DreamPrivacy Policy
Who we are
DreamTales is a fairy-tale story service made by intrk. intrk is the data controller for the personal data described here. This policy explains what we collect, why, the legal basis we rely on and how you stay in control. Questions? Write to kontakt@dreamtales.no.
INTRK LUND (org.nr 936 462 855 MVA), Galgeberg 3E, 0657 Oslo is the trader responsible for DreamTales and the data controller named above. You can reach us at kontakt@dreamtales.no.
What we collect
Your account email address, so you can sign in and we can manage your account.
For each child you add: a first name, an age, a skin tone, a gender choice and a chosen avatar. We use these only to personalize the stories. We never ask for or store a child's photo and we never create a likeness of your child: illustrations are drawn in an art style you choose, matched to their age.
The stories, illustrations and narration you generate: your own content, stored so you can read them again.
A small amount of technical data needed to run the service, such as a language preference kept on your device. We do not use advertising IDs or location data.
If you accept it, Google Analytics also gives us aggregated visitor statistics for the website: how many people visit and which pages they read. It is never linked to your account or to a child's details.
Cookies and storage on your device
We use necessary cookies and storage: the sign-in session that keeps you logged in, what our payment provider needs to process a payment safely and functional preferences such as your language choice and the cookie choice below. No ads and no advertising IDs.
In addition we use Google Analytics for aggregated visitor statistics. It sets a cookie and is not necessary to run the service, so we ask first: the legal basis is your consent (GDPR Article 6(1)(a) and ekomloven section 2-7b). Choose "Only necessary" and no analytics cookie is set and no analytics script is loaded at all.
The first time you visit, a short notice asks you to choose. Your answer is stored as a single flag on your device so the notice is not shown again. To change your mind, clear this site's data in your browser and answer again.
Why we process it and our legal basis
We process your account email and the content you create to provide the service you signed up for. The legal basis is performance of our contract with you (GDPR Article 6(1)(b)).
A child's first name, age, gender choice and avatar are processed on the same basis, solely to tailor that child's stories, at your direction as the parent or guardian who set up the account.
We ask for a first name, an age, a skin tone and a gender so the story's main character can resemble the child listening and the child can recognise themselves in it. We never use a photo and the character is not a portrait of your child: it is drawn in an art style you choose, with features matching the age, skin tone and gender you gave us.
Providing a first name and an age is necessary to make the story. If you do not provide them, we cannot create one for that child.
We keep the service secure and prevent abuse on the basis of our legitimate interests (GDPR Article 6(1)(f)).
Who processes data for us
We use a small number of trusted providers who process data on our behalf under data-processing agreements: Google Cloud (secure hosting, storage and the AI that generates the stories), Vercel (web hosting), Stripe (payments), Resend (transactional email, which means it processes your email address to deliver messages we send you about your account) and Google Analytics (aggregated visitor statistics for the website, only if you accept it).
We never sell your or your child's data and we never share it for anyone else's own purposes.
Where your data is processed
Some of these providers may process data outside Norway and the EEA, including in the United States. Where they do, the transfer is covered by appropriate safeguards such as the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework.
You have the right to obtain a copy of the safeguards that apply to a given transfer. Email kontakt@dreamtales.no and we will send it to you.
Payments
Subscriptions and story packs are processed by Stripe. Stripe handles your card details. We never see or store them.
AI-generated content
Stories, illustrations and narration are generated by AI. Every generated story is screened by a server-side content filter before it is saved and you can report any story from inside the player so we can review it.
Your stories stay private
The stories you create are private to your family. They are not published anywhere and not shared with other users. There is no public link to them. Nobody else can read your child's story.
The one exception is a story you choose to report for review from inside the player. When you do that, we read the reported story so we can judge it and we see only an internal family identifier alongside it, not your name and not your email address.
How long we keep your data
We keep your account and content for as long as your account is open. When you delete your account, everything is erased permanently and without undue delay. If you ask us to delete your data by email instead, we do the same.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to correct it, to delete it, to restrict or object to how we process it and to receive a copy in a portable format. You can do most of this yourself in the app.
To delete everything at once: Dashboard → Account → Delete account removes everything about the children you added, every story and its media, your settings and the account itself, permanently. The steps are also at https://dreamtales.no/delete-account. For anything else, email kontakt@dreamtales.no.
If you believe we have handled your data wrongly, you can lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
Children's privacy
DreamTales is a service for parents and guardians, not a service directed to children and it is not meant to be used by a child on their own. A grown-up creates the account, adds children and controls purchases behind an adult check. A child's name, age, gender choice and avatar are used only to personalize their stories, never for anything else. We never collect a child's photo or contact details and we never create a likeness of a child: illustrations are drawn in an art style you choose, matched to age, with the name only ever in the story's words.
Changes to this policy
We may update this policy as the service evolves; the date here shows the latest version. Last updated: 14 August 2026.
Contact
For any privacy question, email kontakt@dreamtales.no and we'll help.