Privacy Policy

Effective Date: May 5, 2026

This Privacy Policy describes how DreamStori Inc. ("DreamStori," "Narra," "we," "our," or "us") collects, uses, discloses, and safeguards your information when you use the Narra application (including iOS app), websites, and related services (collectively, the "Services"). This policy specifically addresses our use of third-party AI services as required by App Store guidelines.

This Policy applies to the Narra mobile application, websites, and other digital services we make available that link to this Policy. By using the Services, you agree to the practices described here. If you do not agree, please do not access or use the Services. Capitalized terms not defined in this Policy have the meaning given in our Terms of Service.

1. Information We Collect

The types of information we collect depend on how you use the Services. We collect only what we need to provide and protect the Services. Certain features require specific information; if you do not provide it, or if you ask us to delete it, those features may become unavailable. We do not collect email addresses or other contact information for marketing. This includes:

• Account information: profile data, account settings, feedback, and support communications you voluntarily provide.
• Usage information: interactions with content, feature usage, live session activity, timestamps, and technical logs (e.g. connection quality).
• Device and network information: device type, operating system, app version, IP address, approximate region derived from IP address, and language settings.
• Service preferences: language, feature settings, interests, and other in-app preferences you choose.
• Voice and Audio Data (with consent): Realtime microphone input is captured only after explicit permission and consent. It is streamed ephemerally for live AI sessions and not stored.
• AI interaction content: text prompts you provide (spoken or typed), selected topics, conversation context, and generated responses needed to deliver personalized live narration and dialogue.

All collection is transparent, minimal, and tied to your explicit consent for AI features. We do not collect or use any biometric data (such as voiceprints).

2. Microphone, Audio, Voice Input, and AI Processing (Including Third-Party AI Providers)

Live voice features are a core part of Narra. Before any voice data is captured or sent, the app displays a clear disclosure and requires your explicit consent.

• What data is sent: Realtime microphone audio streams, spoken or typed prompts, selected topics, and conversation context.
• Who it is sent to: Google LLC via the Gemini Live API (third-party AI service).
• Purpose: To generate realtime conversational AI responses and narration.
• You must grant iOS microphone permission and explicitly consent in the dedicated in-app screen before any data is transmitted.
• We do not collect, store, or retain raw microphone audio on our servers beyond the live session.
• We do not create or store transcripts of your microphone audio on our systems (live processing is oriented toward realtime service delivery).
• Narra / DreamStori — our models and training: We do not use your microphone audio, prompts, AI interaction content, or conversation history to train, fine-tune, or improve our own machine learning models. We do not extract or use voiceprints or similar biometrics to identify you.
• Google — their processing and policies: When you use live AI features, the content described above is transmitted to Google LLC for processing through the Gemini Live API. Whether and how Google may log, retain, aggregate, or use that content—including whether it may be used to improve, evaluate, or train Google models or services—is determined by Google's own terms and privacy documentation, not by this Policy. Those documents may change over time. You should review them directly, for example: Google Privacy Policy, Google Terms of Service, the Gemini Apps Privacy Notice, and the Google Gemini API terms (or successor URLs Google publishes for the API product you are effectively using through Narra). We do not operate or control Google's systems.
• Commercial safeguards: We engage Google under agreements appropriate to providing the Services. Those agreements require Google to handle data we share with appropriate confidentiality and security measures. They do not replace or override Google's public policies where those policies apply to you as a user of Google's services.

You can revoke consent at any time by disabling live features or contacting us. See section 4 for full sharing details.

3. How We Use Information

We use information to:

• Provide, operate, and improve the Services.
• Personalize content and product experiences.
• Handle customer support requests and service communications.
• Communicate with you about material changes to our terms, policies, or practices when we are required to do so or when it affects your privacy choices.
• Monitor performance, troubleshoot issues, and maintain security.
• Prevent misuse, abuse, fraud, and violations of our Terms of Service.
• Comply with legal obligations and enforce our Terms of Service.

