// 01
Who We Are
DreamBound is a goal achievement platform operated by Mahara Tech, reachable at mahara.tech. This Privacy Policy explains how we collect, use, and protect information when you use the DreamBound mobile application.
By using DreamBound you agree to the practices described here. If you do not agree, please discontinue use and contact us at dev@mahara.tech to delete your account.
// 02
What We Collect
Account Information
- Email address and display name (email/password sign-up)
- Google account name, email, and profile picture (Google Sign-In)
- Optional: bio, interests, and profile photo you add manually
Goals & Progress Data
- Goal titles, descriptions, categories, deadlines, and success definitions you write
- Action step completions, check-in responses, and streak data
- Gamification data: points, level, achievements unlocked, leaderboard position
- AI-generated action plans associated with your goals
Social & Mentorship Data
- Goals you choose to make publicly discoverable
- Mentorship requests you send or receive, including offer messages
- Chat messages exchanged with mentors or mentees
- Mentor profile details (expertise, bio, availability, pricing) if you become a mentor
- Ratings and reviews of completed mentorships
- Verification submissions if you apply for mentor verification
Usage & Technical Data
- App interactions tracked via Firebase Analytics (screens visited, features used, session length)
- Device type, operating system version, and app version
- FCM (push notification) token stored alongside your platform (iOS/Android)
- Monthly AI usage counters (plans generated, help queries used) for quota enforcement
- Crash reports and performance diagnostics via Firebase
- Last login timestamp
Images
- Photos you choose to attach to your profile or goal entries, uploaded to Cloudinary
Subscription & Payment Data
- Your subscription tier (free or Pro) and expiry date, synced from RevenueCat
- Payment processing is handled by Google Play and RevenueCat — we never see your card number
- Mentorship session payments between users are processed in-app; transaction records are stored in Firestore
// 03
AI Features & Data Sent to AI
DreamBound uses an AI model (DeepSeek, called via Firebase Cloud Functions) to generate personalised goal action plans and step-by-step coaching. When you use these features, the following is included in the prompt sent to the AI:
Included in AI Prompts
- Your goal title, description, and category
- Your chosen deadline, experience level, weekly hours available, and selected obstacles
- The specific step title and your question when requesting AI coaching help
AI prompts do not include your email, name, or any account identifiers. Prompts are processed via Firebase Cloud Functions before reaching the AI provider. We do not use your goal data to train AI models.
// 04
Social Features & Public Data
DreamBound includes social features where some data may be visible to other users. You control what is shared.
Goal Discovery
If you choose to make a goal discoverable, its title, category, and your display name become visible to other users on the Discover screen. Goals are private by default.
Mentorship
If you apply to become a mentor, your bio, expertise, categories, availability, and pricing are visible to other users. Ratings and review counts are publicly displayed. Chat messages are visible only to the two participants in a conversation.
Leaderboard
Your display name and points total may appear on leaderboards visible to other users.
Your email address, device information, AI usage counts, and subscription status are never visible to other users.
// 05
Camera & Photo Access
DreamBound requests camera and photo library access only when you explicitly choose to upload an image. We do not access your camera passively, scan your photo library, or upload images without your direct action. Images are stored securely on Cloudinary and linked to your account.
// 06
Push Notifications
With your permission, DreamBound sends push notifications including: goal and step reminders, streak alerts, mentorship updates (requests, acceptances, session reminders, payments), achievement unlocks, and daily check-in prompts. We store your FCM token to deliver these. You can disable notifications at any time in your device settings or within the app.
// 07
Subscriptions & Payments
DreamBound Pro subscriptions are available at $5.99/month or $39.99/year (with a 7-day free trial). Subscriptions are processed by Google Play and managed by RevenueCat. We receive only your subscription status and expiry date — not your payment method.
Mentorship payments between users are facilitated in-app; payment records (amount, participants, timestamp) are stored in Firestore and visible only to the two parties and Mahara Tech for dispute resolution.
// 08
How We Use Your Data
Purposes
- Provide and sync your goals, steps, and progress across sessions
- Generate AI action plans and coaching responses personalised to your goal
- Enforce free-tier quotas and unlock Pro features
- Enable social features: goal discovery, mentorship matching, and real-time chat
- Send push notifications you have opted into
- Calculate streaks, achievements, points, and leaderboard rankings
- Process and record mentorship payments
- Improve app stability and performance via crash analytics
- Respond to support requests and comply with legal obligations
We do not use your data for advertising and we do not sell your data to any third party.
// 09
Data Sharing
We do not sell or rent your personal information. We share data only in these circumstances:
When Data Is Shared
- With other users — only data you choose to make social (discoverable goals, mentor profile, chat messages, leaderboard entries)
- With service providers — Firebase, RevenueCat, Cloudinary, and DeepSeek (AI) under data processing agreements
- Legal requirements — if required by law, court order, or to protect user safety
- Business transfer — in a merger or acquisition, data would transfer under the same protections with advance notice to you
// 10
Third-Party Services
Firebase (Google)
Authentication, Firestore database, Cloud Functions, Analytics, and push notifications (FCM).
DeepSeek AI
AI model powering goal plan generation and step coaching, called via Firebase Cloud Functions.
RevenueCat
Subscription management, purchase restoration, and Pro tier verification.
Cloudinary
Secure storage and delivery of profile photos and goal images you upload.
Google Sign-In
Optional authentication using your existing Google account.
Google Play Billing
Payment processing for Pro subscriptions on Android.
// 11
Data Safety Summary
Reference table for the Google Play Data Safety form.
| Data Type | Collected | Shared | Purpose |
|---|
| Email address | Yes | No | Account management |
| Name / display name | Yes | Social only | Account & leaderboard |
| Profile photo | Yes | Mentor / social | App functionality |
| Goals & steps | Yes | If discoverable | Core functionality |
| Chat messages | Yes | Participants only | Mentorship |
| Photos / images | Yes | Profile / mentor | App functionality |
| App analytics | Yes | No | Analytics |
| Crash logs | Yes | No | Stability |
| FCM token | Yes | No | Push notifications |
| Subscription status | Yes | No | In-app purchases |
| Mentorship payments | Yes | Participants only | Financial transactions |
| Advertising ID | No | No | Not used |
All data uses HTTPS/TLS encryption in transit. Users can request deletion — see Section 12.
// 12
Retention & Deletion
Retention Periods
- Account & goal data — retained until you delete your account, then purged within 30 days
- Chat messages — deleted within 30 days of account deletion
- Payment records — retained 7 years for legal and tax compliance
- Analytics data — anonymised per Firebase standard retention settings
- Monthly AI usage counters — reset automatically on the 1st of each month
To delete your account, go to Settings → Delete Account in the app, or email dev@mahara.tech.
// 13
Your Rights
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Delete your account via Settings or by emailing us.
Portability
Request an export of your goals and progress data.
Opt-Out
Disable analytics or notifications anytime in Settings.
Objection
Object to certain processing. We respond within 30 days.
Contact dev@mahara.tech to exercise any right. We may verify your identity before fulfilling a request.
// 14
Children's Privacy
DreamBound is intended for users aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact dev@mahara.tech and we will delete it promptly.
// 15
Security
We use encrypted data transmission (HTTPS/TLS), Firebase security rules limiting data access to authenticated account owners, secure credential storage, and Cloud Function-level access control for AI and payment operations. No internet transmission is 100% secure; we take reasonable steps to protect your information.
// 16
Changes to This Policy
We may update this policy as DreamBound evolves. For significant changes — new data types, new third parties, or new social features — we will notify you via an in-app notification and update the effective date above. Continued use after changes are posted constitutes acceptance.