Privacy Policy

The short version

dim collects almost nothing. We store your email so we can manage your subscription, and that is the only personal thing that reaches our servers.

Your child's name, age, pronouns, and favorites never leave your device. The stories are personalized right there on your phone, never on our end.

We use two anonymous tools to see which stories get opened and to fix crashes. None of it is tied to you or your child, and none of it is ever used for advertising. We do not sell your data, and we do not track you across other apps or websites.

The longer notice below covers the legal detail, region by region. If you ever have a question, email hello@fourfiftyone.co.

This Privacy Notice for Noah McKeon, doing business as FOURFIFTYONE ("we," "us," or "our"), describes how and why we might access, collect, store, use, and share ("process") your personal information when you use our services ("Services"), including when you download and use our mobile application, dim, or any other application of ours that links to this notice, or engage with us in any related way.

Questions or concerns? Reading this notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions, contact us at hello@fourfiftyone.co.

Summary of key points

Table of contents

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your personal information?
5. How long do we keep your information?
6. How do we keep your information safe?
7. Do we collect information from minors?
8. What are your privacy rights?
9. Controls for Do-Not-Track features
10. Do United States residents have specific privacy rights?
11. Do other regions have specific privacy rights?
12. Do we make updates to this notice?
13. How can you contact us about this notice?
14. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you subscribe to dim, contact us, or otherwise interact with the Services. The personal information we collect is:

• email addresses

What stays on your device. dim stores all child profile information, such as your child's name, age, pronouns, and favorites, only on your device and in your own iCloud. This information is never sent to our servers. Story personalization happens entirely on your device, at the moment you read.

Sensitive information. We do not process sensitive information.

Payment data. dim does not collect or store any payment card details. All payments are processed by Apple through the App Store, and subscription status is managed by RevenueCat. You may review their privacy notices at apple.com/legal/privacy and revenuecat.com/privacy.

Push notifications. We may request to send you push notifications regarding certain features of the app. If you wish to opt out, you can turn them off in your device's settings.

Information automatically collected

Some information, such as a per-install identifier and information about how the app is used, is collected automatically when you use the Services. This information does not reveal your specific identity but supports the security, operation, and improvement of dim. It includes:

• Log and usage data. Diagnostic and usage information such as crash reports, performance data, and which features and stories are used. This is collected through Sentry (crash and performance diagnostics) and TelemetryDeck (anonymous usage analytics).
• Device data. A random, per-install identifier used by TelemetryDeck and Sentry. These identifiers are not the advertising identifier, are not tied to you or your child, and are regenerated if the app is reinstalled.

We do not collect your precise or coarse location.

2. How do we process your information?

We process your personal information for the following purposes:

• To deliver and manage the Services. We use your email and subscription status to give you access to dim and manage your subscription.
• To respond to you and provide support. We use your email to answer your requests.
• To identify usage trends. We process anonymous usage information to understand how dim is used so we can improve it.
• To keep the Services safe. We process anonymous diagnostic information to fix crashes, monitor performance, and protect against abuse.
• To send you communications. Where permitted, we may send you service messages, and marketing or promotional messages you can opt out of at any time.
• To comply with law. We process information where necessary to meet legal and tax obligations.

We do not profile you or make automated decisions that produce legal or similarly significant effects.

3. What legal bases do we rely on?

If you are located in the EU or UK, this section applies to you. The GDPR and UK GDPR require us to explain the valid legal bases we rely on to process your personal information. We may rely on the following:

• Performance of a contract. To deliver dim, manage your subscription, and provide support using your email.
• Legitimate interests. To maintain, secure, and improve the app using anonymous analytics and crash reporting, where those interests do not outweigh your rights. For example, to analyze how the Services are used so we can improve them, and to diagnose problems and prevent abuse.
• Legal obligations. To keep transaction and tax records and to comply with applicable law.

If you are located in Canada, this section applies to you. We may process your information if you have given us express or implied consent, and you may withdraw that consent at any time. In some exceptional cases permitted by law, we may process information without consent, for example to detect and prevent fraud, or where required by a subpoena, warrant, or court order.

4. When and with whom do we share your personal information?

We share personal information only with the service providers that help us operate dim, under written agreement, and only what each one needs:

• Apple. Processes payments and provides iCloud, which holds your own on-device data under your control.
• RevenueCat. Manages your subscription status.
• TelemetryDeck. Provides anonymous usage analytics using a random, per-install identifier not tied to you or your child. Privacy notice: telemetrydeck.com/privacy.
• Sentry. Provides crash and performance diagnostics using a random, per-install identifier and no personal information. Privacy notice: sentry.io/privacy.
• Sanity. Stores the story content you read in the app.
• Cloudflare. Hosts the small service that handles your subscription and account email.

We may also share or transfer your information in connection with a merger, sale of assets, financing, or acquisition of all or part of our business. No child data is ever shared with any third party. We do not show advertising and do not share data with advertisers.

5. How long do we keep your information?

We keep your personal information only as long as necessary for the purposes in this notice, unless a longer period is required or permitted by law (such as tax or accounting requirements). We keep your email for as long as you use dim. We keep transaction and subscription records longer where required for tax and accounting purposes. Anonymous usage and diagnostic data is retained in anonymized form for analytics and reliability.

