Privacy Policy

1. Introduction

Dream.Do. (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website at dreamdomusic.com (collectively, the “Service”).

By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and profile details when you create an account.
• Authentication Data: We use Clerk for authentication. Social login data (Apple, Google) is processed by Clerk according to their privacy policy.
• Purchase Information: Transaction records, including what you purchased and when. Payment card details are processed by our payment provider and are not stored on our servers.
• Artist Information: If you register as an artist, we collect additional details such as artist name, bio, and payout information.
• Messages and Posts: Direct messages you exchange with artists, and comments or room messages you post on the Service.
• Communications: Any messages or feedback you send us.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, and app version.
• Usage Data: Features you use, tracks you play, and general interaction patterns (used to improve the Service).
• Error and Performance Data: Crash reports and performance metrics to improve app stability, processed by Sentry. These are not linked to your identity.
• Approximate Purchase Location: When you buy music, we derive an approximate city-level location from your IP address at the time of purchase (never your precise location; coordinates are fuzzed). See “What artists can see about you” below.

2.3 Information We Do NOT Collect

• We do not track your precise location.
• We do not sell your personal data to third parties.
• We do not use advertising trackers or ad networks.
• We do not access your contacts, camera, or microphone (unless you explicitly grant permission for a specific feature).

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service.
• Process purchases and deliver purchased content.
• Manage your account and provide customer support.
• Send important updates about the Service (e.g., security alerts, Terms changes).
• Process artist payouts and generate sales reports.
• Detect and prevent fraud, abuse, and security threats.
• Analyze usage patterns to improve features and user experience.

We will never use your information to serve targeted advertising.

4. How We Share Your Information

We do not sell your personal data. We may share information with:

• Service Providers: Third-party services that help us operate (e.g., Supabase for database hosting, Clerk for authentication, Stripe for payments, Resend for transactional email, Sentry for crash reporting, and Expo for app delivery and push notifications). These providers only access data necessary to perform their services.
• Artists: When you purchase music, the artist you bought from can see your username and purchase details — see “What artists can see about you” below.
• Legal Requirements: If required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs.

What artists can see about you

When you buy music on DREAM.DO., the artist you bought from can see your username, the amount, and the approximate city your purchase came from (based on your IP address at the time — never your precise location). Artists can also send you a direct message after you’ve bought from them.

You can turn this off at any time in Settings → Privacy → “Appear anonymous to artists”: your purchases will then appear to artists anonymously and artists won’t be able to start conversations with you. If you message an artist first, comment, or join an artist’s room, your username is visible there as with any public activity, and existing conversations stay usable in both directions. DREAM.DO. staff can see purchase details regardless of this setting, for support and fraud prevention.

5. Data Storage and Security

Your account and catalog data is stored in Supabase (hosted on AWS infrastructure). Uploaded media — cover art, audio files, and profile images — is stored and delivered from Cloudflare R2. The website itself is hosted by Vercel, which processes your IP address to serve and secure requests (and, at checkout, to derive the approximate city described in section 3). All of it is encrypted in transit and at rest. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• Row-level security (RLS) policies on our database.
• Secure token-based authentication.
• Regular security audits.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account:

• Your profile and personal data are deleted within 30 days.
• Purchase records may be retained for legal and financial reporting purposes.
• Artist content and sales data are retained as necessary for payout processing.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of your personal data.
• Correction: Update inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a portable format.
• Opt-out: Opt out of non-essential communications.

To exercise these rights, contact us at privacy@dreamdomusic.com.

8. Children’s Privacy

You must be at least 16 to use the Service (see our Terms). We do not knowingly collect personal information from anyone under 16, and where local law sets a higher age of digital consent, that age applies. If we learn we have collected such information, we will delete it promptly. If you believe someone under 16 has provided us personal information, please contact us.

9. Third-Party Services

The Service integrates with third-party services, each with their own privacy policies:

• Clerk (authentication): clerk.com/privacy
• Supabase (database/storage): supabase.com/privacy
• Cloudflare R2 (media storage & delivery — cover art, audio, profile images): cloudflare.com/privacypolicy
• Vercel (website hosting; processes IP addresses to serve and secure requests): vercel.com/legal/privacy-policy
• Expo/EAS (app distribution & push notifications): expo.dev/privacy
• Stripe (payments): stripe.com/privacy
• Sentry (crash & performance reporting): sentry.io/privacy
• Resend (transactional email): resend.com/legal/privacy-policy

We encourage you to review these policies.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it’s used.
• Right to request deletion of your personal information.
• Right to opt-out of the sale of personal information (we do not sell personal data).
• Right to non-discrimination for exercising your privacy rights.

11. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the U.S. where data protection laws may differ from those in your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. The “Last updated” date at the top indicates the most recent revision.

13. Contact Us

For privacy-related questions or requests:

Email: privacy@dreamdomusic.com

General: hello@dreamdomusic.com