Privacy Policy

Last updated: June 2, 2026

Who We Are

FableJar is operated by Flipbytes, LLC, a company registered in the State of Delaware, United States.

Registered address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Contact: support@fablejar.com

FableJar is a personalized bedtime storytelling service designed for parents and guardians to create stories for their children aged 3–10. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over your data.

This policy applies to all users of fablejar.com, the FableJar web application, and any associated services. By using FableJar, you agree to the practices described in this policy.

Children's Privacy and COPPA Compliance

FableJar is designed for parents to create personalized bedtime stories for their children. We fully comply with the Children's Online Privacy Protection Act (COPPA), including the amended COPPA Rule that took effect April 22, 2026.

FableJar is a parent-first platform. Children never have independent accounts:

• All accounts are created and held by a parent or legal guardian who must be at least 18 years old.
• Children exist as profiles under the parent's account. They have no login credentials, no email address, and cannot access the service independently.
• The parent is the data controller for all child profile information at all times.
• We obtain verifiable parental consent before collecting any information from or about a child. Consent is recorded with a timestamp at the point of child profile creation.
• Consent can be withdrawn at any time by deleting the child profile from the dashboard.

For full details on our COPPA compliance practices, including verifiable parental consent methods, data minimization, third-party disclosures, and parental rights, please see our dedicated COPPA Compliance page.

Eligibility

FableJar accounts may only be created by parents or legal guardians who are at least 18 years old. We verify this through an age gate during account creation where the parent must provide their birth year. Children do not create accounts, do not have login credentials, and do not interact with the service independently. All actions within FableJar — including creating child profiles, generating stories, managing friends, and configuring voice cloning — are performed by the parent.

Data We Collect

Parent Account Data

When you create a FableJar account, we collect:

• Email address — used for authentication (magic link or Google sign-in), account communications, and transactional notifications.
• Authentication tokens — session data required to keep you logged in.
• Payment information — processed and stored by Stripe, our payment provider. FableJar never stores your credit card number, CVV, or full payment details. We receive only a Stripe customer ID and subscription status.
• Referral code — a unique referral identifier auto-generated for your account.
• Custom referral message — if you edit the default share message on the Refer & Earn page.

Child Profile Data

When you create a child profile, we collect the minimum information necessary to generate personalized stories:

• First name — used to address the child as the hero of their stories. We never collect a child's last name.
• Gender — girl, boy, or non-binary. Used for pronouns in stories and to depict the child consistently in illustrations.
• Age range — a categorical range (3–4, 5–7, or 8–10), not a precise date of birth. Used to adjust story vocabulary, sentence complexity, and length. We deliberately do not collect exact birth dates.
• Interests — optional. Topics the child enjoys (e.g., basketball, dinosaurs, art), used to weave familiar elements into stories.
• Personality traits — optional. Up to three traits (e.g., kind, curious, shy), used to shape how the child's character behaves in stories.
• Current challenges — optional. Challenges the child is facing (e.g., making friends, fear of the dark), used to generate stories that address those specific situations.
• Favourites — optional. Favourite colours, animals, and activities, used to personalize story details.
• Physical appearance description — optional. A text description of the child's appearance, used to generate a consistent avatar for illustrations.
• Story preferences — story language (default English), preferred story length (short, medium, or long).
• Story world preferences — optional. Preferred fantasy settings (e.g., magical forest, space adventure) for non-real-world stories.

We do not collect a child's email address, phone number, physical address, last name, precise date of birth, Social Security number, or precise geolocation.

Child Photo (Avatar Generation)

If a parent chooses to upload a child's photograph for avatar generation:

• The photo is uploaded to our secure storage temporarily.
• The photo is compressed (maximum 512px, JPEG quality 80) and sent to Google's Gemini image model as inline data to generate a stylized illustrated avatar.
• The original photo is deleted automatically immediately after avatar generation completes — whether the generation succeeds or fails. Deletion is enforced programmatically in a guaranteed cleanup step.
• We never retain the original photograph. Only the generated stylized avatar illustration is stored.
• A separate consent notice is displayed at the point of upload explaining this process.

