Dreamina Privacy Policy

Dreamina Privacy Policy

Last Updated: April 1, 2025

Introduction

Welcome to Dreamina. This Privacy Policy applies to the Dreamina website and related services (the “Platform”) that link to this Privacy Policy. This Privacy Policy explains how we collect, use, share, and otherwise process the personal information of users and other individuals in connection with the Platform.

The Platform is provided and controlled by Bytedance Pte. Ltd. with its registered address at 1 Raffles Quay, #26-10, South Tower, Singapore 048583 (“we”, “us”, or “our”), unless otherwise indicated in the Jurisdiction Specific Supplemental Terms, which may apply depending on the jurisdiction from which you are accessing or using the Platform.

What Information We Collect

We collect the following information about you:.

Information You Provide

For certain activities, such as when you register, upload content to the Platform, or contact us directly, you may provide some or all of the following information:

Account Information. You give us information when you register on the Platform, such as date of birth, username and password that you set for your account, email address, your accounts on other services you use to sign-up to the Platform (where applicable), and other information you choose to disclose in your profile or account information (“Account Information”).
User Content. We may collect the content you create, upload, generate, or access through the Platform, including text, audio, photos, and prompts that you input or otherwise provide to, share with, or create on the Platform (“User Content”).
Information When You Contact Us. Information in correspondence you send to us, including information we need to verify your identity or age, feedback or inquiries, and information about possible violations of our Terms of Service or other policies (“Communications Information”).
Other Information. We may also collect your feedback about the Platform if you choose to provide it, such as information you share through surveys or your participation in challenges, research, promotions, marketing campaigns, events, or contests such as your gender, age, likeness, contact details and preferences.

Automatically Collected Information

We automatically collect certain information from you when you use the Platform, including when you are using the website without an account. Such information includes:

Technical Information. We will collect information regarding the device you are using to access the platform, such as the model of your device, the device system, device ID, system language, your screen resolution and operating system. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices (“Technical Information”).
Usage Information. We collect information about how you engage with the Platform, including the content you view on the Platform, how long you spent viewing such content, access times, the URL of the website from which you came to our site, and other details about your use of and actions on the Platform (“Usage Information”).
Image and Audio Information. We may collect information about the videos, images, and audio that are part of your User Content, such as the existence and location within an image or video of face or body features, attributes, and the nature of the audio. We do this, for example, to provide you with the Platform and appropriate output, to enable special effects (“Image and Audio Information”).
Location Information. We collect information about your approximate location, such as information based on your IP address (“Location Information”).
Cookies. We use cookies, mobile IDs, and other similar technologies (“Cookies”) to operate the Platform, enable us to provide certain features and functionality, and enhance your experience using the Platform. To learn more about our use of cookies, please see our Cookie Policy.

Information From Other Sources

Third-Party Services. When you sign-up or log-in to the Platform using a third-party service such as Facebook or Google, that service may provide us with information such as your username, email, and profile picture.
Our Corporate Group. We may obtain information about you from certain affiliated entities within our corporate group, including about your activities on their platform.
Others. We may receive information about you from organisations, businesses, people and others, including for example, publicly available sources, government authorities, and professional organisations. We also collect information about you where you are included or mentioned in User Content, in a complaint, appeal, request or feedback submitted by a user or third party, or if your contact information is provided to us by a user.

How We Use Your Information

We will use your information:

to register your account for the Platform, to manage and to administer your account;
to administer and provide you with the Platform including enabling you to create, edit and modify User Content when you choose to do so;
to ensure that you are old enough to use the Platform, improve and develop our Platform and conduct product development, including by adding new features or capabilities, and training and improving our technology, such as our machine learning models and algorithms;
to promote the Platform or third party services through marketing communications, contests, or promotions;
to understand how you use the Platform, including across your devices and to improve and develop the Platform and conduct product development including adding new features or capabilities including to train and improve our technology, such as our machine learning models and algorithms;
to detect abuse, fraud, and illegal activity on the Platform and ensure your safety and security, including by scanning, analyzing, and reviewing User Content, and associated metadata for violations of our terms, conditions, and policies, if permitted by applicable law;
to conduct troubleshooting, data analysis, testing, and research;
to communicate with you, notify you about changes to the Platform, updates to our agreements, terms or policies or providing you with updates related to your access to the Platform in general, and to respond to and process your queries, requests, complaints, and feedback;
to enforce our Terms of Service and other conditions, and policies;
to comply with any applicable laws, regulations, codes of practice, guidelines, or rules, including where necessary to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority, and
to provide services to you through related products that are closely connected in functionality, such as CapCut. In order to ensure a consistent service experience and to guarantee interconnection between these products, we use a unified account service to collectively collect and process your account information (i.e., nicknames and IDs) across the aforementioned products. The account you register for using this product will also allow you to use a unified account service to log in synchronously, use related products, and access these services.

We may also use your information for any other purposes disclosed to you at the time we collect your information, with your consent, or as otherwise permitted by applicable law.

How We Share Your Information

This section sets out how we may share your information, including Information You Provide, Automatically Collected Information, and Information From Other Sources:

Service Providers and Business Partners

We may engage service providers and business partners that help us provide, support, and develop the Platform, and understand how it is used. We may share Information You Provide, Automatically Collected Information, and Information From Other Sources with these service providers to enable them to provide us their services.

Our Corporate Group

As a global company, the Platform may be supported by certain entities within our corporate group (“Corporate Group”). These entities process Information You Provide, Automatically Collected Information, and Information From Other Sources as necessary to provide important functions such as storage, improvement and optimization of the Platform, security, research and development, analytics, customer and technical support, and content moderation. We may also share your information with any member of our Corporate Group to allow you to access other services provided by members of our Corporate Group, or for internal business purposes.

Legal Obligations and Rights

We may share your information with any competent law enforcement body, regulatory, government agency, court, public authorities or other entities if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

comply with legal obligations, processes or requests;
enforce our Terms of Service, Community Guidelines, and other agreements, policies, and standards, including investigation of any potential violation thereof;
exercise or defend any legal claims;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction).

Sale or Merger

We may also disclose your information to third parties:

in the event that we discuss or negotiate the sale or sell any business or assets, in which case we may disclose your personal information to the prospective buyer of such business or assets; or
if we sell, buy, merge with, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, your personal information may be among the transferred assets.
in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sales, or in the unlikely event of bankruptcy.

With Your Consent

We may share your personal information with third parties with your consent to the disclosure (obtained separately from any contract between us) or at your direction.

