Effective date: September 20, 2026
This Privacy Policy describes how LOIONAS KKOSKELA, the individual developer, operator and rights holder of Dreamloop ("Dreamloop", "we", "our", "us"), handles information when you install the Dreamloop mobile application, create media with it, purchase through it, write to us, or otherwise use our related online services (together, the "Service"). Dreamloop is distributed through the Apple App Store under Apple ID 6616824172. We are the party responsible for the personal information processed to run the Service.
Read this Policy before you submit anything to Dreamloop. If you are not comfortable with what follows, please do not upload media to the Service.
## 1. WHAT DREAMLOOP DOES
Dreamloop is an AI creation tool for photos and videos. Depending on which feature you open, it lets you pick a template, write a text prompt, attach a reference photo, upload a photo or video together with a second photo supplying a face, generate a new image or clip, keep the finished result in the app's Library, and save it to your device.
The interface runs on your device. Generation and face swapping do not: they need serious computing power, and the greater part of that work is done on our own GPU servers. For certain features we also call specialised third-party AI models — currently Nano Banana 2 and Kling 3.0 — which run on their providers' systems. The media and instructions a job needs travel to whichever of those servers will handle it, over encrypted connections.
We do not train or fine-tune AI models on what you submit. Your media, prompts, facial information and finished results are never used for training, and the providers that process them for us are contractually barred from using them that way.
## 2. INFORMATION WE PROCESS
Dreamloop has no registration and no user accounts. We never ask for your name, your date of birth, your phone number or a password, and we do not know who you are unless you tell us.
### 2.1 Media and creative input
We process what you deliberately hand to the Service: the photo or video selected as the media to be edited, the photo supplying a replacement face, reference images attached to a template or a prompt, the wording of your prompts, the template you picked, and settings such as aspect ratio. Alongside those we process the short-lived working files a job produces — face crops, intermediate frames, previews — and the technical record of the job itself, so that a result can be returned to the device that asked for it. Section 5 sets out how long each of these survives.
### 2.2 Facial information
Face swapping cannot work without looking at faces. When you use a face feature, our software measures geometric characteristics of the faces present in what you uploaded — their position, outline, orientation, landmark points and similar features — so the app can show you which face is about to be replaced and then perform the replacement you asked for.
That measurement exists for one reason: to build the picture or clip you requested. Dreamloop does not use facial information to work out who you are, to log you in, to follow you between places or services, to enrich an advertising profile, or to add anyone to a face-recognition database. There is no permanent gallery of faces, no matching against third-party databases, and no sale of facial information to anyone.
Facial information, detected face crops and every temporary file derived from your uploads live on our processing servers and are erased on the schedule in Section 5.1 — no later than 24 hours after submission. Where the law where you live treats this as biometric or sensitive data, you give us your explicit permission to process it for that single purpose by choosing to upload a face, and you may withdraw that permission at any time by writing to us.
### 2.3 Device and diagnostic data
Some technical information reaches us automatically when the app talks to our servers:
- the device model, iOS version, Dreamloop version, language, region and time zone;
- the IP address and network conditions of the request, from which an approximate country can be inferred;
- pseudonymous identifiers: a random installation identifier created on first launch, the vendor identifier iOS assigns to the app, a Firebase installation identifier, and the service token issued to your installation;
- which features were used, when a job was requested, whether it succeeded or failed, and how long it took;
- crash information and error reports, including the app version and the description of the failure;
- the reason you select if you tap Report on a result, together with a reference to that result;
- signals used to detect fraud, automated abuse and attempts to bypass credit charges.
Advertising measurement and Apple's tracking permission are dealt with separately, in Section 2.7.
### 2.4 Purchases, subscriptions and credits
Everything paid in Dreamloop is billed by Apple through the App Store. Your card number, your billing address and your Apple Account credentials never reach us.
From Apple and from Apphud, the provider that administers our subscriptions and paywalls, we receive the product identifier you bought, the transaction and receipt references, whether a subscription is active, renewed, expired, cancelled or refunded, whether an introductory offer was used, the storefront country and the currency, and a pseudonymous user identifier. That information is what instructs our server to place credits in your balance and to unlock PRO features.
### 2.5 Messages you send us
If you use "Contact us" in Settings, your own mail app opens and writes to us directly. We then hold your email address, the text of your message and anything you attach, for as long as it takes to resolve the matter.
### 2.6 Device permissions
Dreamloop asks for two device permissions, and only when a feature actually needs them:
- Camera — used only if you choose to take a photo instead of picking one from your library. The picture you take is the only thing we receive.
- Photo library (saving) — used only when you tap Save on a finished result. Dreamloop does not browse your library through this permission; when you import media, iOS passes the app nothing but the specific items you selected.
Both can be changed at any time in iOS Settings. Dreamloop does not request push notifications and does not send them.
### 2.7 App Tracking Transparency and advertising measurement
When Dreamloop starts, iOS may show Apple's App Tracking Transparency (ATT) request asking whether you permit tracking. Its only purpose is marketing measurement: understanding which advertising campaigns bring people to Dreamloop and whether the money spent on them was justified.
