Privacy Policy

Version 2.0 Effective date: September 25, 2026

1. Introduction

DREAMSTREAM Academy Inc. (“Dreamstream Academy,” “DREAMSTREAM,” “we,” “us,” or “our”) is a Delaware corporation that operates a career-guidance and exploration platform helping students and families understand interests and experiences, explore educational and career pathways, and identify meaningful next steps.

This Privacy Policy (“Policy”) describes how we collect, use, disclose, retain, and otherwise process personal information in connection with our website, mobile applications, and related services (collectively, the “Services”). It applies to students, parents and legal guardians, and other people who use or communicate with the Services (“you” or “your”).

This Policy does not apply to a third-party website, application, merchant, program, employer, or opportunity provider, even if the Services link to it or help you request a connection. When you leave the Services, the third party’s own terms and privacy policy govern its handling of information.

The Services are designed as a private experience. They do not provide social interaction, public or semi-public profiles, public posts, or a way for one user to view another user’s submitted content.

This Policy replaces Version 1.0 as of the effective date shown above. We will update this Policy when our practices materially change, as described in Section 15.

2. Children Under the Age of 13

The Services are intended for individuals who are at least 13 years old. A person under 13 may not create an account or use the Services.

We do not knowingly collect, solicit, or maintain personal information from a child under 13. We do not encourage a user to provide a false age. Signing in with an Apple or Google account, including a child account a parent manages, does not permit a child under 13 to use the Services. When Apple or Google shares an age range for an account, we use it to help keep children under 13 off the Services, as described in Section 3. If we learn that we collected personal information from a child under 13, we may suspend the account while we investigate and will delete the information.

A parent or legal guardian who believes a child under 13 provided personal information may contact us using Section 16. We may request information reasonably necessary to verify the requester’s identity and authority before acting.

We do not sell personal information belonging to a minor for monetary consideration, use it for cross-context behavioral advertising, or knowingly use it for targeted advertising.

3. Eligibility, Parents, Guardians, and Students

To use the Services, a person must be at least 13 and located in the 50 United States or the District of Columbia.

Users 13 through 17 are encouraged to review this Policy and the Terms of Use with a parent or legal guardian. By using the Services, a user under 18 represents that their parent or legal guardian is aware of and consents to the user’s use of the Services. This also applies to a user 18 or older who is not yet a legal adult where they live.

When someone uses our app on an Apple or Android device, Apple or Google may share an age range for the account on that device and whether a parent has approved the app. When that information is available, we use it to check that the user is at least 13 and to follow any parent approval that Apple, Google, or the law requires. When it is not available, including on our website, we rely on the user’s statement, made by accepting the Terms of Use, that the user meets our age rules, and we may ask the user to confirm their age.

Some activities may require separate, specific permission from the user and, where the law requires it, from a parent or legal guardian. Examples include processing particularly sensitive information, participating in an evaluation or recording, or asking us to share information with an outside organization for an opportunity.

A parent or legal guardian may request access, correction, or deletion of information for a student account, subject to reasonable verification, the student’s own privacy rights, and lawful exceptions. A student may also exercise rights concerning their own information. We will address a conflict between requests based on applicable law, the student’s age, the nature of the information, and the verified authority of the requester.

4. Information We Collect

We collect information that a user or parent chooses to provide, information generated through use of the Services, and limited technical information collected automatically.

4.1. Account, Parent or Guardian Information, and Communications

  • Student account information. Name, email address, sign-in information, and account identifiers.

  • Parent or legal guardian information. Name, contact information, relationship to the student, and communications concerning the account.

  • Optional profile information. Phone number, city, state, ZIP code, grade or education level, and general educational or career interests.

  • Communications. Support requests, feedback, survey responses, and other messages sent to us.

4.2 Records, Experiences, and Evidence a User Provides

A student or parent may choose to upload, enter, describe, or connect information such as:

  • School and academic records. Transcripts, report cards, course schedules, attendance information, classwork, and similar records.