The generated avatar is an artistic illustration, not a photographic reproduction or facial template. It is used in story illustrations so the child sees a character that resembles them.

Child Reaction Videos

FableJar offers an optional feature where parents can record their child's reaction while listening to a story:

• This feature requires separate, explicit parental consent before it can be used. The consent is recorded with a timestamp. The upload endpoint will not accept any recording without stored consent.
• Reaction videos are stored in a private, access-controlled storage bucket. They are never publicly accessible and are served only via short-lived signed URLs to the parent who recorded them.
• Reaction videos are never shared with third parties, never used for AI training, and never used for any purpose other than allowing the parent to view the recording.
• Parents can delete reaction videos at any time from their dashboard. Videos are also permanently deleted when the child profile or parent account is deleted.
• Reaction videos may contain biometric data (a child's facial expressions and voice). We treat this data with the highest level of protection and it never leaves our secure storage infrastructure.

Story Content

When a story is generated, the following is created and stored:

• Story text — the personalized narrative containing the child's name, their challenge scenario, and any included friends' names.
• AI-generated illustrations — images depicting scenes from the story, including a character based on the child's avatar.
• AI-generated audio — if voice narration is selected, an audio file of the story narrated by an AI voice or a cloned family member's voice.
• Story metadata — the challenge selected, setting chosen, friends included, and generation timestamp.

Story content is stored as long as the parent account is active and can be accessed through the Memory Jar at any time.

Voice Cloning Data

FableJar allows parents and family members (grandparents, aunts, uncles, etc.) to record their voice so stories can be narrated in a familiar voice:

• We only collect voice recordings from adults — never from children. The voice cloning feature requires an authenticated parent or an invited adult family member. There is no mechanism to record a child's voice.
• Voice recordings are approximately 30–60 seconds of the adult reading a passage aloud.
• Recordings are sent to ElevenLabs to generate a voice clone model. The generated voice model is used to narrate subsequent stories.
• Voice cloning requires separate, explicit parental consent, which is recorded with a timestamp.
• Voice recordings can be deleted at any time by the parent. Previously narrated stories will continue to play (the audio was already generated), but no new narrations can be created with a deleted voice profile.

Real Friends Data

When a parent connects their child with another child's profile on FableJar:

• The connection requires two-sided parental consent: the sending parent must verify via email confirmation, and the receiving parent must accept via a separate email.
• Once connected, the following data is shared between the two families for story generation purposes only: the child's first name, gender, age range, avatar, interests, and personality traits.
• No parent account information (email, payment details) is shared between families.
• When a story is generated that includes a connected friend, the friend's parent is automatically notified via email with a link to the story. This email contains the children's first names.
• Either parent can remove the connection at any time. Removal immediately stops data sharing between the families. Previously generated stories containing both children remain in each family's Memory Jar.
• Friends' first names are sent to our AI story generation service (Google Gemini) un-tokenized to generate natural dialogue and narrative. The protagonist child's name is tokenized; friends' names are not.

Referral Data

When you use the Refer & Earn feature:

• Your unique referral link and referral code are stored in your account.
• When someone clicks your referral link, a referral attribution cookie (30-day expiry) is stored in their browser.
• When a referral is completed, we record: the referrer's user ID, the referred user's ID, and the completion timestamp.
• Referral data is used solely to award bonus stories and is never shared with third parties.

Cookies and Local Storage

FableJar uses only essential and functional cookies. We do not use advertising cookies, tracking pixels, or third-party analytics cookies on any authenticated page.

We do not use Google Analytics, Facebook Pixel, Hotjar, Mixpanel, PostHog, Sentry, or any other third-party analytics or tracking service on authenticated pages where child data is present.

Google Tag Manager is configured to load only on public, pre-authentication marketing pages (e.g., the homepage, pricing page, features page). It is programmatically blocked from loading on any authenticated route (/dashboard/*, /create/*) through both server-side and client-side enforcement. As of the date of this policy, GTM tracking IDs are not actively configured.

If we ever enable analytics on public marketing pages in the future, we will implement a cookie consent mechanism for users in jurisdictions that require it (e.g., the EU under GDPR/ePrivacy).