If you permit tracking, an advertising identifier — Apple's IDFA, where the device makes it available — together with pseudonymous installation identifiers and events such as an install, a subscription or a purchase, may be used for attribution and combined with campaign information. For this we use Meta's SDK and Apphud, and Apple's own SKAdNetwork framework, which reports campaign performance to advertisers in aggregate and without identifying you. Amounts and currencies attached to purchase events are the ones you were actually charged, so that campaign returns can be calculated correctly.
If you refuse, we do not read the IDFA and we do not track you across other companies' apps and websites. Refusing changes nothing else: every creative feature, every purchase and every paid entitlement works exactly as it would otherwise.
Your uploaded photos, videos, prompts, facial information and generated results are never used for advertising, attribution, profiling or tracking of any kind.
You can revisit the decision whenever you like in iOS Settings, under Privacy & Security, then Tracking. That permission is separate from camera and photo access, and neither accepting these documents nor using the Service counts as granting it.
## 3. WHY WE USE THIS INFORMATION
We use the information described above to:
- receive, run and complete the generation and face-swap jobs you request;
- return finished results to your device and maintain the in-app Library;
- keep your credit balance accurate, grant the credits a purchase entitles you to, and prevent a job being charged twice or run without credits;
- recognise an active PRO subscription and restore purchases you have already made;
- answer support requests and investigate reports;
- find and fix crashes, monitor performance and improve reliability;
- measure the effectiveness of our advertising, subject to the tracking permission described in Section 2.7;
- protect users, the Service and our providers from fraud, abuse and security threats;
- enforce our Terms of Use; and
- comply with legal and regulatory obligations and defend legal claims.
Where the law requires a legal basis for processing, we rely on performance of our agreement with you, our legitimate interest in operating and protecting the Service, compliance with legal obligations, and your consent where consent is what the law requires — in particular for facial information and for tracking. Withdrawing consent stops future processing but does not make earlier lawful processing unlawful.
## 4. HOW INFORMATION IS DISCLOSED
We pass information on only where it is genuinely needed for the purposes set out in this Policy.
### 4.1 Providers who work for us
Most generation and face processing runs on our own GPU servers. The suppliers behind them provide computing capacity, storage, networking and security for that hardware; they do not offer an AI service of their own to you, and they are not permitted to use submitted faces or media for advertising, for identifying anyone, or for model training.
Where a feature depends on a specialised model we do not run ourselves, the material that feature needs is transmitted to the provider of that model — at present Nano Banana 2 and Kling 3.0. They process it only to return the requested result to us, are bound by the same restrictions, and may not use it to train or fine-tune models.
Besides them, we use:
- Apple — App Store distribution, StoreKit purchases, payment processing, refunds and subscription administration;
- Apphud — pseudonymous user identification, entitlement and paywall management, purchase and subscription events;
- Meta Platforms — measurement and attribution of our advertising, limited to installation, subscription and purchase events and, where you permitted tracking, advertising identifiers;
- Google Firebase — app configuration and hosting of the template artwork the app downloads. Artwork travels from Firebase to your device; none of your media travels the other way;
- Nano Banana 2 and Kling 3.0 — the third-party AI models called for the features described in Section 1, which receive only the material those features need.
Each provider receives only what its role requires, must act on our instructions, must protect the information to at least the standard this Policy sets, and may use it only to perform the service agreed with us. The retention limits in Section 5 apply equally to copies held on our behalf.
When you deal with one of these companies directly — buying through the App Store, for instance — that company also processes information under its own privacy policy. That does not reduce our responsibility for what we disclose from Dreamloop.
### 4.2 Legal and safety grounds
We may keep or disclose information where we reasonably consider it necessary to comply with the law, to respond to a valid request from a public authority, to protect someone from harm, to investigate misuse of the Service, to enforce our agreements, or to establish or defend legal claims.
### 4.3 Changes to the business
If Dreamloop is transferred — through a sale of assets, a reorganisation, a merger or similar — information may move with it. Whoever receives it remains bound by the commitments in this Policy for the information transferred.
### 4.4 When you ask us to
We disclose information where you instruct us to, or where you give separate and informed consent.
We do not sell your photos, videos, prompts, generated results or facial information, and we do not share them for cross-context behavioural advertising.
## 5. STORAGE AND RETENTION
### 5.1 Submitted material and facial-processing data: 24 hours at most
Everything you submit for processing is erased from our servers no later than 24 hours after it arrives. That covers source photos and videos, any audio inside a submitted video, reference images, replacement-face photos, prompts and generation instructions. Face crops, derived facial information and temporary working files are erased by the same deadline as the material they came from. The limit holds whether the job succeeded, failed, or was abandoned halfway.
### 5.2 Finished results: 48 to 72 hours, never longer
A completed photo or video, and its preview, stay on our servers only long enough for the app to fetch them — normally between 48 and 72 hours after they are created, and in no case beyond 72 hours. Dreamloop downloads each result to your device as soon as it is ready, precisely so that the server copy does not need to last. Save anything you want to keep.
The limits in Sections 5.1 and 5.2 cover working copies and any backup copies of the same data; neither extends the deadline. Logs are not used as a way of keeping media, prompts, facial-processing data or results beyond the periods stated here.