  • Tests and assessments. SAT, ACT, PSAT, AP, IB, state-assessment, career-interest, aptitude, strengths, values, personality, and other assessment results or responses.

  • Credentials and qualifications. Certificates and credentials, such as CPR, lifeguard, food-handler, work-permit, or driver’s-license status. Unless a feature specifically requests it and explains the reason, do not upload a full government-issued identification document or its identification number.

  • Work and portfolio materials. Resumes, portfolios, writing samples, code, game film, project photographs, performance materials, and other work created by the user.

  • Information from other people. Recommendation letters, references, coach or mentor evaluations, published mentions, and similar materials the user has authority to provide.

  • Achievements and keepsakes. Awards, medals, trophies, belts, patches, playbills, badges, honors, and other evidence of participation or recognition.

  • Experiences. Classes, clubs, teams, competitions, jobs, ventures, projects, performances, camps, volunteering, service, family or household responsibilities, faith or community activities, travel, language learning, technology, making, online creation, hobbies, and self-directed pursuits.

  • Self-knowledge. Interests, values, strengths, personality, preferences, dreams, goals, growth areas, and information drawn from essays, journals, vision boards, quizzes, mentors, coaches, or the user’s own recollection.

  • Likes, dislikes, and direction. A user’s positive or negative reaction to an experience, interest, recommendation, or pathway, including what the user wants to move toward or away from.

  • Context about an item. Source, recency, duration, depth, recognition, confidence, and supporting evidence.

These records are provided by the user or parent as part of the ordinary direct-to-consumer Services. Dreamstream Academy does not receive education records directly from a school under this consumer service.

4.3 Information Collected Automatically

  • Device and connection information. IP address, device or application identifiers, operating system, browser type, language, mobile carrier, and similar technical information.

  • Usage and diagnostics. Sign-in events, screens viewed, searches, clicks, feature interactions, access times, crash information, and performance logs.

  • General location. Approximate location derived from an IP address or a location such as a ZIP code that the user provides. We do not collect precise device location unless a feature specifically requests it and the user grants permission.

  • Cookies and similar technologies. Cookies, local storage, software development kits, pixels, referral identifiers, and similar technologies described in Sections 8 and 12.

4.4 Information from Sign-In Providers, Apple, and Google

If a user signs in with Apple, Google, or another sign-in provider, the provider gives us limited information based on the user’s settings and permissions, such as a name, email address, or provider-specific account identifier. When someone uses our app on an Apple or Android device, Apple or Google may also share an age range for the account on that device and whether a parent has approved the app. We use that information only to apply our minimum age and any parent approval that is required. The provider’s privacy policy governs its own processing.

4.5 Inferences, Persistent Context, and Pathway Information

The Services may organize provided information into a private, persistent student context and living plan. We may generate or store suggested interests, strengths, preferences, themes, adjacent pathways, recommendations, milestones, saved opportunities, progress, likes, dislikes, and user-directed refinements.

These items may be generated with AI and may be wrong or incomplete. They are presented to the user for review, correction, acceptance, rejection, or refinement. They are not used by Dreamstream Academy to admit, deny, rank, score, or screen the user for an outside opportunity.

4.6 Sensitive and Out-of-Scope Information

Please do not submit Social Security numbers, financial account numbers, passwords, biometric identifiers, health or medical records, or full government-issued identification documents unless a feature specifically requests the information, explains the purpose, and obtains any required permission.

Materials a user chooses to provide may incidentally reveal sensitive details, such as disability, citizenship or immigration information, religious beliefs, sexual orientation, or information about another person. We do not use incidental sensitive information for advertising or to make an eligibility or selection decision. We may use automated and human review to reject, quarantine, minimize, redact, or remove information that is malicious, outside the intended scope of the Services, or unnecessarily sensitive.

5. How We Use Information

We use personal information to:

  • Create, authorize, authenticate, and manage accounts.

