Lorevara Privacy Policy

Last updated: 2026-07-03

This Privacy Policy explains how The Dream Factory ("we", "us", "Lorevara") collects, uses, stores, and shares information when you use the Lorevara mobile application (the "App"). By using the App you agree to this Privacy Policy.

If you have questions, contact us at tdfincorporated@gmail.com.

1. Information we collect

We only collect what we need to run the App. We do not sell your data, we do not run ads, and we do not use third-party analytics or tracking SDKs.

1.1 Account information

When you sign in with Apple or Google, we receive:

Your name (as provided by Apple or Google — Apple lets you hide or substitute it).
Your email address (Apple offers a private-relay email; that relay address is what we receive).
A stable user identifier from Apple or Google.

Authentication is handled by Better Auth. Your account record is stored in our database (Convex). We do not receive your Apple ID password, Google password, or any other credentials.

1.2 Content you create

Everything you build in the App — worlds, characters, stories, and any images you upload to worlds or characters — is stored in our database on your account. You own this content and can delete it at any time (see Section 4).

1.3 Subscription information

If you purchase an Lorevara Plus subscription, your purchase is processed by Apple through the App Store. We do not receive your credit card, Apple ID, or any payment details.

We use RevenueCat to verify your subscription status. RevenueCat stores an anonymized purchase record keyed to your Lorevara user identifier and tells our server whether your subscription is active. We do not receive personal payment information from RevenueCat.

1.4 Usage information

We keep a per-user record of AI generation usage (tokens generated, model used, timestamps) so we can enforce your subscription's monthly allowance. This ledger is tied to your account ID and is not shared with anyone.

1.5 Device permissions

Lorevara may ask for:

Photos (to select a world or character image from your library)
Camera (to take a world or character photo)

We only access these when you explicitly pick a photo or take one. We do not scan or upload other photos in your library.

2. How we use your information

We use the information above to:

Sign you in and keep your session alive.
Store and display your worlds, characters, and stories to you.
Send your story prompts to OpenAI so the AI can generate new sections of your story.
Send your uploaded world and character images to OpenAI so they can be re-rendered in a comic/cartoon style.
Verify your subscription and enforce your monthly generation allowance.
Debug crashes and respond to your support requests.

We do not use your content to train AI models, market to you, or sell to third parties.

3. Who we share information with (Service Providers)

We share the minimum information necessary with the following service providers to operate the App. Each is bound by its own privacy policy and processes data only on our behalf.

Provider	What they process	Purpose	Policy
Apple / Google	Sign-in identity	Authentication	apple.com/legal/privacy · policies.google.com/privacy
Convex	Account, worlds, characters, stories, images, usage ledger	Application backend + file storage	convex.dev/legal/privacy
OpenAI	Story text prompts and world/character images	AI text and image generation	openai.com/policies/privacy-policy
RevenueCat	Anonymized subscription events tied to your user ID	Subscription verification	revenuecat.com/privacy
Apple App Store	Payment for subscriptions	Billing	apple.com/legal/privacy

OpenAI note: Per OpenAI's API terms, content sent to the OpenAI API is not used to train their models. OpenAI may retain the content for up to 30 days for abuse monitoring, after which it is deleted from their systems.

We do not share your information with anyone else, and we do not sell it.

4. Your rights

You can, at any time, from inside the App:

View every world, character, and story you've created.
Edit or delete any individual world, character, or story.
Delete your entire account. This is available in Profile → Delete Account. When you tap Delete Account, we permanently delete your account record, every world, character, story, image, and usage row associated with your account, and we ask Apple/Google to revoke the authentication token. Deletion is immediate and irreversible.

If you need help exercising any of these rights, email tdfincorporated@gmail.com and we will help within a reasonable time (typically 7 days).

Depending on where you live, you may also have specific rights under laws such as the EU GDPR, UK GDPR, California CCPA, or similar. You can exercise those rights by emailing us at the address above.

5. Data retention

Account + content: retained until you delete your account or the individual item.
Usage ledger: retained for the current billing period plus 90 days for support/refund investigations, then deleted.
Subscription records at RevenueCat: retained per RevenueCat's policies.
OpenAI request logs: retained by OpenAI for up to 30 days for abuse monitoring, then deleted.

Once you delete your account, we do not retain a copy of your content. Backups may take up to 30 days to be fully purged from our disaster-recovery snapshots.

6. Security

We use industry-standard practices to protect your data:

Traffic between the App and our backend is encrypted in transit (TLS/HTTPS).
Data stored on Convex is encrypted at rest.
Authentication uses signed tokens; passwords are never stored because we only support Apple and Google Sign-In.

No system is perfectly secure. If we ever become aware of a data breach that affects you, we will notify you promptly and describe the scope.

7. Children

Lorevara is not intended for children under 13. The App is rated 12+ on the App Store, and we do not knowingly collect information from children under 13. If you believe a child has provided us information, please contact tdfincorporated@gmail.com and we will delete it.

8. International users

Lorevara is operated from the United States. If you use the App from elsewhere, your information will be transferred to and processed in the United States and by our service providers in whichever countries they operate.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you in the App or by email. Your continued use of the App after a change means you accept the updated Policy.

10. Contact

Questions, requests, or concerns:

The Dream Factory Email: tdfincorporated@gmail.com