International Data Transfers

Your personal information may be transferred to, and stored at, a destination outside of your country of residence. We store the information we collect in secure servers located in the United States, Singapore, and Malaysia. It may also be processed by staff operating outside your country who work for us, one of our suppliers, or one of our business partners. Whenever we transfer personal data to other jurisdictions, we will ensure that such personal data is transferred in accordance with this Policy and as permitted by applicable laws.

Your Rights and Choices

You can access and edit your profile information by signing into your account. We also provide tools that allow you to control your information. Should you choose to do so, you may request to delete your account by contacting us via the Data Subject Request Webform. If you choose to log-in, sign -up, or link to a third-party service, such as Apple, Facebook, Google, TikTok, or YouTube, you may be able to manage the type of data shared with the Platform through that service’s settings.

As discussed further in the Jurisdiction Speciﬁc Supplemental Terms, you may also be aﬀorded rights in your country under applicable laws, such as the ability to access your data, delete your data, be informed of the use of your data, revoke your consent, and ﬁle a complaint before the relevant authority.

If you have any questions on how to use the tools described above or want to know about any rights with regard to your personal information you may have, please contact us via the Data Subject Request Webform. We will process your request in accordance with applicable data protection laws. Please note that depending on the nature and scope of your request, we may not be in a position to continue the provision of the Platform to you.

Data Security

We take reasonable and appropriate technical and organizational measures to help protect personal information from unauthorized access, use, disclosure, alteration, and destruction. Unfortunately, the transmission of information via the internet is not completely secure and we cannot guarantee the security of your information transmitted via the Platform; any transmission is at your own risk. To help us protect personal information, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.

Data Retention

We will take steps to retain your personal information for as long as it is necessary to serve the purpose(s) for which such information was collected, including to provide you with the Platform. Notwithstanding the foregoing, there are occasions where it is reasonably necessary to retain information longer to comply with applicable legal, tax or accounting obligations (such as to resolve and litigate disputes, and to enforce our agreements), for our ongoing product improvement purposes or other legitimate business purposes.

Information Relating to Minors

This Platform is not directed at individuals under the age of 18 or the minimum age in the relevant jurisdiction. If you are below 18 years of age or the minimum age in your country, you must not use the Platform.

Privacy Policy Updates

We may amend or update this Privacy Policy from time to time. When we update the Privacy Policy, we will notify you of any material changes to this policy by updating the “Last Updated” date at the top of the new Privacy Policy, posting the new Privacy Policy, and/or providing other notice required by applicable law. We recommend that you review this policy regularly to stay informed of our privacy practices.

Contact Us

If you have any questions, comments and requests regarding this Privacy Policy or about the protection of your personal information, you can contact us via the Data Subject Request Webform.

In the event that you wish to make a complaint about how we process your personal information, please contact us via the Data Subject Request Webform and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with your data protection authority or follow the dispute resolution process provided in the Terms of Service.

Jurisdiction Specific Supplemental Terms

Australia

Certain entities in our corporate group, located outside of Australia, are given limited remote access to your information so that they can provide certain functions, as described in the section on "How we share your information."

Brazil

If you are using our Services in Brazil, the following additional terms apply:

Exercise of data protection rights. Brazilian law provides certain rights to individuals with regard to their personal data. Thus, we seek to ensure transparency and access controls in order to allow users to benefit from the mentioned rights.

We will respond and/or fulfill your requests for the exercise of your rights below, according to the applicable law and when applicable, to the Brazilian General Data Protection Law - LGPD:

confirmation of whether your data are being processed;
access to your data;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or erasure of data;
portability of personal data to a third party;
object to the processing of personal data;
information of public and private entities with which we shared data;
information about the possibility to refuse providing personal data and the respective withdraw consequences, when applicable;
withdrawal of your consent;
request an analysis of decisions taken exclusively based on the automated processing of personal data that affect your interests, including decisions taken to define your personal, professional, consumer or credit profile, or aspects of your personality.

Limitations to your rights. In certain situations, we may have legitimate reasons not to comply with some of your requests. For instance, we may choose not to disclose certain information to you when a disclosure could adversely impact our business whenever there is a risk of violation to our trade secrets or intellectual property rights. In addition, we may refrain from complying with a request for erasure when the maintenance of your data is required for complying with legal or regulatory obligations or when such maintenance is required to protect our rights and interests in case a dispute arises. Whenever this is the case and we are unable to comply with a request you make, we will let you know the reasons why we cannot fulfill your request.

In case of doubt about your privacy, your rights or how to exercise them, please contact us using the information in the "Contact Us" section. If you have any questions about the processing of your personal data, we would like to clarify them.

International Transfer of Data. We share your personal data globally with companies within our business group to carry out the activities specified in this Policy. We may also subcontract the processing of data involved in the Platform or share your personal data with third parties located in other countries. Your personal data may therefore be subject to privacy laws other than those applicable in your country.

Whenever we transfer your personal data to third parties located in other countries, we will ensure that these companies comply with applicable data protection laws and we will take all measures that are reasonably necessary to ensure the existence of adequate safeguards to protect your personal data and to ensure that it is processed safely.

Language. The Policy may have been prepared in the English language and in the Portuguese language. If you are a user located in Brazil, you shall refer to the Portuguese version, which shall prevail.

DPO. If you wish to contact the Data Protection Officer, please contact us: dpobrasil@bytedance.com

Canada

If you are using the Services in Canada, the following additional terms apply.

Information Relating to Children and Teens.

Your Rights. Subject to limited exceptions under applicable law, you have the right to access, update, rectify and correct inaccuracies in your personal information in our custody and control and to withdraw your consent to our collection, use and disclosure of your personal information. To exercise these rights, you may contact us using the contact information set out below. We may require certain personal information for the purpose of verifying the identity of the individual making the request.

Your Choices. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email we send.

Transfer Outside Your Jurisdiction. We and our service providers (including members, subsidiaries, or affiliates of our corporate group) may access, store and otherwise process personal information outside of Canada (and, for residents of Quebec, outside of Quebec), including in the United States and Singapore, and other foreign jurisdictions where we or our service providers are located. For information about the manner in which we or our service providers (including service providers outside Canada) process personal data, please contact us using the contact information set out below. We and our service providers may disclose your personal information if we are required or permitted by applicable law or legal process, which may include lawful access by foreign courts, law enforcement or other government authorities in the jurisdictions in which we or our service providers operate.

Contact. If you are a resident of Canada, you can contact us using the contact information provided in the “Contact Us” section.