  • Apply our minimum age and any parent approval that Apple, Google, or the law requires.

  • Provide, personalize, maintain, and secure the Services.

  • Receive, parse, organize, and display records and experiences a user provides.

  • Build and maintain a private student context, Wallet, living plan, or similar personal record.

  • Generate assessments, suggestions, pathways, adjacent possibilities, milestones, and recommended next steps.

  • Save progress, preferences, likes, dislikes, and user-directed refinements.

  • Surface local or virtual programs, services, activities, and opportunities.

  • Provide customer support and communicate about an account or the Services.

  • Send promotional communications only with the required permission and provide a way to opt out.

  • Conduct research, evaluation, or product testing when the user and, where required, a parent or legal guardian have been given appropriate notice and permission.

  • Detect fraud, misuse, security threats, technical errors, and policy violations.

  • Improve the Services using feedback and information that has been aggregated or de-identified so it is not reasonably linkable to an individual.

  • Comply with law, respond to lawful requests, enforce our agreements, and protect rights, property, and safety.

5.1 Artificial Intelligence and Machine Learning

We use AI and ML service providers, including large language models, to help parse and organize user-provided information, generate summaries and suggestions, maintain a student’s private context, and produce or refine pathways and recommendations.

These providers process information on our instructions. We require providers that receive identifiable personal information from us not to use that information to train their general-purpose models and not to disclose it for their own independent purposes, subject to the terms and agreements governing the Services.

We may use de-identified or aggregated information to evaluate and improve our methods. We do not use identifiable student records, assessment responses, or AI-generated inferences to train a general-purpose AI model.

5.2 Advisory Outputs and No Consequential Decisions

AI-generated outputs and assessment-derived inferences are informational suggestions. Dreamstream Academy does not use them to make a decision producing a legal or similarly significant effect on access to education, employment, financial services, housing, healthcare, insurance, or another essential opportunity.

Dreamstream Academy does not admit, deny, rank, score, or screen a user for a school, job, program, loan, or opportunity. We do not transmit an AI-generated profile, score, or inference to a third party for use in admissions, hiring, lending, eligibility, or selection. The user decides whether to follow a suggestion or pursue an opportunity.

6. Data Processing Location

The Services are intended for users in the 50 United States and the District of Columbia. Dreamstream Academy operates the Services from the United States. Personal information is processed and stored in the United States, including by service providers acting on our behalf, subject to their applicable agreements and safeguards.

The Services are not offered to persons located in the European Economic Area, the United Kingdom, Switzerland, or another jurisdiction outside the United States. If a person nevertheless accesses the Services from outside the United States, information will be transferred to and processed in the United States, where data-protection laws may differ.

7. Disclosure of Personal Information

We may disclose personal information to the following categories of recipients for the purposes described below:

  • Service providers and subprocessors. Vendors that perform services on our behalf, including hosting, infrastructure, storage, authentication, analytics, customer support, communications, security, file processing, and AI or ML processing. They receive information reasonably necessary to perform the service and are restricted from using it for unrelated independent purposes.

  • Legal and regulatory recipients. Courts, law-enforcement agencies, regulators, or other government authorities when disclosure is required or permitted by law or reasonably necessary to protect rights, property, or safety.

  • Business-transaction recipients. A buyer, investor, lender, adviser, or successor involved in a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate confidentiality and use restrictions where applicable.

  • A person or organization the user directs us to contact. We may disclose information when the user and, where required, a parent or legal guardian specifically directs or authorizes the disclosure.

  • De-identified or aggregated information. We may disclose information that is not reasonably linkable to an individual.

7.1 Optional Verified Opportunity Connections

Where the Services offer a verified opportunity connection, the user chooses whether to request it. Before sharing information, we identify the receiving organization, describe the opportunity and known eligibility, cost, timing, availability, and next steps, show the information proposed for disclosure, and request the user’s direction and any parent or legal guardian authorization required for the action.