### 5.3 Copies on your device
Server retention limits say nothing about files sitting on your own phone. Results downloaded into Dreamloop's Library stay in the app's storage until you remove them — press and hold a tile to delete it — or until you delete the app, which takes the whole local store with it.
Deleting the app does not remove results you exported to the system Photos library, nor copies you shared with other apps, people or platforms. Those you manage in Photos, in Files, or wherever you sent them.
### 5.4 Identifiers, purchases and credit records
Pseudonymous installation identifiers, service tokens, subscription status, purchase records and credit balances are kept for as long as they are needed to give your installation access, to administer purchases and credits, to handle disputes and chargebacks, and to satisfy accounting and tax obligations. These records are separate from the short-lived media described above, and considerably longer-lived.
### 5.5 Technical, advertising, support and anti-fraud records
Technical logs, attribution records where tracking was permitted, support correspondence and fraud-prevention records are kept only as long as their purpose or the law reasonably requires. We judge each category by what it is for, how long a dispute over it might take to surface, and what the law demands.
Apple, Apphud, Meta and Google keep their own records of your direct dealings with them, under their own policies. Those records are not governed by the limits above.
## 6. INTERNATIONAL PROCESSING
Dreamloop and the providers it relies on operate in more than one country, so information may be processed outside the country where you live, including in the United States. Where a transfer out of the European Economic Area, the United Kingdom or Switzerland requires it, we rely on the European Commission's Standard Contractual Clauses, the UK Addendum, or another lawful transfer mechanism, and we require recipients to protect the information appropriately.
## 7. SECURITY
Traffic between the app and our servers is encrypted in transit, requests are signed and authenticated, access to stored media is restricted to the systems and people that need it, and uploads are deleted on a deliberately short schedule — the strongest protection available for material that has to leave your device at all. No online service can promise perfect security, so please submit only media you are comfortable having processed by an online AI service.
## 8. YOUR RIGHTS AND CHOICES
Depending on where you live, you may be entitled to:
- ask what personal information relating to you we hold and obtain a copy;
- have inaccurate information corrected;
- ask for information to be deleted;
- object to processing or ask that it be restricted;
- receive information in a portable, machine-readable form;
- withdraw a consent you previously gave, including for facial information and for tracking;
- opt out of the sale or sharing of personal information, or of profiling — we do neither; and
- complain to your data-protection authority, such as your national supervisory authority in the EEA or the Information Commissioner's Office in the United Kingdom.
Exercising a right costs nothing, and using one will never make Dreamloop work worse for you.
You can also act directly: remove Library items with a long press, delete the app to clear everything held locally, change camera and photo permissions in iOS Settings, manage tracking under Privacy & Security, and manage or cancel subscriptions through your Apple Account.
To make a privacy request, write to RyanMorris4581@hotmail.com with the subject "Dreamloop Privacy Request". Because Dreamloop has no accounts, please send the request from the device you used and include roughly when you last used the app and, if you purchased anything, the Apple order or transaction number from your receipt — that is how we locate the records that belong to you. Without something to match on we may genuinely be unable to find them, and we will say so rather than guess. We reply within the period the law where you live requires, and in any event within 30 days. Some requests are limited where we are legally obliged to retain information or where acting would expose someone else's data.
If you are in the European Economic Area, the United Kingdom or Switzerland, the legal bases we rely on are listed at the end of Section 3. If you are in California or another United States state with a comprehensive privacy law, the categories we collect are those in Section 2 — identifiers, commercial information, internet and device activity, visual information including facial information, and the content you submit — collected for the purposes in Section 3 and disclosed to the providers in Section 4.1. We do not sell personal information, and we do not use or disclose sensitive personal information for any purpose that would carry a right to limit it. You may exercise your rights yourself or through an authorised agent at the address above.
## 9. CHILDREN
Dreamloop is not built for children and is not directed to them. We do not knowingly collect personal information from anyone under 13. Where local law sets a higher minimum age for consenting to online data processing, that higher age applies unless a parent or legal guardian gives valid authorisation.
Uploading a photo or video of a child to be face-swapped, by anyone other than that child's parent or legal guardian, is forbidden by our Terms of Use. If you believe a child has used Dreamloop or that a child's image has been submitted without the required permission, write to us and we will investigate and act.
## 10. OTHER SERVICES AND WHAT YOU SHARE YOURSELF
Dreamloop may link to websites and services that we do not control and that follow their own privacy practices; this Policy does not govern them. Once you export, post or send a result somewhere else, the platform or person receiving it handles it under their own rules, and we can no longer influence what happens to it.
## 11. CHANGES TO THIS POLICY
We will revise this Policy as the app, the law or our security practices change. The effective date at the top always identifies the current version, and we give additional notice where the law requires it. Continued use after a revised Policy takes effect means it governs your future use, subject to any consent your jurisdiction separately requires.
## 12. CONTACT
Questions, complaints and privacy requests:
LOIONAS KKOSKELA
Individual developer, operator and rights holder of Dreamloop
Email: RyanMorris4581@hotmail.com
Subject: Dreamloop Privacy