Last updated 15 October 2026
This policy explains how Daydreamers (lenslab.dev) handles personal data for photographers and the people who appear in their work. It is written for use in the EEA, UK, Switzerland, and elsewhere. It is not legal advice. Contact hello@lenslab.dev.
1. What we collect
- Account: name, email, password hash, workspace preferences.
- Photographs you import, picks you make, and galleries you choose to publish.
- Billing details processed by our payment provider when you buy a plan.
- Device and log data needed to run and secure the site (IP, browser, errors).
- Optional analytics only after you Accept cookies. Reject records nothing.
If you continue with Google, Google shares your name, email address and profile picture with us. We use them only to create your account, sign you in and show who is signed in, and we never receive your Google password. Daydreamers’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your account is the one LensLab account that also signs you in to Heavenly; the LensLab Privacy Policy covers it.
2. Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and run your account | Contract, Art. 6(1)(b) |
| Pick, develop, and send work you ask for | Contract, Art. 6(1)(b) |
| Charge photo-credit plans | Contract, Art. 6(1)(b) |
| Keep the service safe | Legitimate interests, Art. 6(1)(f) |
| Optional visit analytics | Consent, Art. 6(1)(a) |
3. Photographs and learning
Original files remain read-only in your workspace. Daydreamers can learn from photos you import and edits you keep so the tool is more useful for you. That learning stays in your workspace. We do not use originals to train a shared model for other photographers. Turn this off in Settings → Privacy.
Client galleries you publish are copies you chose to send. People in those photos may have their own rights; you are responsible for how you share them.
4. Europe, UK, and Switzerland
If you are in the EEA, UK, or Switzerland you can ask to access, correct, delete, export, or restrict your data, object to legitimate-interest processing, and withdraw consent. Email hello@lenslab.dev with the subject “Privacy rights”. We respond within one month, longer only when the request is complex and the law allows.
You may also complain to your local data protection authority. We do not sell personal data.
Daydreamers is operated from outside the EEA. When we transfer personal data from the EEA, UK, or Switzerland we use appropriate safeguards such as Standard Contractual Clauses. The Data Processing Addendum is the processor terms. Ask hello@lenslab.dev for a copy.
5. Cookies
6. Retention
Account and workspace data last for the life of the account. After you delete the account we remove personal data within 30 days except records the law requires us to keep (for example billing). Local originals on your machine are yours to keep or erase.
7. Children
Daydreamers is not for anyone under 18. We delete an under-18 account if we learn of one.
8. Changes
Material changes will be posted on this page before they take effect.
9. Contact
Daydreamers · lenslab.dev · hello@lenslab.dev