When we no longer have a legitimate need to process your information, we will delete or anonymize it, or securely isolate it where deletion is not immediately possible.

6. How do we keep your information safe?

We have implemented appropriate technical and organizational security measures to protect your personal information, including encrypted connections, and we limit what we collect to reduce risk. However, no method of transmission or storage can be guaranteed completely secure, so we cannot promise or guarantee absolute security.

7. Do we collect information from minors?

dim is a bedtime story app intended to be used by a parent or guardian, who reads the stories aloud to their child. dim is designed for children ages 2 to 8, but it is the parent or guardian who sets up and operates the app.

We do not knowingly collect any personal information directly from children. Any child profile details a parent chooses to add, such as a child's name, age, pronouns, or favorites, are stored only on the device and in the parent's own iCloud. This information is never transmitted to our servers and is never shared with any third party. It is used solely on the device to personalize the stories at the moment they are read.

The only personal information we collect on our servers is the parent's email address, used to manage the subscription. If you believe we have inadvertently collected personal information from a child, please contact us at hello@fourfiftyone.co and we will delete it promptly.

8. What are your privacy rights?

Withdrawing your consent. Where we rely on your consent, you may withdraw it at any time by contacting us. This will not affect the lawfulness of processing before withdrawal.

Opting out of marketing. You can unsubscribe from marketing messages at any time using the unsubscribe link in our emails, or by contacting us. We may still send you service messages necessary to administer your subscription.

Depending on your location, you may have rights under applicable data protection laws. These may include the right to access, correct, delete, or obtain a copy of your personal information, to restrict or object to its processing, and to data portability. For dim, the personal information we hold is your email and subscription status.

If you are in the EEA or UK and believe we are unlawfully processing your personal information, you may complain to your local data protection authority or the UK Information Commissioner's Office. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

To exercise any right, email hello@fourfiftyone.co. We will respond in accordance with applicable law.

9. Controls for Do-Not-Track features

Most browsers and some mobile systems offer a Do-Not-Track ("DNT") setting. Because no uniform standard for recognizing DNT signals has been finalized, we do not currently respond to them. If a standard is adopted, we will update this notice.

10. Do United States residents have specific privacy rights?

In short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain processing. These rights may be limited by applicable law.

Categories of personal information we collect

We will use and retain the collected personal information as needed to provide the Services or for:

• Category A (Identifiers): as long as you use dim.
• Category D (Commercial information): as long as you use dim, and longer where required for tax and accounting purposes.
• Category F (Network activity): in anonymized form, for as long as needed for analytics and reliability.

Sources of personal information

We collect your email directly from you. We collect usage and diagnostic information automatically through TelemetryDeck and Sentry as described in "What information do we collect?"

How we use and share personal information

We use and share personal information as described in "How do we process your information?" and "When and with whom do we share your personal information?" We may use information for internal research and development, which is not considered "selling."

We have not sold or shared personal information for a business or commercial purpose in the preceding twelve months, and we will not sell or share personal information in the future.

Your rights

You have rights under certain US state laws, which may include:

• the right to know whether we are processing your personal data
• the right to access your personal data
• the right to correct inaccuracies
• the right to request deletion
• the right to obtain a copy of your data
• the right to non-discrimination for exercising your rights
• the right to opt out of targeted advertising, the sale of personal data, or profiling with legal or significant effects

Depending on your state, you may also have the right to access the categories of data processed, obtain a list of third parties to which data has been disclosed, and limit the use of sensitive data. dim does not engage in targeted advertising, the sale of data, or profiling.

How to exercise your rights

To exercise these rights, email hello@fourfiftyone.co or visit getdim.co/contact. You may designate an authorized agent to act on your behalf, with valid written permission.

Verification. To protect you, we may need to verify your identity before acting on a request, using information already in our records.

Appeals. If we decline to act on your request, you may appeal by emailing hello@fourfiftyone.co. If your appeal is denied, you may contact your state attorney general.

California "Shine the Light" law. California residents may request, once a year and free of charge, information about personal information disclosed to third parties for direct marketing purposes. We do not disclose personal information for third-party direct marketing. To make such a request, contact hello@fourfiftyone.co.

11. Do other regions have specific privacy rights?

Australia and New Zealand

We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. This notice satisfies the notice requirements of both Acts. You have the right to request access to or correction of your personal information by contacting hello@fourfiftyone.co. If you believe we are unlawfully processing your personal information, you may complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.

Republic of South Africa

You have the right to request access to or correction of your personal information by contacting hello@fourfiftyone.co. If you are unsatisfied with how we handle a complaint, you may contact the Information Regulator (South Africa) at enquiries@inforegulator.org.za.

12. Do we make updates to this notice?

Yes. We will update this notice as necessary to stay compliant with relevant laws. The updated version will be marked with a new "Last updated" date. If we make material changes, we will post a notice or contact you directly.

13. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at hello@fourfiftyone.co, or contact us by post at:

14. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or US state, you may have the right to access, correct, or delete the personal information we hold about you, and to withdraw consent where we rely on it. To make such a request, email hello@fourfiftyone.co. These rights may be limited in some circumstances by applicable law.