Lorly

Lorly Privacy Policy

Effective Date: October 1, 2026

This Privacy Policy covers the services operated under the Lorly brand by DREAMTOPIA (SG) PTE. LTD. and its affiliates (collectively, “Lorly,” “we,” “us,” or “our”), including all services and websites on which this Privacy Policy is posted (collectively, the “Services”).

This Privacy Policy explains what Personal Information (defined below) we collect, how we use and share that information, and the choices you have regarding our data practices. This Privacy Policy is incorporated into and forms part of our Terms of Service.

Before using the Services or submitting any Personal Information to Lorly, please read this Privacy Policy carefully. By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, you must not access any of our websites or otherwise use the Services.

Applicable Law

We are committed to protecting your Personal Information, and the rights set out in this Policy reflect the rights you have under applicable law.

For the Services and paid orders covered by this version, DREAMTOPIA (SG) PTE. LTD., a company incorporated under the laws of Singapore, is the service operator and data controller responsible for this Policy. References to applicable law in this Policy include applicable Singapore privacy and data protection laws, including the Personal Data Protection Act 2012 (“PDPA”), and any other privacy or data protection laws applicable to our processing of Personal Information.

As an international business, we recognize that some users may reside in jurisdictions outside Singapore. In certain circumstances, the local laws of those jurisdictions may give users rights in relation to the personal data they provide to us. We believe that the rights set out in this Policy provide comprehensive protection for your Personal Information. If you have any questions, please contact us by email at [email protected].

1. Personal Information We Collect

We collect information that, alone or in combination with other information we hold, can be used to identify you (“Personal Information”) in the following ways:

Personal Information You Provide. If you create an account or communicate with us, we may collect Personal Information as described below.

Account Information. We support registration and login using an email verification code or an email address and password, and we process the email address and related authentication information used for account registration, login, and verification. We also collect the nickname you set and the avatar you upload.

Chat Information. We collect and store the chat content you send and AI responses to generate replies, maintain conversational context, enable you to view your chat history, and continue conversations.

Communication Information. If you communicate with us in other ways, we may collect your name, contact information, and the contents of any messages you send (“Communication Information”).

Personal Information We Collect Through Our Social Media Pages. We maintain pages on social media platforms, including but not limited to Instagram, Facebook, Medium, Twitter, and YouTube (“Social Media Pages”). When you interact with our Social Media Pages, we collect the Personal Information you choose to provide to us, such as your contact details (“Social Information”). In addition, the companies that host our Social Media Pages may provide us with aggregate analytics about the use of those pages, which may include information about your interactions with our social media content.

Personal Information We Automatically Collect Through Your Use of the Services. When you visit, use, or interact with the Services, we may collect certain information about your visit, use, or interaction (“Technical Information”). For example, we may monitor the number of users visiting the Services, peak visiting times, pages visited, the domains from which visitors arrive, and the browsers people use to access the Services. Specifically, Technical Information includes the following information created and automatically recorded by our systems:

Log Data: Information that your browser automatically sends whenever you visit a website (“Log Data”). Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interact with the website.

Cookies: Please see the “Cookies” section below to learn how we use cookies.

Device Information: This includes the name of your device, operating system, and browser. The information collected may depend on the type of device you use and its settings.

Usage Information: We collect information about how you use the Services, such as the types of content you view or interact with, the features you use, the actions you take, and the timing, frequency, and duration of your activities.

Cookies: We use cookies to operate and administer the website, collect website usage data, and improve your experience on the website. A “cookie” is a piece of information sent to your browser by a website you visit. Cookies can remain on your computer for different lengths of time. Some cookies expire after a certain period or when you log out (session cookies); others remain after your browser is closed until the expiration date set in the cookie (as determined by the third party that places it), helping to recognize your computer when you reopen your browser and browse the internet again (persistent cookies). For more information about cookies, please visit All About Cookies.

Analytics: We may use various online analytics tools that use cookies to help us analyze how users use the website and improve your experience on the website.

Your Choices: Most web browsers have a “Help” section in their toolbar. Please refer to that section for information on how to receive a notification when a new cookie is received and how to disable cookies.

Please note that if you limit the website’s ability to set cookies, you may be unable to access certain parts of the Services or use all of their features.

Advertising networks may use cookies to collect Personal Information. Most advertising networks offer a way to opt out of targeted advertising.

When you enter content into the Services, we may monitor what you write to check for inappropriate content or sensitive Personal Information.

2. How We Use Personal Information

We may use Personal Information for the following purposes:

To provide and administer access to the Services;

To maintain, improve, and optimize all aspects of the Services; the relevant information may be kept internally or shared with third parties when necessary;

To inform you about features or other aspects of the Services that we believe may interest you;

To respond to your inquiries, comments, feedback, or questions;

To send you administrative information, such as information about the Services or changes to our terms, conditions, and policies;

To analyze how you interact with the Services;

To develop new features and services;

To prevent fraud, criminal activity, or misuse of the Services and ensure the security of our IT systems, architecture, and networks; and

To comply with legal obligations and legal processes, and to protect the rights, privacy, safety, or property of us and/or our affiliates, you, or other third parties.

Aggregate Information: We may aggregate Personal Information and use the aggregate information to analyze the effectiveness of the Services, improve the Services and add features, conduct research (which may be kept internally or shared with third parties when necessary), and for other similar purposes. We may collect aggregate information through the Services, cookies, and other means described in this Privacy Policy.

Model Training. Lorly will not use users’ chat histories to train or fine-tune AI models. References in this Policy to maintaining, improving, or optimizing the Services do not change this restriction.

We may convert the conversation text data we collect into anonymous data points and visualizations and use them for nonprofit academic collaborations with accredited* academic institutions, academic conferences, journal publications, and other academic activities.

