Legal

Privacy Notice

Last updated: 1 September 2026

This document is a draft. It should not be treated as final until the company details are filled in and a lawyer has reviewed it.

This notice explains what personal data Dreamer Page collects, why we collect it, who we share it with, and what rights you have. It is written to satisfy Turkish Personal Data Protection Law No. 6698 (KVKK), Article 10.

Our service necessarily processes photographs of children. We therefore collect as little as possible, keep it for as short a time as possible, and delete it promptly on request.

1. Data controller

Your personal data is processed by Dreamer Page as data controller.
For any question, request or complaint: umuterdemir_@hotmail.com

2. Data we process

Identity and contact data: name, email address, collected when you register.
Data about the child: the child's name (or nickname), age, and the photographs you upload. Photographs are visual data and contain a face.
Content data: the story and illustration style you choose and, for memory books, the text you write.
Order and delivery data: print options, recipient name, phone, delivery address. Collected only if you place a printed order.
Technical data: IP address and request time, kept solely for the rate limit that prevents abuse.

3. Purposes and legal grounds

Performance of a contract: creating your account, producing the book you ordered, delivering it, and passing it to the print house for printed orders.
Your explicit consent: processing your child's photographs to generate the book's illustrations, including transferring them abroad to the AI provider. You may withdraw this consent at any time.
Legal obligation: keeping records required by tax and commercial law.
Legitimate interest: keeping the service secure and preventing abuse and automated attacks.

4. Transfers

AI provider: to generate illustrations, the photographs you upload and the story text are sent to Google (Gemini API). This is a transfer abroad and rests solely on your explicit consent.
Hosting and infrastructure: the site runs on Vercel Inc., the database is hosted by Neon Inc. (Frankfurt, Germany), files are stored in an S3-compatible object store.
Print house: only if you place a printed order, your order details and the print-ready book file are sent to our print house. The child's original photograph is never sent — only the finished book file.
We do not otherwise share, sell, or use your data for advertising.

5. Retention

Photographs you upload stay in your account after the book is produced, and you may delete them at any time.
Deleting your account also deletes your photographs, generated images and books.
Order records are kept for 10 years from the end of the relevant year, as tax law requires. These records contain no photographs.
IP records kept for rate limiting are deleted within 24 hours.

6. Notes specific to children

The service is designed to be used by a child's parent or legal guardian, not by children themselves.
By uploading a child's photograph you confirm that you are that child's parent or legal guardian, or that you hold the necessary permission.
Photographs of children are used only to generate the book's illustrations. They are never used for model training, advertising, promotion, or any other purpose.

7. Your rights

To learn whether your data is processed and to request information about it.
To learn the purpose of processing and whether it is used accordingly.
To know the third parties, in Turkey or abroad, to whom your data is transferred.
To have incomplete or inaccurate data corrected, and to request erasure or destruction where the conditions are met.
To have corrections and erasures notified to the third parties your data was transferred to.
To object to an outcome reached solely by automated analysis that works against you.
To claim compensation for damage caused by unlawful processing.
Send requests to umuterdemir_@hotmail.com. We respond within 30 days at the latest.

8. Cookies

We use only cookies strictly necessary for the service: the session cookie that keeps you signed in, and the cookie that remembers your language.
We use no advertising, tracking, or third-party analytics cookies.

9. Security

Passwords are stored irreversibly hashed (bcrypt); we never keep plaintext passwords.
Uploaded files are not published at a public address; they are served only to their signed-in owner.
Connections are encrypted with TLS and browser security headers are enforced.

10. Changes

We may update this notice. The date at the top changes on update, and we email you about material changes.