European Economic Area (“EEA”), Switzerland, and UK

If you are using the Platform in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:

Legal bases for processing

Our legal bases for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collected it.

If we ask you to provide personal data to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal data is mandatory or not (as well as of the possible consequences if you do not provide your personal data).

The table below provides more details on our purposes for processing your personal data and the related legal bases. The legal basis under which your personal data is processed will depend on the data concerned and the specific context in which we use it.

Personal Information Categories and Processing purpose	Type of personal data	Legal basis
We use Account Information, Location Information, Third-Party Service Information, and Technical Information to register your account for the Platform, and to manage and to administer your account.	Account Information Location Information Third-Party Service Information Technical Information	Processing is necessary to perform the contract governing our provision of the Platform or to take steps that you request prior to signing up for an account to use the Platform.
We use Account Information, Third-Party Service Information, User Content, Location Information, Communications Information, Technical Information, Image and Audio Information, and Usage Information to enable us to administer and provide you with the Platform including enabling you to create, edit and modify User Content and interact with other users, when you choose to do so.	Account Information Third-Party Service Information User Content Location Information Communications Information Technical Information Image and Audio Information Usage Information	Processing is necessary to perform the contract governing our provision of the Platform or to take steps that you request prior to signing up for an account to use the Platform.
To understand how you use the Platform, including across your devices, and to improve and develop the Platform and conduct product development including adding new features or capabilities, and to train and improve our technology, such as our machine learning models and algorithms.	Account Information Technical Information Usage Information Location Information	The processing is necessary for our legitimate interests, namely, to improve and develop the Platform.
To promote the Platform or third party services through marketing communications, contests or promotions.	Account Information Location Information Usage Information Technical Information Other Information	We rely on consent (where this is required under applicable law). Otherwise, our legitimate interests (to develop marketing activities and promote our products and services).
To comply with any applicable laws, regulations, codes of practice, guidelines, or rules, including where necessary to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority.	Account Information Third-Part Service Information User Content Location Information Communications Information Usage Information	This processing is necessary in order to comply with our legal obligations under European Union or Member State law. This includes situations where we have obligations to take measures to ensure the safety of our users or comply with a valid legal request such as an order from law enforcement agencies or courts. Similarly processing may be necessary to respond to regulatory requests requiring the processing of information. In other circumstances, the processing is necessary for our legitimate interests, namely, to disclose and share information with regulators or other government entities.
To communicate with you, on service related matters, respond to and process your queries, requests, complaints, and feedback, and notify you about changes to the Platform, updates to our agreements, terms or policies or providing you with updates related to your access to the Platform in general.	Account Information Communications Information Technical Information	The processing is necessary for the performance of a contract with you.
To enforce our Terms of Service and other conditions and policies, including to ensure that you are old enough to use the Platform.	Account Information Third-Party Service Information User Content Location Information Communications Information Technical Information	The processing is necessary for the performance of a contract with you.
To detect inappropriate and illegal activity on the Platform, to ensure your safety and security, including scanning, analysing and reviewing User Content and associated metadata for violations of our Terms of Service and other conditions and policies, if permitted by applicable law.	Account Information Third-Party Service Information User Content Location Information Communications Information Technical Information	The processing is necessary for our legitimate interests, namely, to ensure that the Platform is safe and secure, to ensure compliance with our Terms of Service and other conditions and policies, and to identify misuse of the Platform.
To conduct troubleshooting, data analysis, testing, and research.	Account Information Third-Party Service Information User Content Location Information Communications Information Technical Information	The processing is necessary for our legitimate interests, namely to ensure the ongoing stability and security of the Platform and to ensure it is continuously available and functioning.
To provide services to you through related products that are closely connected in functionality, such as CapCut. In order to ensure a consistent service experience and to guarantee interconnection between these products, we use a unified account service to collectively collect and process your account information (i.e., nicknames and IDs) across the aforementioned products. The account you register for using this product will also allow you to use a unified account service to log in synchronously, use related products, and access these services.	Account Information Third-Party Service Information	The processing is necessary for the performance of a contract with you.
For any other purposes disclosed to you at the time we collect your information or pursuant to your consent or as otherwise permitted by applicable law.	The actual information we use depends on the factual circumstances.	The actual information we use depends on the factual circumstances.

International data transfers

In some cases, your personal data t may be transferred to, processed and stored at, countries outside of the country in which you are resident (for instance, to our service providers and partners). For example, we may store the information that we collect in secure servers located in the United States and Singapore. Our affiliates, business partners and service providers operate around the world.

Our affiliates, business partners and service providers operate around the world.

When we transfer your information outside of the European Region, we ensure it benefits from an adequate level of data protection by relying on:

These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection. We transfer your information to some countries with adequacy decisions; or
Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 of the GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer your information to certain entities in our corporate group and third parties in countries without an adequacy decision.

If you wish to enquire further about these safeguards, please contact us via the Data Subject Request Webform.

Your rights

Individuals located in the UK and EEA have the following data protection rights. To exercise any of them contact us using the details provided in the "Contact Us" section above. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

The right to request confirmation of whether we process your personal data and access to a copy of the personal data retained by us;
The right to request to update or request deletion of your personal data or restrict processing of your personal data;
Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible;
Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time. Withdrawing your consent will not impact the lawfulness of any processing activities that have taken place before such withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent;
The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;
The right to object to the processing of your personal data if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.
The right to opt-out of marketing communications at any time. You can exercise this right by contacting us using the details provided in the "Contact Us" section above. If you choose to opt out of marketing communications, we may still send you non-promotional emails, such as emails about your account or our ongoing business relations; and
The right to complain to a supervisory authority about our collection and use of your personal data. For more information, please contact your local supervisory authority. Contact details for supervisory authorities in Europe are available here and for the UK here. Certain supervisory authorities will require that you exhaust our own internal complaints process before looking into your complaint.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

Please contact us if you would like to exercise any of your rights via the Data Subject Request Webform.

Data Controller

The data controller of your personal data is Bytedance Pte. Ltd.

GDPR Representatives

If you are based in the United Kingdom, our designated UK GDPR representative is:

Cosmo Technology Private Limited

2 Temple Back East

Temple Quay

Bristol

United Kingdom

BS1 6EG

If you are based in the EEA or Switzerland, our designated EU GDPR representative is:

Mikros Information Technology Ireland Limited

Mespil Business Centre

Mespil House

Sussex Road

Dublin 4

Ireland

Cookies

For more information about cookies, please visit our Cookie Policy.

