Legal
Version 2026-09-22.3 · Compendium Company, LLC
This forms part of the Terms and Conditions. It is written to be read, not to be got past.
We hold what you type: your email address, the children you add, and the letters you write. We use it to run Dreams, to make it better, and to tell you about things we offer. We do not sell it to anyone. You can see it, correct it, and have it deleted.
What a child types onto a photo sign never reaches us at all.
Your Grow Book stays on your own device. If you add sync, it is encrypted on your device first, and we cannot open it.
We track how the site is used. With your permission we use Google Analytics and Google Ads cookies to measure visits and whether our ads work. You choose in the cookie banner, and you can change your mind at any time. None of this ever runs on the pages children use.
Information you give us:
The Grow Book keeps your pages, children's names, birthdays and photos in your own browser storage on your device. Without sync, none of it is sent to us.
If you choose to add Grow Book sync, your device encrypts each page (AES-256) with a Family Key that is made on your device and never sent to us, and only the encrypted result is uploaded. We store it so your other devices can fetch it, but we cannot read it: we see only its size, a random identifier and when it changed. We cannot recover your Family Key.
Turning sync off deletes the encrypted copy from our servers immediately.
Voice recordings, video clips, drawings and stickers you add to a page are kept the same way as photos: on your device, and only encrypted if you sync. Recording uses your microphone only while you are recording.
If you add a grandparent, we store the name you give them and when they last opened the book, so you can see it. Their link carries your Family Key after the "#", a part of a web address browsers do not send to servers, so we still cannot open your book. A note they leave is encrypted on their device and held by us, unreadable, until your device fetches it and you add it or let it go; then we delete it.
If you share pages with friends, your device locks just those pages with a new key made for that link alone, and we store only the locked copy, a random identifier, its size, when it expires and how many times it was opened. The key is in the link after the "#", so we cannot see what you shared. It is deleted when the link expires or you stop it.
If you add your husband or partner for reminders, we store his first name, email address and, if given, mobile number; your first name, your birthday as a month and day (never the year), your anniversary, which occasions to remind him about, and your children’s birthdays. We use them only to send those reminders.
We record when we invited him, whether and when he said yes, and, if he agrees to texts, the exact wording he agreed to and when. We record each reminder we send so we never send it twice. Texts are sent through our text-message provider, Amazon Web Services, and carry no links.
If he stops the reminders we keep only what we need to never contact him again. If you remove him, or close your account, his details are deleted.
If you join the Dream Community we store the display name, picture and short description you choose, when you agreed to the guidelines, and what you post: words, photos, comments, reactions and reports. Other members see your display name, picture, description and posts. We never show them your email address.
Photos are made smaller on your device and have their hidden data (including any location) removed, on your device and again on our server, before anyone sees them. Posts, comments and photos are sent to our AI provider, Anthropic, to be checked for safety before other members see them; Anthropic does not use them to train its models.
The community pages load no analytics or advertising tags and are not shown to search engines. A post you delete is removed with its photos; unposted photos are deleted after a day. Reports are seen only by our moderators.
When you use the site we record:
We track how Dreams is used and whether our advertising works, using Google Analytics and Google Ads. With your permission, these place cookies in your browser and send Google information about your visit: the pages you view, how you arrived (including which of our ads you clicked), your device and browser, your approximate location, and actions you take on the site such as creating an account or buying a subscription, including the amount.
Google uses this to give us reports and to tell us which ads led to a signup or purchase. Google may also use it under its own terms; see how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
We do not send Google your name, your email address, or anything about your children, and we never use your children's details for advertising.
We keep a record of each choice made in the banner (what was chosen and when, with the same daily-changing visitor identifier described above) so we can show what was agreed.
We use what we hold to:
We use a small number of companies to run the service, and they may process your information only on our instructions:
We may also disclose information where the law requires it, to protect someone's safety, or in connection with a sale or reorganisation of the business — in which case the buyer would be bound by this notice.
Dreams is written for adults to use. Accounts are for adults and we do not knowingly create an account for a child.
Information about a child reaches us only because a parent or guardian typed it in. If you believe a child has given us information directly, write to us and we will delete it.
We hold a child's details for as long as your account is open, so that next year's letter takes one click rather than starting again. Remove a child from your account and we remove their details.
At any time you can:
Depending on where you live you may have further rights, including under the California Consumer Privacy Act or the UK and EU General Data Protection Regulation. We apply the rights above to everyone regardless of where they live. Write to us and we will act on it.
Do not sell or share: we do not sell personal information. Under some US state laws, letting Google measure our ads counts as "sharing" for advertising. To opt out, choose "Essential only" or turn advertising off in "Cookie choices", or use Global Privacy Control, which we honour automatically without asking you to sign in.
Where we rely on your consent — for marketing email, for analytics and advertising cookies, and for holding your children's details — you can withdraw it at any time without affecting what we did before you did so.
Dreams runs on servers in the United States. If you are elsewhere, your information is transferred there.
Passwords are stored as bcrypt hashes. The connection is encrypted. Access to the operator view is restricted and audited, the database is backed up nightly with the backup verified before it is kept, and we rate limit sign-in attempts. No system is perfectly secure, but we take this seriously and will tell you promptly if something goes wrong.
If we change how we use information about you or your children in a way that materially affects you, we will tell you and ask you to agree again.
For anything at all — a question, a correction, a copy of your data, or a deletion — write to [email protected], or to Compendium Company, LLC, 999 Vanderbilt Beach Rd, Ste 200, Naples, FL 34108, United States.
See also the Terms and Conditions.