Privacy Policy

Last updated: September 11, 2024

1. Introduction

Nibble Audio Inc., its subsidiaries and affiliates (collectively “Dreamoji”, “us”, “we”, or “our”) operates the Dreamoji mobile application, which allows users to generate custom emojis through AI (our “Services”).

We are committed to protecting your privacy. This Privacy Policy (“Policy”) describes how we collect, process, share and safeguard Personal Data that is collected through or in connection with the Services. It also tells you about your rights and choices with respect to your Personal Data, and how you can contact us if you have any questions or concerns. Some features may be disabled depending on your location to comply with local laws.

2. Personal Data we collect

We collect Personal Data about you from different sources listed below. In this Policy, “Personal Data” means any information related to an identified or identifiable individual, and does not include data whereby personally identifiable information has been removed (such as anonymous data).

Personal Data You Provide to Us

  • Payment information: Our payment processor(s) will collect the financial information necessary to process your payments, including name, payment card information, and billing information. Our third-party payment processors will handle your payment information in accordance with their own privacy policy. We do not have access to your full payment card information.
  • Prompts and searches When you choose to create emojis with Dreamoji, you provide Dreamoji with the prompt used to create it. We may review the contents of these prompts if a user reports, or we otherwise detect, a potential trust and safety violation or potentially illegal or illicit activity or violations of our Terms and Conditions, as permitted by applicable laws.

Where you provide us with the Personal Data of third parties, such as people in your mobile contact list, it is your responsibility to inform them about the processing of their Personal Data in accordance with this Policy, and to confirm that they have given their permission.

Information Collected via Automated Means

  • Device data: We collect information about your device such as your mobile device’s operating system type and version, manufacturer and model, browser type, device type (e.g., phone, tablet), IP address, unique identifiers, language settings, mobile device carrier, radio/network information (e.g., WiFi, LTE, 4G), and general location information such as city, state or geographic area.
  • Usage data: When you access and use the Services, we receive and store information about interactions with our Services, including pages or screens you viewed, how long you spent on a page or screen, browsing history, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.

Information We Receive from Third Parties

  • We maintain pages on social media platforms, such as Facebook, TikTok, Twitter and Instagram, that collect and process your Personal Data in accordance with their own privacy policies. You or the platform providers may provide us with information through the social media platform, and we will treat such information in accordance with this Policy.

3. How we use your Personal Data

We will use your Personal Data for one or more of the purposes set out below:

  • To provide you with the Services. We use your Personal Data to operate, maintain and provide you with the Services to perform any contract we have with you under the Dreamoji Terms and Conditions. In particular we use Personal Data to allow you to create and use an account. The Personal Data we process when doing so includes your account information, contact details of your friends and photos you choose to upload.
  • To provide you with support and to respond to your requests and complaints. If you reach out to us for support, it is in our legitimate interests to use Personal Data to respond and resolve your queries and facilitate support. The Personal Data we process when doing so includes your correspondence with us, your contact details, and to the extent applicable other Personal Data processed about you when you use our Services.
  • To communicate with you about our Services. It is in our legitimate interests to communicate with you about our Services including by sending you announcements, updates, security alerts, and support and administrative messages. The Personal Data we process when doing so includes your contact details, account information and usage data.
  • To send marketing and promotional messages. Except where we rely on your consent, it is in our legitimate interests to send marketing and promotional messages relating to our Services, or the services of our affiliates and subsidiaries, that we believe will be of interest to you, in accordance with applicable law.
  • To measure the effectiveness of advertising campaigns to promote the Services. Except where we rely on your consent, it is in our legitimate interests to use your Personal Data to track the effectiveness of advertising campaigns.
  • To improve or monitor usage of our Services and to protect, investigate and deter against fraudulent, harmful, unauthorized or illegal activity. It is in our legitimate interests to improve and keep our Services safe for our users, which includes conducting troubleshooting, testing and research and to keep the Services secure. When doing so we may use Personal Data that we automatically collect about you such as usage and device information.
  • To monitor and analyze trends and use of our Services. It is in our legitimate interests to analyze the use of our Services. When doing so, we will process Personal Data that we automatically collect about you or that is generated about you when you use the Services.
  • To enforce the Dreamoji Terms and Conditions, to comply with legal obligations and to defend Dreamoji against legal claims or disputes. It is in our legitimate interests to enforce and comply with our terms and policies, to ensure the integrity of our Services and to defend ourselves against legal claims or disputes. Where we do so, we will use the Personal Data relevant to such a case. Some processing may also be necessary to comply with a legal obligation placed on Dreamoji for example to keep records of transactions, or as requested by any judicial process or governmental agency.
  • For aggregation and anonymization. It is in our legitimate interests to aggregate or anonymize Personal Data in a form that does not allow users to be personally identified and use the resulting information for statistical analysis regarding the use of the Services, such as to better understand our customer base, or for other purposes.

We will only process Personal Data on the basis of our legitimate interests where such interests are not overridden by your interests or your fundamental rights and freedoms.

If, where we are processing your Personal Data to perform our contract with you, you do not provide the Personal Data, we may not be able to conclude or fulfill such contract.