We design the connection to use the minimum information reasonably necessary. Shared information may include limited contact and routing information that the user approves. Unless the user separately directs and authorizes otherwise, we do not provide the receiving organization with uploaded records, assessment responses, credentials, or AI-generated profiles, scores, or inferences.

We may ask the receiving organization or the user for limited status information, such as whether the request was received, whether the organization responded, and whether the agreed next step occurred. We do not need the provider’s underlying program records to close the loop. The provider independently controls its own application, eligibility, selection, supervision, safety, delivery, and records.

7.2 No Sale for Money and No Behavioral Advertising

Dreamstream Academy does not sell personal information for monetary consideration and does not disclose personal information for cross-context behavioral advertising. We do not use personal information to target advertising to a minor.

Some state laws define “sale,” “sharing,” or “targeted advertising” more broadly than an exchange for money. Affiliate referrals may involve cookies, referral identifiers, and conversion reporting as described in Section 8. To the extent an affiliate practice is treated as a regulated sale, sharing, or targeted-advertising disclosure under applicable law, we will provide and honor the required choice.

8. Affiliate Programs and External-Browser Referrals

Some recommendations contain affiliate links. Dreamstream Academy may receive a commission if a user makes a qualifying purchase or takes a qualifying action after following a link, at no additional cost to the user. We provide a clear compensation disclosure near the relevant recommendation or link.

Affiliate links open in the device’s external browser. Dreamstream Academy, the merchant, or an affiliate network may set or read an attribution cookie or use a referral code, campaign identifier, click identifier, pixel, or similar technology. Attribution may persist for a period set by the merchant or network.

Depending on the program, the outbound link may contain referral, campaign, or click information, and Dreamstream Academy may later receive information such as whether a qualifying action occurred, the date of the action, an order-value or product-category field, and the commission earned. The merchant or network may be able to associate its own transaction information with the person who completed the transaction under its own terms and privacy policy.

We do not intentionally include a student’s name, email address, uploaded records, assessment responses, credentials, AI-generated profile, or AI-generated inferences in an affiliate link. We do not use affiliate click or transaction information to build or change the student’s private profile, pathway, or recommendations.

An affiliate relationship is separate from an optional verified opportunity connection. A merchant or network does not agree to accept, guide, supervise, respond to, or provide an opportunity to a student merely because it participates in an affiliate program.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing an active account, maintaining the student’s saved information and pathways, protecting security, resolving disputes, documenting permissions, meeting legal obligations, and completing appropriate financial accounting.

User Content and student-profile information generally remain available while the account is active unless the user deletes an item sooner. When an account is closed or information is no longer needed, we delete or de-identify it, subject to limited exceptions. Information may remain temporarily in backups until the normal backup cycle removes it.

We may retain limited security, fraud-prevention, transaction, consent, and legal records when reasonably necessary to comply with law, exercise or defend legal claims, document permissions, prevent abuse, or complete accounting. We do not retain personal information indefinitely merely because it might be useful in the future.

10. Privacy Rights and Choices

Dreamstream Academy offers the following choices to users throughout the United States, subject to reasonable identity and authority verification and lawful exceptions:

  • Confirm whether we process personal information and learn how we use it.

  • Access a copy of personal information.

  • Correct inaccurate or incomplete personal information.

  • Delete personal information.

  • Receive a portable copy of information the user provided.

  • Withdraw an optional permission previously given.

  • Opt out of any sale, targeted advertising, or profiling for a consequential decision. Dreamstream Academy does not engage in these activities except for any affiliate practice that applicable law may define more broadly, as described in Section 7.2.

  • Limit the use or disclosure of sensitive personal information where applicable.

  • Appeal a decision concerning a privacy request by asking us to review it again.

  • Use an authorized agent where applicable.

  • Be free from unlawful discrimination for exercising a privacy right.

A parent or legal guardian may exercise rights concerning a student account, subject to reasonable verification, the student’s own rights, and applicable law.