*1: Accredited academic institutions are officially recognized universities and research institutions. Researchers working at these institutions have professional academic training and expertise in data security and privacy protection.

3. Sharing and Disclosure of Personal Information

In certain circumstances, unless otherwise required by law, we may share your Personal Information with third parties as described below without further notice to you:

Vendors and Service Providers: To help us meet our business operational needs and perform certain services and functions, we may share Personal Information with vendors and service providers, including hosting, cloud, and other information technology service providers; email communication software and email newsletter services; advertising and marketing services; and website analytics providers. These parties will access, process, or store Personal Information in the course of performing their duties for us in accordance with our instructions.

Business Transfers: If we are involved in a strategic transaction, reorganization, bankruptcy, receivership, or transfer of the Services to another provider (collectively, a “Transaction”), your Personal Information and other information may be shared during the due diligence process with counterparties and others assisting with the Transaction, and transferred to a successor or affiliate together with other assets as part of that Transaction.

Legal Requirements: When required by law or when we believe in good faith that such action is necessary to: (i) comply with a legal obligation, including national security or law enforcement requirements; (ii) protect and defend our rights or property; (iii) prevent fraud; (iv) protect the personal safety of individuals or the public in an emergency; or (v) avoid legal liability.

Affiliates: We may share Personal Information with our affiliates, meaning entities that control, are controlled by, or are under common control with DREAMTOPIA (SG) PTE. LTD. Our affiliates will use the Personal Information we share in a manner consistent with this Privacy Policy.

Other Users: Certain actions you take may be visible to other users of the Services or result in content that other users of the Services can access.

4. Updating Your Information

If you need to change or correct your Personal Information, please contact us at [email protected].

5. Age Requirement

Lorly only permits users aged 18 or older to register or use the Services. Our Services are not directed to individuals under 18, and we do not knowingly collect their Personal Information. If you have reason to believe that an individual under 18 has provided Personal Information to us through the Services, please email [email protected], and we will promptly take appropriate steps to investigate and address the matter.

6. Links to Third-Party Websites and Services

The Services may contain links to other websites that we do not operate or control, including social media services (“Third-Party Websites”). Information you share with Third-Party Websites will be governed by their specific privacy policies and terms of service, rather than this Privacy Policy. The inclusion of these links in our Services does not mean that we endorse or have reviewed those websites. Please contact the relevant Third-Party Websites directly for information about their privacy practices and policies.

7. Security

You use the Services at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect Personal Information, both online and offline, against loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no internet or email transmission is ever fully secure or error-free. In particular, email sent to or from us may not be secure. You should therefore exercise care when deciding what information to provide to us through the Services or by email. Please keep this in mind when disclosing any Personal Information to Lorly. In addition, we are not responsible for the circumvention of any privacy settings or security measures contained in the Services or Third-Party Websites.

8. International Users

Your Personal Information may be processed or stored by us or our service providers outside your country or region. We will take the necessary measures to protect Personal Information transferred across borders in accordance with applicable data protection laws.

9. Information Provided Voluntarily

In some cases, providing Personal Information is optional. However, if you choose not to provide Personal Information that is necessary to use certain features of the Services, you may be unable to use those features. You may contact us at [email protected] to request that we update or correct your Personal Information.

10. Privacy Rights

The following disclosures provide supplemental information about: (1) the categories of Personal Information we collect (as defined above); (2) the sources of Personal Information; (3) how we use each category of Personal Information; and (4) how we disclose Personal Information. These disclosures do not limit our ability to use or disclose information as described in Sections 2 and 3.

To the extent provided by law and subject to applicable exceptions, users have the following privacy rights regarding the Personal Information we collect:

The right to know what Personal Information we have collected and how we use and disclose that Personal Information;

The right to request deletion of your Personal Information; and

The right not to be discriminated against for exercising any privacy rights.

We do not and will not sell your Personal Information.

Exercising Your Rights: Users may exercise the privacy rights described above by emailing [email protected].

Applicable Law Reference: Users who wish to learn more about privacy requirements may refer to Singapore’s Personal Data Protection Act 2012 (PDPA) and other applicable privacy or data protection laws.

Identity Verification: To protect your Personal Information against unauthorized access or deletion, we may require you to verify your identity before submitting a request to know or a request to delete Personal Information. If you do not have an account with us, or if we suspect fraud or malicious activity, we may ask you to provide additional Personal Information for verification. If we cannot verify your identity, we will, as appropriate, decline to provide or delete your Personal Information.

Authorized Agents: You may submit a request to know or a request to delete through an authorized agent. In that case, the agent must present signed written authorization to act on your behalf, and you may also need to verify your identity independently.

Information Retention and Deletion. We retain Personal Information only for as long as necessary to fulfill the purposes described in this Policy. You may delete your account using the account deletion feature on the Settings page, or request deletion of Personal Information or your account by contacting [email protected]. After verifying your identity, we will handle the request in accordance with the law. Information that must be retained by law will be deleted or anonymized once the applicable retention requirement ends.

11. Changes to This Privacy Policy

Our Services and/or business activities may change from time to time. As a result, we may update this Privacy Policy at any time. When we do so, we will post the revised version on this page unless applicable law requires another form of notice. By continuing to use the Services or provide Personal Information to us after we post an updated Privacy Policy or otherwise notify you where applicable, you agree to the revised Privacy Policy and the practices described in it. Please review this Policy periodically for changes.

12. Contact Us

Service Operator: DREAMTOPIA (SG) PTE. LTD.

Registered Address: 10 ANSON ROAD, #11-07 INTERNATIONAL PLAZA, SINGAPORE 079903

If you have any questions about our Privacy Policy or information practices, please feel free to contact us at [email protected].

If you wish to delete your account, you may use the account deletion feature on the Settings page.