Indonesia

If you are using the Platform in Indonesia, the following additional terms apply. In the event of any conﬂict between the following additional terms and the provisions of the main body of this Policy, the following terms shall prevail.

Age, Parental and Guardian Consent. By accessing and/or using our Platform, you represent that you are at least 21 years of age or married or not under guardianship.

If you are below 21 years old and you are not married, or under guardianship: you must obtain approval from your parent(s) or legal guardian(s); and your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the Platform; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the Platform will not, in any event, result in any violation of applicable laws and regulations relating to child protection.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or guardian(s) is not willing to open the account under their name, you must cease accessing and/or using the Platform.

Your Choices. You may withdraw your consent to our disclosure of personal data to third parties. Upon your request, we will display, publish, transmit, disseminate, and/or open the access to your personal data to third parties. Please note that by withdrawing your consent to the disclosure and/or collection of your personal data, we may not be able to fulﬁll your requests and you may not be able to use some of Dreamina’s features and functionality.

You may request that we: (i) disclose the history of personal data that we have collected; and/or (ii) erase and dispose of your personal data that we have collected on our server. Please note that by requesting us to erase and dispose of your personal data, you may not be able to use some of Dreamina's features and functionality.

To exercise any of your rights, contact us at via the Data Subject Request Webform.

Notiﬁcation. In the event of any breach of personal data, we will notify you and provide you with information regarding such breach of personal data.

Data retention. We retain your information for as long as it is necessary to provide you with the Platform. Where we do not need your information in order to provide the service to you, we retain it only for so long as we have a legitimate business purpose in keeping such data. However, there are occasions where we are likely to keep this data for ﬁve (5) years (or longer if required) in accordance with our legal obligations or where it is necessary for the establishment, exercise or defence of legal claims.

After you have terminated your use of our Platform and the ﬁve (5) years retention period has lapsed, we store your information in an aggregated and anonymised format. Non-personally identiﬁable information may be retained indeﬁnitely for analytics.

Mexico

If you use our services in Mexico, the following additional terms apply. In the event of a conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller: Bytedance Pte. Ltd.1 Raffles Quay, #26-10, South Tower, Singapore 048583

How we use your personal data. Almost all of the purposes of the processing data indicated above in the main section of this Privacy Policy are necessary purposes. However, the following are secondary purposes:

To provide you with surveys.

The above purpose is not necessary to provide the Platform, but allow us to provide you with a better experience. We offer you the ability to make choices about how we use and disclose your personal data. You can always limit the secondary purposes of personalized advertising by using the tools in the Settings that allow you to limit certain features.

We use both human and automated means to process your data.

How we share your personal data. We may share your personal data with a third party for purposes other than processing on our behalf. We will obtain your consent to such disclosure as required by applicable laws.

By providing us with your personal data and using our Platform, you agree to transfers that require your consent. You can always revoke your consent and exercise your rights as outlined below.

Language. The Policy may have been prepared in the English language and in the Spanish language. If you are a user located in Mexico, you shall refer to the Spanish version, which shall prevail.

Your Rights. You have the following rights with respect to your personal data: access, rectification, cancellation, objection, consent withdrawal, limitation of use and disclosure of your data. You may exercise your rights by sending your request via the Data Subject Request Webform. To learn about the applicable requirements and the procedure for exercising your rights, please contact us at the above email address. If you are under 18 years of age, you may exercise your rights through a parent or guardian. Requests to exercise for your rights will be resolved as soon as possible according to the applicable data protection law and the nature of your request.

Information relating to minors. You may review our parental consent section in the Terms of Service.

Cookies

We will, unless exempt, obtain your consent to the use of cookies. For more information about cookies, please visit our Cookie Policy.

Philippines

If you are using our Platform in Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.

South Korea

If you are using our Platform in South Korea, the following additional terms apply:

How we share your information. In addition to the main text of this policy, in the event we use information such as User Content and video content on our Platform as part of our advertising and marketing campaigns to promote the Platform, your personal information contained in such information may be disclosed to the recipients of such advertising or marketing content.

Personalized Ads. We may from time to time provide personalized ads on our Platform to provide you our Platform for free.

Data retention. We destroy personal data whose purpose of collection as consented to by you have been achieved, or whose periods of and use to which you consented to or which were provided in the Policy have expired; provided, however, we will continue to store your personal data for the following statutorily-prescribed periods, where applicable, including, but not limited to: Act on Consumer Protection in Electronic Commerce:

Records on your cancellation of an order, your payment on a purchased item, and our supply of a good/service: 5 years
Records on the handling of consumer complaints or disputes: 3 years
Records on advertisements and labels: 6 months
Protection of Communications Secrets Act
Records on your visits to our website: 3 months

Destruction of Personal data. We destroy your personal data in a manner that renders it unrestorable by the relevant department.

Your Rights.

Data Rights. You have the right to access personal data we hold about you, to rectify any personal data held about you that is inaccurate, to request the deletion of personal data held about you, and the right to request the suspension of the processing of your personal data. You can exercise your rights by contacting us at via the Data Subject Request Webform.

Data Security. We work hard to protect Dreamina and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. To this end, we have in place technical, managerial and physical safeguards, including internal policy for data protection, limiting the access to personal data on a need-to-know basis and controlling access to the facilities where personal data is processed.

Information Relating to Children. Dreamina is not directed at children under the age of 14.

Entrustment and/or Overseas Transfer of Personal Data. We entrust your data to our aﬃliates, cloud storage providers, IT service providers, and data centers, some of whom are located abroad, subject to your consents or notiﬁcations to you, if applicable. The entities receiving and processing your data are committed to using and storing personal data in compliance with domestic and international regulations and to taking all available physical and technical measures to protect personal data. You may opt-out of such transfer so long as the transfer is not necessary to provide you with the Platform, by contacting us via the Data Subject Request Webform .

United States

If you are using the Platform in the United States, the following additional terms apply:

Your Rights and Choices

Depending on where you live, you may be entitled to certain rights with respect to your personal information, as described below:

Right to Know. You may have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which it is collected, the business or commercial purposes for collecting, selling, or sharing it, and information about third parties to whom we disclose it.
Access and Data Portability. Subject to certain exceptions, you may have the right to request a copy of the personal information that we have collected about you.
Deletion. You may have the right to request that we delete information that we collected from or about you, subject to certain exceptions.
Correct Inaccurate Information. You may have the right to request that we correct inaccuracies in the personal information we maintain about you.

