Dream by WOMBO

GDPR overview

Neither "GDPR" nor "General Data Protection Regulation" appears anywhere in the pages collected for this review, so the compliance flag records a silence rather than a refusal. The privacy policy on w.ai, last updated on 07.03.2025, does grant rights that resemble the European ones, namely access, rectification, erasure, restriction and objection, withdrawal of consent, portability and complaint to a supervisory authority, but qualifies them with "Depending on your jurisdiction" and routes requests to support@w.ai. For cross-border transfers it relies on "Standard Contractual Clauses, adequacy decisions, or your explicit consent". No Article 27 EU representative is named, no DPA is published and no subprocessor is listed. Above all, the document governs the W.AI Compute Network, so even these commitments are not stated for Dream.

Who owns the data?

The terms linked from dream.ai state that you retain all rights to your "User Content", and that WOMBO receives a worldwide, royalty-free licence to host, store, transmit and process that content solely to provide and improve the Services. You are also asked to warrant that you hold the rights to whatever you submit. One reservation is essential: those terms, dated 3 July 2025, are published on w.ai and describe the W.AI Compute Network, the publisher's decentralised computing service, not the Dream image generator. The ownership clause is therefore the publisher's declared position on a different product, and its application to prompts, uploads and generated media is nowhere documented.

Reuse rights

The privacy policy, last updated on 07.03.2025, lists eight purposes: providing the service, compensation and billing, security, improvement, communication, marketing subject to consent, legal compliance and corporate operations. On model training it states that WOMBO only trains or fine-tunes on anonymized or aggregated data "unless you opt-in", that it does not sell personal information for money, and that it does not allow third-party model providers to train on raw content without explicit permission. Data collected automatically includes usage data, cookies and node telemetry such as IP address, bandwidth, uptime and hardware profile. Because you keep your rights to submitted content, nothing in these documents restricts your reuse of it, but they never address the reuse of images or videos produced by Dream. That silence has the same cause as the node telemetry, which has no equivalent in an image app: the policy was written for the W.AI Compute Network, not for this generator.

Data retention & training

Hosting summary

The privacy policy published on w.ai gives only a broad geographic statement: WOMBO and its providers operate in the United States, Canada, the European Economic Area, the United Kingdom, Singapore and other jurisdictions. No primary hosting country is designated, no guaranteed storage region is offered and no hosting provider is named, only categories of providers. Cross-border transfers are said to rely on Standard Contractual Clauses, adequacy decisions or explicit consent. Technically, dream.ai resolves to 216.150.1.129, an anycast address announced by AS16509 (Amazon.com Inc.) and geolocated in the United States, which points to AWS infrastructure but says nothing about where user content is stored. No trust or security page exists and no certification such as SOC 2 or ISO is mentioned in the sources reviewed. As with the rest of the legal documentation, this hosting statement was written for the W.AI Compute Network rather than for Dream.