Privacy Policy

Dreamfare (“we”, “us”) is a travel-planning app available at dreamfare.app and as a mobile app. This policy explains what information we collect, why, and the choices you have. The short version: we collect what we need to run Dreamfare, we don’t sell your personal information, and you can delete your account (and the data tied to it) at any time.

Information you give us

• Account details — email address, name, password (stored hashed), and optional profile info such as a username, photo, home city, and travel preferences.
• Your trips — itineraries, stops, notes, dates, party size, links or videos you import, and anything you publish or share with collaborators. Trips are private unless you publish them or invite others.
• Messages to the AI planner — if you use AI planning, the messages you write (and your trip context, home city, and travel preferences) are sent to our AI provider (OpenAI) to generate and edit itineraries. They are not used to train third-party models under our agreements.

Information collected automatically

• Usage analytics — we use PostHog to understand which features are used (for example “trip created” events), along with basic device and app-version information.
• Crash and error reports — we use Sentry on our servers to capture errors so we can fix them.
• Booking link clicks — when you tap a booking link we record the click with an anonymous token so a resulting commission can be credited (including your share, if you earned it on a published trip).

Payments and subscriptions

Dreamfare Premium is purchased through Apple’s App Store or Google Play, depending on where you installed the app. The store processes the payment, so we never see your card number. We use RevenueCat to manage subscription status (an anonymized user id and receipt information). Creator payouts are delivered by Tremendous, which receives the name and email needed to send your reward.

Booking partners

Flights, stays, activities, and trains are booked on partner sites (for example Aviasales, Booking.com, Viator, Klook, or Omio) via Travelpayouts affiliate links. Once you leave Dreamfare, the partner’s own privacy policy applies. We pass an anonymous click token — never your name or email — so the booking can be attributed.

What we don’t do

• We don’t sell your personal information.
• We don’t show third-party ads or share your data with ad networks.

Sharing

We share data only with the service providers named above (hosting on Railway and Supabase, email via Brevo, analytics via PostHog, errors via Sentry, subscriptions via RevenueCat, payouts via Tremendous, AI via OpenAI), each acting on our instructions — and where required by law. Trips you publish, and your public profile, are visible to others by design.

Retention and deleting your account

You can delete your account in the app (Profile → Delete account) or by emailing hello@dreamfare.app. Deletion removes your account, profile, and trips. Anonymized financial records (for example commission ledger entries) are retained as required for accounting, but are detached from your identity.

Security

Data is encrypted in transit (HTTPS everywhere) and stored with access controls. No system is perfectly secure — if we learn of a breach affecting you, we’ll notify you.

Children

Dreamfare is not directed to children under 13 (or the higher minimum age in your country), and we don’t knowingly collect their data.

Changes and contact

We’ll post any changes to this policy here and update the date above. Questions or requests (access, correction, deletion): hello@dreamfare.app.