You may exercise these rights by submitting your request via the following methods:

Webform: Data Subject Request Webform

Address: 1 Raffles Quay, #26-10, South Tower, Singapore 048583

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise choices on your behalf, please provide evidence that you have given such agent power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.

We will respond to your request consistent with applicable law and subject to proper verification. We will verify your request by asking you to send it from the email address associated with your account or to provide information necessary to verify your account.

You may submit a request to appeal any decision we have made about your request by replying to the communication you receive from us communicating your decision. We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on the Platform may change or no longer be available to you.

The Platform does not sell your personal information or share your personal information with third parties for purposes of cross-context behavioral advertising or targeted advertising where restricted by applicable law.

Sensitive Personal Information. Although some of the information that we collect, use, or disclose may constitute sensitive personal information under applicable state privacy laws, such as information you disclose in your User Content about your racial or ethnic origin, national origin, religious beliefs, mental or physical health diagnosis, sexual life or sexual orientation, status as transgender or nonbinary, citizenship or immigration status, or financial information, we only process such information in order to provide the Platform and within other exemptions under applicable law, such as when we process your sensitive personal information in order to perform the services or provide the goods you request from us. For example, we may process your driver’s license number in order to verify your identity.

Other California Rights

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and/or across different websites. Our products do not support Do Not Track requests at this time.
You may have the right to request that we disclose the categories of personal information we have shared with third parties for the third parties’ direct marketing purposes. You may exercise this right by contacting us at the information listed in the “Contact Us” section.

Information Relating to Minors

If you believe that we have personal data about or collected from a person under the relevant minimum age in your jurisdiction, please contact us via the Data Subject Request Webform.

Vietnam

If you are using our Platform in Vietnam, the following additional terms apply:

Age, Parental and Guardian Consent. By accessing and/or using the Platform, you represent that you are at least 16 years of age or not under guardianship. If you are below 16 years old or under guardianship:

you must obtain approval from your parent(s) or legal guardian(s); and
your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the Platform; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the Platform will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or legal guardian(s) is not willing to open the account under their name, you must cease accessing the Platform.Privacy Policy

Last Updated: September 15, 2023

Introduction

Welcome to Dreamina. This Privacy Policy applies to the Dreamina website and related services (the “Platform”). This Privacy Policy explains how we collect, use, share, and otherwise process the personal information of users and other individuals in connection with our Services. It does not apply to other products or services that display or reference a different privacy policy. If you do not agree with this policy, you should not use the Platform.
The Platform is provided and controlled by Bytedance Pte. Ltd. with its registered address at 1 Raffles Quay, #26-10, South Tower, Singapore 048583 (“we” or “us”).
What Information We Collect
We may collect the following information from and about you, including information that you provide, automatically collected information, and information from other sources.
Information You Provide
For certain activities, such as when you register, upload content to the Platform, or contact us directly, you may provide some or all of the following information:

Registration. Registration information, such as age, username and password, language settings, and email addresses used for verification purposes.
User Content. We may collect the content you create, upload, generate, or access through the Platform, including profile information, such as nickname, avatar and user-generated content, as well as photos and prompts you create and or share with the Platform.
Information When You Contact Us. Information in correspondence you send to us.

Automatically Collected Information
We automatically collect certain information from you when you use the platform, including when you are using the web without an account. Such information includes:

Identifiers and device information. We will collect information regarding the device you are using to access the platform, such as the model of your device, the device system, device ID, your screen resolution and operating system. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices.
Usage data. We automatically log your activity on the Platform,including the content you view on the Platform, how long you spent viewing such content, access times, the URL of the website from which you came to our site, and other details about your use of and actions on the Platform.
Geolocation data. Depending on your device and web settings, we collect geolocation data when you use the Platform.
Cookies. We use cookies, mobile IDs, and other similar technologies (“Cookies”) to operate the Platform, enable us to provide certain features and functionality, and enhance your experience using the Platform. To learn more about our use of cookies, please see our Cookie Policy.

Information From Other Sources

When you sign-up or log-in to the Platform using another service such as CapCut, we may collect log-in information from the service.

How We Use Your Information
We will use your information in order to:

to ensure that you are old enough to use the Platform (including restrictions required by law)
to improve and develop our Platform and conduct product development
to use User Content as part of our marketing campaigns to promote the Platform
to train and improve our technology, such as our machine learning models and algorithms.
to understand how you use the Platform, including across your devices
to infer additional information about you, such as your age, general geographic location (such as country), and interests to generate information about your likely preferences or other characteristics (“inferences”)
to detect abuse, fraud, and illegal activity on the Platform, including scanning, analyzing, and reviewing User Content, and associated metadata for violations of our terms, conditions, and policies, if permitted by applicable law
to provide customer support and respond to your questions, requests, complaints, and feedback
to communicate with you, including to notify you about changes in our services
to enforce our terms, conditions, and policies, and to meet our legal obligations
consistent with your permissions, to provide you with location-based services, such as advertising and other personalized content
to combine all the information we collect or receive about you for any of the foregoing purposes
for any other purposes disclosed to you at the time we collect your information or pursuant to your consent, or as otherwise permitted by applicable law.

How We Share Your Information
This section sets out how we may share your information:
Our Corporate Group
We may share your information with any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries, or companies that we control, are controlled by or under common control, and our service providers and strategic business partners, in each case in or outside your country, for the purposes set out in this Policy, as permitted by applicable law, to assist in the improvement and optimization of the Platform, or for our internal business purposes.
Law Enforcement
We may share your information with law enforcement agencies, public authorities or other entities if legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

comply with legal obligations, processes or requests;
enforce our Terms of Service and other agreements, policies, and standards, including investigation of any potential violation thereof;
exercise or defend any legal claims;
detect, prevent or otherwise address security, fraud or technical issues; or
protect the rights, property or safety of us, our users, a third party or the public as required or permitted by law (including exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction).

Sale or merger
We may also disclose your information to third parties:

in the event that we sell any business or assets, in which case we may disclose your information to the prospective buyer of such business or assets; or
if we sell, buy, merge with, are acquired by, or partner with other companies or businesses, or sell some or all of our assets. In such transactions, your user information may be among the transferred assets.

We may share all of the information we collect in connection with a substantial corporate transaction, such as the sale of a website, a merger, consolidation, asset sales, or in the unlikely event of bankruptcy. Finally, we may share information with third parties with your consent or at your direction.
With your consent
Finally, we may share information with third parties with your consent or at your direction.
International Data Transfers
The information that we collect from you may be transferred to, and stored at, a destination outside of your country. It may also be processed by staff operating outside your country who work for us, for one of our suppliers or one of our business partners. By submitting your information, you agree to this transfer, storing or processing. We will take all steps reasonably necessary to ensure that your information is treated securely and in accordance with this policy and applicable law.

