording reading activity. The selection is removed on sign-out and may be cleared when the tab session ends.

07

Payment information and Stripe

Opening the payment step loads Stripe’s forms. Card details go directly to Stripe. Our server retrieves the name and billing address from Stripe to validate country, calculate tax and manage the subscription. Billing country must be Sweden or the USA and match your selected country of residence. We store the country and payment references; the name and billing address are also used on the Stripe customer.

For US subscriptions, we compare the billing country with the card’s issuing country from Stripe to support the tax location. The automated flow requires a genuine US billing address and a US-issued card, including when changing cards and renewing. Missing or conflicting information stops the payment attempt for review. A foreign-issued card does not prove that you live abroad; contact support@dreambitslibrary.com for help and an individual review. We do not use GPS or information about your child’s reading for this check.

A separate, access-restricted record stores billing country, card-issuing country, source and time of the information, check result and necessary Stripe references to card setup, subscription, invoice and payment. It does not copy your full address, email, IP address, card number or your child’s details. The references can still be linked to the payment and are personal data. These records support payment checks, tax and accounting, not advertising. Necessary accounting records remain after account deletion for the periods below.

Stripe may use cookies, device and connection information for payments and fraud prevention. Its form loads in Checkout. Moving from the adult flow to the library loads a new document so payment scripts do not carry over into the reader. Real purchases remain closed.

08

The services that help us run Dreambits

We use Supabase for accounts, database and book storage; Netlify to host and deliver the web application; Resend for account emails, contract confirmations and withdrawal receipts; and Stripe for payment forms (Elements), subscriptions, invoices and the customer portal. They receive information needed for their roles. Stripe may also act as an independent controller for some payment, fraud-prevention and regulatory purposes.

Cloudflare Turnstile protects account forms against bots and abuse. It processes technical signals such as IP address, browser information, the connection’s TLS fingerprint and the site where the check runs. Supabase verifies the result before protected account actions. Cloudflare processes these signals for website security and also uses them under its own responsibility to improve bot detection. Turnstile is not used for advertising or reading statistics. Turnstile is confined to account forms, not the library or reader; entering the library loads a new document.

Better Stack monitors availability, backups and fixed error signals and sends operational alerts to our team. Error signals go to its US region and are restricted by the application to error code, time, HTTP status and environment; these signals do not include account email, reading history, payment details or raw error messages. Hostinger hosts the support mailbox. Proton Drive stores separately encrypted backups, and Proton Pass holds the recovery key separately.

The primary Dreambits database is configured in Stockholm and the sending domain in Resend uses an EU region. This does not mean that all provider processing, support or subprocessors stay in the EU/EEA. Information may be processed elsewhere. Applicable transfer safeguards and provider arrangements must be assessed for the service; contact us for information about the arrangements relevant to your data.

09

How long information stays

Account details, saved books and language preferences are kept while your account is in use, and then only as needed for applicable legal obligations or claims. Subscription cancellation does not delete your account.

For real purchases, we retain necessary accounting and tax records, including tax-location evidence, through the seventh year after the calendar year in which the relevant financial year ended. Our financial year ends on 31 January. For example, a business transaction in October 2026 belongs to the financial year ending in January 2027, so its records are retained through 31 December 2034. Account deletion, cancellation or a refund does not shorten this statutory period. An issued but unpaid invoice may also be an accounting record. This retention relies on a legal obligation, not your consent.

Temporary location checks that are not needed as accounting records are deleted after 30 days from closure of the attempt or review case. Pending payments and cases must be checked first. Test-environment location records are deleted after 30 days from recording, even after account deletion. If a specific legal requirement or ongoing dispute needs longer retention, we limit the exception to the relevant records and review that need. Backups follow their separate periods below; expired records must be removed before a restored database is put back into use.

An hourly database job deletes reading sessions older than one day and weekly records older than 13 calendar weeks before the start of the current week (Monday, Swedish time). Weekly records can therefore remain for just under 14 weeks. Cleanup does not require new reading activity and runs when our computer is off. During normal operation, deletion occurs by the next hourly run. Legacy browser-based statistics follow the same retention schedule.

Better Stack’s error-signal log source retains logs for three days. Our backup job prunes encrypted backups: daily copies are kept for 14 days and weekly copies for eight weeks. Deleted cloud copies can remain in trash for another 30 days. The job currently runs on our Mac, so an offline computer can delay pruning; missed backups are monitored with alerts. Copies are used for recovery, not ongoing statistics. Other provider logs, support and payment records have separate retention periods.

You can export account data and delete your reader account in Account. Deletion requires your current password and confirmation. We stop the subscription and delete the account, bookshelf, language choices and retained account-linked statistics. Available location evidence belonging to the account is included in its export. The export does not include providers’ own records; contact us for those requests or for access to separately retained records after account deletion. Administrator accounts are closed through our team. Payment records, provider logs and backups may be retained separately.

Abandoned payment attempts are checked automatically after 24 hours. Pending card setups are canceled only after checks with Stripe show that it is safe; processing payments and concluded agreements are protected. Attempt records confirmed as ended, without an agreement, subscription or email receipt, are removed by an hourly job after 30 days from recorded expiry. This job does not delete Stripe’s payment records or saved payment methods.

Closed support cases are covered by our procedure for deletion after 12 months, except records required for legal obligations or ongoing claims. Separate protected deletion and withdrawal journals are used during backup recovery to prevent deleted accounts and withdrawn statistics choices from being reinstated.

10

Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction or a portable copy of your personal data. You can object to processing based on legitimate interests. Reading statistics are currently disabled. Contact us for other rights; we may need to verify your identity.

You can complain to the Swedish Authority for Privacy Protection (IMY), or your local data-protection authority.

11

Security and updates

We use access controls, protected sessions and restricted access to private book and account data. No online service can guarantee absolute security. Please keep your login details private and contact us if you suspect unauthorized access.

The date above identifies this version. Material changes to the way we handle information will be explained through an appropriate notice. This preview policy will be reviewed before commercial launch.