4. How we disclose your Personal Data

We disclose Personal Data about you with the following recipients and in the following circumstances:

  • Affiliates: Affiliates and subsidiaries of Dreamoji, for purposes consistent with this Policy.
  • Service Providers for the provision of our Services: We rely on vendors and service providers solely for the provision of our Services and for the purposes set out above, such as providers of analytics, hosting and cloud computing services and other IT services and customer support services in addition to other administrative services, and advertising technology vendors. These third parties may have access to or process your Personal Data as part of providing these services.
  • Advisors: We work with various advisors, including tax consultants and legal advisors, to whom we may disclose your Personal Data.
  • Legal: Information about our users, including Personal Data, will be disclosed to law enforcement agencies, regulatory bodies, public authorities or pursuant to the exercise of legal proceedings if we are legally required to do so, or if we believe, in good faith, that such disclosure is necessary to comply with a legal obligation or request, to enforce our terms and conditions, to prevent or resolve security or technical issues, or to protect the rights, property or safety of Dreamoji, users, a third party, or the public.
  • Business Transaction: If Dreamoji is involved in a merger, acquisition or asset sale, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your Personal Data may be sold, transferred or otherwise disclosed including as part of any due diligence process.

5. Your rights and choices

  1. Opt-out of marketing communications. You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us or by contacting us as provided in the “Contact us” section below. You may continue to receive Services-related and other non-marketing emails from us.
  2. Limit online tracking. Some internet browsers can be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
  3. Personal Data requests. We also offer you choices that affect how we handle the Personal Data that we process. Depending on your location and the nature of your interactions with our Services, you may request the following in relation to Personal Data:
    • Information about how we have collected and used Personal Data. We have made this information available to you without having to request it by including it in this Policy;
    • Access a copy of the Personal Data we hold about you;
    • Correction of Personal Data that is inaccurate or out of date;
    • Deletion of any Personal Data that we no longer need to provide the Services or for other lawful purposes. You can delete your account in your account settings;
    • Receive any Personal Data we hold about you in a structured and commonly used machine readable format or have such Personal Data transmitted to another company;
    • Withdraw any consent you previously provided to us regarding the processing of your Personal Data at any time. We will apply your preferences going forward. This will not affect the lawfulness of the processing before you withdrew your consent;
    • Additional rights, such as to object to and request that we restrict our use of Personal Data.

    To make a request, please email us or write to us as provided in the “Contact us” section below. We may ask for specific information from you to help us confirm your identity. Depending on where you reside, you may be entitled to empower an authorized agent to submit requests on your behalf. We will require authorized agents to confirm their identity and authority, in accordance with applicable laws. You are entitled to exercise the rights described above free from discrimination.

    In some instances, your choices may be limited, such as where fulfilling your request would impair the rights of others, our ability to provide a service you have requested, or our ability to comply with our legal obligations and enforce our legal rights. If you are not satisfied with how we address your request, you may submit a complaint by contacting us at team@onlywidget.com. Depending on where you reside, such as if you reside in the European Economic Area ("EEA”) or United Kingdom (“UK”), you may have the right to complain to a data protection regulator where you live or work, or where you feel a violation has occurred. For example, if you are based in the UK, you may choose to lodge a complaint with the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/.

6. International data transfers

If you provide us with your Personal Data when using the Services from the EEA, Switzerland or the UK or other regions of the world with laws governing data collection and use that may differ from United States law, then please note that you are transferring your Personal Data outside of those regions to the United States for storage and processing.

If we transfer your Personal Data internationally, these countries may not provide the same protections as the data protection laws where you are based.  We will ensure that relevant safeguards are in place to afford adequate protection for your Personal Data and we will comply with applicable data protection laws, in particular if you reside in the EEA, Switzerland or UK by relying on an EU Commission or UK government adequacy decision, on contractual protections for the transfer of your Personal Data or a derogation if available.  For more information about how we transfer Personal Data internationally, please contact us as set out in the “Contact Us” section below.

7. Children’s privacy

Our Services are not directed to children, and we do not knowingly collect Personal Data from anyone under the age of 13.  If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us as set out in the “Contact Us” section below.

8. Retention of Personal Data

We retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention procedures, and in accordance with applicable laws or until you withdraw your consent (where applicable).

To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your Personal Data, the purposes for which we use your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements.

9. Security of Personal Data

We use reasonable organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of Personal Data we process.  Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect your Personal Data, we cannot guarantee its security.

10. Links to other sites

The Services may contain links to other sites that are not operated by us.  If you click a third party link, you will be directed to that third party’s site.  We strongly advise you to review the privacy policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

11. Changes and updates to this Policy

We will update this Policy from time to time.  Please review this Policy periodically for any changes. Changes to this Policy are effective when they are posted on this page.

If we make material changes, we will let you know.

12. Contact us

Nibble Audio Inc. is the entity responsible for the processing of your Personal Data, and is the data controller in respect of such processing.  If you have any questions or comments about this Policy, our privacy practices, or if you would like to exercise your rights with respect to your Personal Data, please contact us by email at team@onlywidget.com