Location of Processing European Personal Data. We transfer personal data from the European Economic Area and Switzerland to other countries, some of which have not been determined by the European Commission to have an adequate level of data protection. When we do so, we use a variety of legal mechanisms, including contracts, to help ensure your rights and protections. To learn more about the European Commission’s decisions on the adequacy of personal data protections,please visit: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
Your Rights and Choices
You can access and edit most of your profile information by signing into your account. We also provide a number of tools in Settings that allow you to control your information. Should you choose to do so, you may delete your entire account by contacting us at dreaminaglobal@bytedance.com.
See the Cookie Policy for choices about cookies.
If you have any questions on how to use those tools, or want to know about any rights you may have in the country where you live, please contact us at dreaminaglobal@bytedance.com.
Data Security
We take reasonable and appropriate technical and organizational measures to help protect personal data from unauthorized access, use, disclosure, alteration, and destruction. Unfortunately, the transmission of information via the internet is not completely secure and we cannot guarantee the security of your information transmitted via the Platform; any transmission is at your own risk.To help us protect personal data, we request that you use a strong password and never share your password with anyone or use the same password with other sites or accounts.
Data Retention
We generally retain your information for as long as it is necessary to serve the purpose(s) for which such information was collected, including to provide you with the Platform or the Services. However, there are occasions where we are likely to keep this information longer in accordance with our legal obligations or where it is necessary for the establishment, exercise or defense of legal claims. After you have terminated your use of our Platform or Services, we may store your information in an aggregated and anonymized format. Notwithstanding the foregoing, we may also retain any information as reasonably necessary to comply with our legal obligations such as to allow us to resolve and litigate disputes, and to enforce our agreements.
Information Relating to Minors
This Platform is not directed at children under the age of 13 (14 in Canada) or equivalent minimum age in the relevant jurisdiction. If you believe that we have personal data about or collected from a child under the relevant age, please contact us at dreaminaglobal@bytedance.com
Privacy Policy Updates
We will generally notify all users of any material changes to this policy, through a notice provided via the Platform. However, you should look at this policy regularly to check for any changes. We will also update the “Last Updated” date at the top of this policy, which reflects the effective date of such policy. Your continued access to or use of the Platform after the date of the updated policy constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you must stop accessing or using the Platform.
Contact Us
Questions, comments and requests regarding this policy should be addressed to dreaminaglobal@bytedance.com.
In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at dreaminaglobal@bytedance.com and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with your data protection authority or follow the dispute resolution process provided in the Terms of Service.
Supplemental Terms - Jurisdiction Specific
Australia
Certain entities in our corporate group, located outside of Australia, are given limited remote access to your information so that they can provide certain functions, as described in the section on "How we share your information."
Brazil
If you are using our Services in Brazil, the following additional terms apply:
Exercise of data protection rights. Brazilian law provides certain rights to individuals with regard to their personal data. Thus, we seek to ensure transparency and access controls in order to allow users to benefit from the mentioned rights.

We will respond and/or fulfill your requests for the exercise of your rights below, according to the applicable law and when applicable, to the Brazilian General Data Protection Law - LGPD:

confirmation of whether your data are being processed;
access to your data;
correction of incomplete, inaccurate or outdated data;
anonymization, blocking or erasure of data;
portability of personal data to a third party;
object to the processing of personal data;
information of public and private entities with which we shared data;
information about the possibility to refuse providing personal data and the respective withdraw consequences, when applicable;
withdrawal of your consent;
request an analysis of decisions taken exclusively based on the automated processing of personal data that affect your interests, including decisions taken to define your personal, professional, consumer or credit profile, or aspects of your personality.

Verifying your identity. For your safety and to allow us to make sure that we do not disclose any of your personal data to unauthorized third parties, in order to verify your identity and guarantee the adequate exercise of your rights, we may request specific information and/or documents from you before we can properly respond to a request received concerning your data. All data and documents received from you in the process of responding to your requests will be used for the strict purposes of analyzing your request, authenticating your identity, and finally responding to your request.

Limitations to your rights. In certain situations, we may have legitimate reasons not to comply with some of your requests. For instance, we may choose not to disclose certain information to you when a disclosure could adversely impact our business whenever there is a risk of violation to our trade secrets or intellectual property rights. In addition, we may refrain from complying with a request for erasure when the maintenance of your data is required for complying with legal or regulatory obligations or when such maintenance is required to protect our rights and interests in case a dispute arises. Whenever this is the case and we are unable to comply with a request you make, we will let you know the reasons why we cannot fulfill your request.

In case of doubt about your privacy, your rights or how to exercise them, please contact us using the information in the "Contact Us" section. If you have any questions about the processing of your personal data, we would like to clarify them.

International Transfer of Data. We share your personal data globally with companies within our business group to carry out the activities specified in this Policy. We may also subcontract the processing of data involved in the Services or share your personal data with third parties located in other countries. Your personal data may therefore be subject to privacy laws other than those applicable in your country.

Whenever we transfer your personal data to third parties located in other countries, we will ensure that these companies comply with applicable data protection laws and we will take all measures that are reasonably necessary to ensure the existence of adequate safeguards to protect your personal data and to ensure that it is processed safely.

Language. The Policy may have been prepared in the English language and in the Portuguese language. If you are a user located in Brazil, you shall refer to the Portuguese version, which shall prevail.

DPO. If you wish to contact the Data Protection Officer, please contact us: dpobrasil@bytedance.com
Canada
If you are using the Services in Canada, the following additional terms apply.
Your Rights. Subject to limited exceptions under applicable law, you have the right to access, update, rectify and correct inaccuracies in your personal information in our custody and control and to withdraw your consent to our collection, use and disclosure of your personal information. To exercise these rights, you may contact us using the contact information set out below. We may require certain personal information for the purpose of verifying the identity of the individual making the request.
Your Choices. You can unsubscribe from our marketing emails at any time by clicking the “unsubscribe” link included at the bottom of each email we send. You can also adjust your preferences regarding certain types of personalized advertising by using the Ads tools in your Settings.
Transfer Outside Your Jurisdiction. We and our service providers (including members, subsidiaries, or affiliates of our corporate group) may access, store and otherwise process personal information outside of Canada (and, for residents of Quebec, outside of Quebec), including in the United States and Singapore, and other foreign jurisdictions where we or our service providers are located. For information about the manner in which we or our service providers (including service providers outside Canada) process personal data, please contact us using the contact information set out below.
Contact. If you are a resident of Canada, you can contact our Privacy Office using the contact information provided in the “Contact Us” section.
European Economic Area (“EEA”), Switzerland, and UK
If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:
Legal bases for processing
We use your personal data only as permitted by law. Our legal bases for processing your personal data described in this Policy are described in the table below.