Users may request deletion of an account and associated personal information through the in-app deletion control or by contacting us. Deletion is subject to the limited retention exceptions in Section 9.

Send a privacy request or appeal to [email protected]. Describe the request and identify the account email. Do not send a password, Social Security number, or full identification document. We may request additional information reasonably necessary to verify identity or authority. We respond within the period required by applicable law and explain a lawful reason if we cannot fully complete a request.

Residents of some states may have additional rights. We honor those rights where they apply. Offering a choice nationwide does not mean every state privacy statute applies to Dreamstream Academy in every circumstance. We honor legally recognized opt-out preference signals where required.

11. Data Security

We implement and maintain technical, administrative, and organizational safeguards appropriate to the nature, sensitivity, and amount of personal information we process and to our operations. Measures may include encryption in transit, access controls, authentication protections, vendor review, contractual restrictions, monitoring, backup controls, and incident-response procedures.

No method of transmission or electronic storage is perfectly secure, and we cannot guarantee absolute security. If a security incident triggers a legal notification obligation, we will provide notice as required by applicable law.

Users should protect account credentials and promptly notify [email protected] of suspected unauthorized access.

12. Cookies and Similar Technologies

Our website and applications may use cookies, local storage, software development kits, pixels, and similar technologies to:

  • Operate, authenticate, and secure the Services.

  • Maintain sessions and remember preferences.

  • Measure performance, diagnose errors, and understand feature use.

  • Support an affiliate referral after a user chooses an affiliate link.

Where offered, users can manage nonessential cookies through our cookie preference tool. Browser and device settings may provide additional controls. We honor legally recognized opt-out preference signals where required. Disabling some technologies may affect how the Services work.

Affiliate attribution may also occur in the external browser and may be controlled by a merchant or affiliate network. Review the destination’s privacy policy and cookie choices for information about its practices.

13. Third-Party Sites and Services

The Services may link to websites, applications, products, programs, employers, government entities, community organizations, and opportunities that Dreamstream Academy does not operate. This Policy does not govern those third parties. Review their terms and privacy policies before providing information, applying, registering, or making a purchase.

If a user requests an optional verified opportunity connection, Section 7.1 governs information Dreamstream Academy discloses to initiate that connection. The receiving organization’s own policy governs information it later collects directly.

14. Mobile Application Disclosures

The mobile application may request permission to:

  • Send account, service, reminder, and, with permission, promotional notifications.

  • Use the camera, photo library, or file storage so the user can submit selected materials.

  • Use approximate location, if offered and permitted, to refine local suggestions.

  • Access another device feature clearly described when permission is requested.

Users can manage permissions through device settings. We do not collect precise device location unless a feature specifically requests it and the user grants permission. We do not share location information for behavioral advertising.

The privacy disclosures shown in an app store describe the application as submitted to that store. This Policy describes Dreamstream Academy’s broader practices. We work to keep the disclosures consistent and update them when relevant practices change.

15. Changes to This Privacy Policy

We may update this Policy to reflect changes in the Services, our practices, or the law. We will display the current effective date at the top.

If a change is material, we will provide reasonable notice through the Services, by email, or both. When appropriate, we will request renewed acceptance or permission before continued use or before applying the new practice. When Apple, Google, or the law requires a parent to approve a significant change for a minor’s account, we will follow that process.

16. Contact Information

If you have a question or concern about this Policy or our privacy practices, or wish to exercise a privacy right, contact us at:

DREAMSTREAM Academy Inc.

Attn: Privacy Team

9893 Georgetown Pike, #177

Great Falls, VA 22066

Privacy questions, requests, and complaints: [email protected]

General support: [email protected]

The Future is Almost Here. Be the First to Experience It.

Join the Founding Community

I am a...

Parent/Guardian or Family Member

Student

Professional

Investor

Join DREAMSTREAM.

Be the first to know when we launch. One email, that’s all we need.