Privacy Policy
Last updated: January 2025
1. Introduction
Welcome to Soreon ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our mobile application.
2. Information We Collect
2.1 Information You Provide
- Account Information: Device fingerprint for account identification
- Content: Text prompts and images you upload to generate videos
- Purchase Information: Transaction data processed through Apple App Store
2.2 Automatically Collected Information
- Device Information: Device model, operating system, version
- Usage Data: Features used, videos generated, credits consumed
- Technical Data: App crashes, performance metrics
- Device Fingerprint: Hashed identifier for fraud prevention
2.3 Information We Do NOT Collect
- Your name, email, or contact information (unless you contact support)
- Location data
- Camera or microphone access (except when you choose to upload images)
- Contacts or calendar data
3. How We Use Your Information
3.1 Service Provision
- Generate AI videos based on your prompts
- Manage your credit balance and subscriptions
- Process payments through Apple App Store
- Deliver generated videos to you
3.2 Service Improvement
- Analyze usage patterns to improve features
- Fix bugs and technical issues
- Develop new features and templates
3.3 Security and Fraud Prevention
- Detect and prevent abuse of free credits
- Monitor for suspicious activity
- Ensure service integrity
4. Device Fingerprinting
4.1 What is Device Fingerprinting?
We create a unique identifier for your device using hardware and software characteristics (model, OS version, etc.). This identifier is hashed (encrypted) for privacy and cannot be used to personally identify you.
4.2 Why We Use It
- Prevent users from repeatedly claiming free credits
- Detect fraudulent activity
- Maintain service fairness for all users
4.3 Privacy Protection
- Fingerprints are hashed using SHA-256 encryption
- Raw device identifiers are never stored
- Cannot be reverse-engineered to identify you
5. Data Storage and Security
5.1 Where We Store Data
Your data is stored securely in Supabase (hosted on AWS) and Cloudflare R2 for video storage. All data is encrypted in transit and at rest.
5.2 Security Measures
- End-to-end encryption for data transmission
- Secure database with row-level security
- Regular security audits and updates
- Limited employee access to user data
5.3 Data Retention
- Generated Videos: Stored for 30 days, then automatically deleted
- Account Data: Retained while your account is active
- Transaction History: Retained for legal and accounting purposes
6. Your Generated Content
6.1 Ownership
You own all videos you create using Soreon. We do not claim rights to your content.
6.2 Content Processing
Your prompts and images are processed by our AI service provider (Fal.ai) to generate videos. This data is not stored permanently and is deleted after processing.
6.3 Content Privacy
We do not view, analyze, or share your generated videos unless:
- Required by law or legal process
- Necessary to investigate abuse or violations
- You explicitly share content through our support system
7. Third-Party Services
7.1 Services We Use
- Apple App Store: Payment processing and subscription management
- RevenueCat: In-app purchase management
- Supabase: Database and authentication
- Fal.ai: AI video generation
- Cloudflare R2: Video storage
7.2 Third-Party Privacy
Each third-party service has its own privacy policy. We recommend reviewing:
8. Children's Privacy
Soreon is not intended for children under 13 years of age. We do not knowingly collect information from children. If you believe we have collected data from a child, please contact us immediately.
9. Your Rights
9.1 Access and Control
You have the right to:
- Access your personal data
- Request data correction or deletion
- Export your data
- Opt-out of data collection (by uninstalling the app)
9.2 California Privacy Rights (CCPA)
California residents have additional rights under the CCPA, including:
- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of data sales (we do NOT sell your data)
- Right to non-discrimination
9.3 GDPR Rights (European Users)
EU users have rights under GDPR, including:
- Right to access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
10. Data Sharing and Disclosure
10.1 We Do NOT Sell Your Data
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
10.2 When We May Share Data
We may share data in these limited circumstances:
- Legal Requirements: When required by law, court order, or government request
- Service Providers: With third parties who help us operate the app (under strict confidentiality)
- Business Transfers: If Dreamify Labs is acquired or merged
- Safety: To protect rights, property, or safety of users
11. International Data Transfers
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
12. Cookies and Tracking
Soreon does not use cookies or web tracking technologies. We only collect data through the app itself as described in this policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Last updated" date. Continued use of the app after changes constitutes acceptance.
14. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us at:
Email: privacy@dreamifylabs.com
Support: Help Center
Website: dreamifylabs.com
15. Data Protection Officer
For privacy inquiries, you can reach our Data Protection Officer at:
Email: dpo@dreamifylabs.com