Personal information categories and processing purposeLegal basisWe use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>,
for example:

When registering an account;
When logging in, signing up, or linking to our Services via third party accounts;
User Content and other information collected when you use our Services;
Your location;
When contacting us;
From other sources; and
From your device or browser

To enable us to administer and provide you with the Services including enabling you to create, edit, modify and share User Content and interact with other users, and to allow you to participate in interactive features of the Services, when you choose to do so; We also use this information to promote content or to provide you with tailored or personalized information or content that may be of interest to you.Processing is necessary to perform the contract governing our provision of the Services or to take steps that you request prior to signing up for an account to use the Services.We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, for example:

When registering an account;
When logging in, signing up, or linking to our Services via third party accounts;
User Content and other information collected when you use our Services;
Your location;
When contacting us;
From other sources; and
From your device or app

To understand how you use the Services, and to improve and develop the Services, including to train and improve our technology, such as our machine learning models and algorithms, The processing is necessary for our legitimate interests, namely, to improve and develop the Services.We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, and share such information with third-party advertising partners, for example:

Information collected when you use our Services;
Your location;
From your device or web browser

to provide you with personalized advertising.We or our third-party advertising partners ask for your consent to serve you with personalized ads based on your combined activity on the Services and across unaffiliated apps and websites.

We use the <Information You Provide> and <Automatically Collected Information>, and share such information with third-party advertising partners, to provide you with non-personalized advertising. We or our third-party advertising partners serve you non-personalized advertising. This processing is necessary for our legitimate interests, namely to show non-personalised ads to keep the Services free of charge. We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>,and share such information with third-party advertising partners, to measure and understand the effectiveness of advertising.This processing is necessary for our legitimate interests, namely to grow our business and to enable us, our advertisers, and our advertising partners to understand how their ads performed and the audience that viewed or interacted with their ads. This is so that they can make informed decisions (such as what kinds of ad campaigns they may want to run, the type of audience they want to reach and the types of ads that users enjoy the most). This helps keep the advertising we show users relevant and entertaining, and keeps the Services free for all users.The categories of information that we use will depend on the specific circumstances of each request or obligation. Depending on the circumstances, we use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, for example:

When registering an account;
When logging in, signing up, or linking to our Services via third party accounts;
User Content and other information collected when you use our Services;
Your location;
When contacting us;
From other sources; and
From your device or web browser.

To comply with any legal obligation, including where necessary to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority.

This processing is necessary in order to comply with our legal obligations under European Union or Member State law. This includes situations where we have obligations to take measures to ensure the safety of our users or comply with a valid legal request such as an order from law enforcement agencies or courts. Similarly processing may be necessary to respond to regulatory requests requiring the processing of information under Chapters IV and VI of the GDPR.

In other circumstances, the processing is necessary for our legitimate interests, namely, to disclose and share information with regulators or other government entities.We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, for example:

When registering an account;
When contacting us; and
From your device or web browser.

To communicate with you, on service related matters, respond to and process your queries, requests, applications, complaints, and feedback, and notify you about changes to the Services, including changes to our terms and policies.

The processing is necessary for the performance of a contract with you.

We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, for example:

When registering an account;
User Content and other information collected when you use our Services;
Your location;
From your device or web browser

We may use this information to send you marketing communications in accordance with your preferences.

The processing is necessary for our legitimate interests, namely to promote new developments and features of our Services. We will obtain your consent to send you messages where required by law.

We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, for example:

When registering an account;
When logging in, signing up, or linking to our Services via third party accounts;
User Content and other information collected when you use our Services;
Your location;
When contacting us;
From other sources; and
From your device or web browser

To enforce our Terms of Service and other conditions and policies, including to ensure that you are old enough to use the Services.

The processing is necessary for the performance of a contract with you.

We use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>,, for example:

When registering an account;
When logging in, signing up, or linking to our Services via third party accounts;
User Content and other information collected when you use our Services;
Your location;
When contacting us;
From other sources; and
From your device or web browser

To detect abuse, fraud, illegal activity, to ensure your safety and security, including scanning, analysing and reviewing User Content and associated metadata for violations of our Terms of Service and other conditions and policies, if permitted by applicable law.

We may also use this information to conduct troubleshooting, data analysis, testing, and research.

The processing is necessary for our legitimate interests, namely,

to ensure that the Services are safe and secure, to ensure compliance with our Terms of Service and other conditions and policies, and to identify misuse of the Services; and
to ensure the ongoing stability and security of the Services and to ensure it is continuously available and functioning.

In some cases, we may aggregate or anonymize the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, and use it in a way that is designed to be unable to identify you, for research, statistical, or other purposes, to the extent allowed by applicable law.The processing is necessary for our legitimate interests, namely to conduct research and protect personal information through aggregation or anonymisation, consistent with data minimization and privacy by design principles.We may use the <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>, where it is necessary to protect your or someone else's life, physical integrity, or safety. This could include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life. The specific types of information we use will depend on the specific situation.The processing is necessary to protect the vital interests of you or other individuals.We may use <Information You Provide>, <Automatically Collected Information>, and <Information From Other Sources>,for any other purposes authorised by you. The actual information we use depends on the factual circumstances.We process your information when you have given us your consent to do so.

International data transfers
If you normally reside in the European Region, the personal data that we collect about you may be further transferred to, and stored at, a destination outside of the European Region (for instance, to our service providers and partners). For example, we may store the information that we collect in secure servers located in the United States and Singapore.
When we transfer your information outside of the European Region, we ensure it benefits from an adequate level of data protection by relying on:

Adequacy decisions. These are decisions from the European Commission under Article 45 GDPR (or equivalent decisions under other laws) where they recognise that a country offers an adequate level of data protection. We transfer your information to some countries with adequacy decisions; or
Standard contractual clauses. The European Commission has approved contractual clauses under Article 46 of the GDPR that allows companies in the EEA to transfer data outside the EEA. These (and their approved equivalent for the UK and Switzerland) are called standard contractual clauses. We rely on standard contractual clauses to transfer your information to certain entities in our corporate group and third parties in countries without an adequacy decision.