We may combine information collected through the Services for the purposes above. We may aggregate or de-identify information and use or disclose it in that form for analytics and service improvement, provided it does not identify you.

4. How We Share Information

We share information only with your consent or as described below. In particular, for AI features:

• Explicit Consent for AI Processing: Before sending any personal data (including voice input) to third-party AI services, the app displays clear disclosures identifying the data sent (realtime audio from your microphone, your spoken/text prompts, topic context), the recipient (Google LLC via the Gemini Live API), the purpose (generating conversational AI responses in live sessions), and obtains your explicit permission. You can withdraw consent at any time by disabling live features or contacting support.
• Service providers that help us operate the Services, such as hosting (GCP), infrastructure, analytics, diagnostics, and customer support providers. These providers are contractually bound to protect your data and may process data only on our instructions or as otherwise required to deliver their services.
• AI and technology partners, including Google LLC (Gemini Live API), receive the interaction content described in section 2 for the purpose of generating realtime AI outputs in your session. Google's own retention, logging, security practices, and any use of data to improve or train its models or services are governed by Google's terms and privacy policies (linked in section 2). We require appropriate confidentiality and security measures in our commercial arrangement with Google; we also describe our practices in this Policy so you can compare protections across Narra and Google.
• Affiliates and successors in connection with corporate transactions.
• Safety, integrity, and legal: We may disclose information if we reasonably believe it is necessary to protect the rights, safety, or property of users, Narra, or others; to enforce our agreements; or to respond to lawful requests by public authorities (including national security or law enforcement requirements), consistent with applicable law.

We do not sell your personal information. We do not use your personal information to track you across third-party apps or websites for advertising purposes. We do not share data with advertisers. If our sharing practices change materially, we will update this Policy before or as those changes take effect, as required by applicable law.

5. Cookies and Similar Technologies

For our website, we and our service providers may use cookies and similar technologies to remember preferences, analyze traffic, diagnose issues, and improve performance. You may manage cookies through your browser or device controls. For our mobile application, we use on-device storage and similar technologies for preferences, session reliability, and diagnostics; the native app does not use browser cookies in the same way as a website.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. Account information is retained while your account is active. If you request account deletion, we will delete or de-identify account information within 30 days, unless a longer period is required for legal, security, fraud prevention, backup, or dispute-resolution purposes. Technical logs are generally retained for up to 90 days unless needed longer for security, debugging, or legal reasons.

7. Your Rights and Choices

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to request data portability. You may withdraw consent for microphone access using iOS settings; you may review AI data sharing on the in-app "AI Data Sharing" screen before starting live features. To request deletion of information we hold about you, use Delete Account in the app Profile (which clears on-device preferences and associated local state where applicable), disable live features, and/or contact us as described in section 13. We honor such requests promptly where applicable (typically within 30 days).

8. Children's Privacy

The Services are not intended for children under 13 years old, or the minimum age required in your jurisdiction if higher. We do not knowingly collect personal information from children in violation of legal requirements. If you believe a child has provided us personal information, please contact us and we will take appropriate steps to delete it.

9. Security

We use reasonable technical, organizational, and administrative safeguards to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security. No Internet or email transmission is ever fully secure or error free.

10. International Data Transfers

Your information may be processed in the United States and other countries outside your own. Laws in those countries may differ from those where you live. Where required, we use appropriate safeguards for cross-border transfers. By using the Services or providing information, you understand that your information may be transferred to and processed in jurisdictions that may not provide the same level of data protection as your home country.

11. Third-Party Websites and Services

The Services may contain links to third-party websites or services (for example, Google's sites when you open linked policies). We do not control those third parties. Their collection, use, and disclosure of information is governed by their own privacy policies, not this Policy. We encourage you to read their policies before providing information to them.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or the Services. We will post the updated version with a revised effective date. For material changes, we will provide notice as required by applicable law. Your continued use of the Services after the effective date indicates your acknowledgment of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact DreamStori Inc. through the in-app support or at contact_us@dreamstori.net.