If you wish to enquire further about these safeguards, please contact us at: dreaminaglobal@bytedance.com.

Your rights
You have the following rights:

The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
The right to request proper rectification or erasure of your personal data or restriction of the processing of your personal data;
Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible (data portability);
Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time (withdrawal will not impact the lawfulness of data processing activities that have taken place before such withdrawal);
The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;
The right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request.
The right to object to processing your personal data for direct marketing purposes; and
The right to lodge complaints before your local data protection authority.

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.
Please send an email to us if you would like to exercise any of your rights: at dreaminaglobal@bytedance.com.

GDPR Representatives
If you are based in the United Kingdom, our designated GDPR representative is:
Cosmo Technology Private Limited
2 Temple Back East
Temple Quay
Bristol
United Kingdom
BS1 6EG

If you are based in the EEA or Switzerland, our designated GDPR representative is:
Mikros Information Technology Ireland Limited
Mespil Business Centre
Mespil House
Sussex Road
Dublin 4
Ireland
Mexico
If you use our services in Mexico, the following additional terms apply. In the event of a conflict between the following additional terms and the provisions of the main body of this policy, the following terms shall prevail.

Data Controller: Bytedance Pte. Ltd.1 Raffles Quay, #26-10, South Tower, Singapore 048583

How we use your personal data. Almost all of the purposes of the processing data indicated above in the main section of this Privacy Policy are necessary purposes. However, the following are secondary purposes:

To provide you with personalized advertising and surveys.

The above purposes are not necessary to provide the Services, but allow us to provide you with a better experience. We offer you the ability to make choices about how we use and disclose your personal data. You can always limit the secondary purposes of personalized advertising by using the tools in the Settings that allow you to limit certain features.

We use both human and automated means to process your data.

How we share your personal data. We may share your personal data with a third party for purposes other than processing on our behalf. We will obtain your consent to such disclosure as required by applicable laws.

By providing us with your personal data and using our Services, you agree to transfers that require your consent. You can always revoke your consent and exercise your rights as outlined below.

Language. The Policy may have been prepared in the English language and in the Spanish language. If you are a user located in Mexico, you shall refer to the Spanish version, which shall prevail.

Your Rights. You have the following rights with respect to your personal data: access, rectification, cancellation, objection, consent withdrawal, limitation of use and disclosure of your data. You may exercise your rights by sending your request to dreaminaglobal@bytedance.com. To learn about the applicable requirements and the procedure for exercising your rights, please contact us at the above email address. If you are under 18 years of age, you may exercise your rights through a parent or guardian. Requests to exercise for your rights will be resolved as soon as possible according to the applicable data protection law and the nature of your request.

Information relating to minors. You may review our parental consent section in the Terms of Service.

Cookies
We will, unless exempt, obtain your consent to the use of cookies. For more information about cookies, please visit our Cookie Policy.
Philippines
If you are using our Services in Philippines, the following additional terms shall apply pursuant to the relevant laws, rules and regulations and issuances by the Philippines National Privacy Commission (“NPC”) on data privacy.

Your Rights. To the extent that the relevant laws, rules and regulations on data privacy recognize your rights and freedoms as data subjects, you shall have the right to information, object, access, rectification, erasure or blocking, lodge complaints before the NPC, damages and data portability. Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details.
United States
If you are using the Services in the United States, they are provided and controlled by Bytedance Pte. Ltd. And the following additional terms apply:

Your Rights and Choices
Depending on where you live, you may be entitled to certain rights with respect to your personal information, as described below:

Right to Know. You may have the right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which it is collected, the business or commercial purposes for collecting, selling, or sharing it, and the categories of third parties to whom we disclose it.
Access and Data Portability. Subject to certain exceptions, you may have the right to request a copy of the personal information that we have collected about you.
Deletion. You may have the right to request that we delete information that we collected from or about you, subject to certain exceptions.
Correct Inaccurate Information. You may have the right to request that we correct inaccuracies in the personal information we maintain about you.

You may exercise these rights by submitting your request via the following methods:
Email: dreaminaglobal@bytedance.com
Address: 1 Raffles Quay, #26-10, South Tower, Singapore 048583

You may be entitled, in accordance with applicable law, to submit a request through an authorized agent. To designate an authorized agent to exercise choices on your behalf, please provide evidence that you have given such agent power of attorney or that the agent otherwise has valid written authority to submit requests to exercise rights on your behalf.
We will respond to your request consistent with applicable law and subject to proper verification. We will verify your request by asking you to send it from the email address associated with your account or to provide information necessary to verify your account.
You may appeal any decision we have made about your request by replying to the communication you receive from us communicating your decision. We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on theServices may change or no longer be available to you.
You may also have the right to opt out of the sale of your personal information and the use or disclosure of your personal information for purposes of serving you advertisements based on your activity across other sites and services (“cross-context behavioral advertising” or “targeted advertising”). Although Dreamina does not sell your personal information for money, we do process and disclose your personal information collected in the Dreamina app to third parties for cross-context behavioral or targeted advertising purposes. You may opt-out of the use and disclosure of your personal information for these advertising purposes by navigating to “Your Privacy Choices” in your settings and switching off the applicable toggle. Dreamina does not knowingly sell or share personal information for cross-context behavioral advertising or targeted advertising of users under 16 where restricted by applicable law.
Although some of the information we collect may be considered sensitive personal information, we only process such information in order to provide the Services and within other exemptions under applicable law, such as when we process your sensitive personal information in order to perform the services or provide the goods you request from us.
Other California Rights

Your browser may offer you a “Do Not Track” option, which allows you to signal to operators of websites and web applications and services that you do not wish such operators to track certain of your online activities over time and/or across different websites. Our products do not support Do Not Track requests at this time.

Vietnam
If you are using our Services in Vietnam, the following additional terms apply:
Age, Parental and Guardian Consent. By accessing and/or using the Services, you represent that you are at least 16 years of age or not under guardianship. If you are below 16 years old or under guardianship:

you must obtain approval from your parent(s) or legal guardian(s); and
your parent(s) or legal guardian(s) are responsible for: (i) all your actions in connection with your access to and use of the Services; (ii) your compliance with this policy; and (iii) ensuring that any of your participation in the Services will not, in any event, result in any violation of applicable laws and regulations relating to child protections.

If you do not have consent from your parent(s) or legal guardian(s) and your parent(s) or legal guardian(s) is not willing to open the account under their name, you must cease accessing the Services.