How We Use Your Data

Parent data is used to:

• Authenticate your account and maintain your session.
• Process payments and manage your subscription.
• Send transactional emails (login links, friend request notifications, story sharing, voice clone invitations, billing notifications).
• Attribute and reward referrals.
• Communicate service updates and policy changes.

Child data is used to:

• Generate personalized stories where the child is the hero.
• Generate AI illustrations that depict the child's avatar consistently.
• Generate age-appropriate vocabulary, sentence structure, and story length based on the child's age range.
• Weave the child's interests, personality traits, and favourites into story content naturally.
• Address the specific challenge the parent selected through the story's narrative.
• Include the child's real friends as characters in stories when the parent chooses to do so.

Child data is NEVER used to:

• Train any AI or machine learning model.
• Build advertising profiles or serve advertisements.
• Target marketing to children.
• Sell, rent, or share with any third party for their marketing purposes.
• Create a public profile or directory of children.

Third-Party Services

The following services process data as part of providing FableJar. We maintain data processing agreements with each provider and have verified their data handling practices.

Google Gemini (Story Generation and Avatar Generation)

• What it receives: Story generation prompts containing the child's appearance description, interests, personality traits, challenges, story preferences, and friends' first names. The protagonist child's first name is replaced with a placeholder token (CHILD_NAME) before being sent — the AI model never sees the hero's real name. Friends' names are sent un-tokenized for natural story dialogue.
• For avatar generation: A compressed version of the child's photograph (if uploaded) is sent to generate a stylized avatar. The photo is deleted from our servers immediately after generation.
• AI training: We are on Google's paid API tier. Under Google's paid-tier terms, prompt data is not used to train or improve Google's models. Child data sent to Gemini is processed only for the purpose of generating the requested story or illustration and is not retained by Google for training purposes.

ElevenLabs (Voice Cloning and Narration)

• What it receives: Adult family members' voice recordings (30–60 seconds) for voice clone generation. Story narration text containing the child's first name (because the story is read aloud with the child as the hero).
• What it does NOT receive: Child voice recordings. We never collect or send children's audio to ElevenLabs.
• AI training: Voice recordings and narration text are processed solely for generating the voice clone and narrating stories. We are pursuing a formal Data Processing Agreement with ElevenLabs confirming no-training terms.

Google Cloud Text-to-Speech (Voice Narration)

• What it receives: Story narration text containing the child's first name.
• What it does NOT receive: Child voice recordings or biometric data.
• AI training: Text is processed solely for generating audio narration and is not used for model training under Google's paid-tier terms.

Resend (Transactional Email)

• What it receives: Parent email addresses, and in some transactional emails, children's first names. Specifically: story-sharing emails include the child's name in the subject and body (“Samaira just created a story featuring Svara!”), friend request emails include the child's name, and voice clone invitation emails include the family relationship label.
• Purpose: Sending login links, friend request notifications, story sharing notifications, voice clone invitations, referral notifications, and billing communications.
• Data retention: Resend processes emails for delivery and retains delivery logs per their standard terms. Email content is not used for marketing or training purposes.

Supabase (Authentication and Data Storage)

• What it stores: All parent account data, child profile data, story content, illustrations, voice recordings, reaction videos, and referral data.
• Security: All data is encrypted at rest and in transit. Child data tables have row-level security (RLS) enabled with family-scoped policies — a parent can only access their own family's data. Private storage buckets (reaction videos, voice samples) are service-role-only and served via short-lived signed URLs.
• Location: Data is stored on Supabase infrastructure. Specific hosting region details are available upon request.

Stripe (Payment Processing)

• What it receives: Parent billing information (email, payment method). Stripe does not receive any child data — no child names, profiles, or story content.
• Purpose: Processing subscription payments, managing billing cycles, and handling refunds.
• Compliance: Stripe is PCI DSS Level 1 compliant. FableJar never stores credit card numbers, CVVs, or full payment details.

Cloudflare (CDN and Security)

• What it receives: Standard network traffic required to deliver the service (IP addresses, request headers). We do not send child profile data in CDN request payloads.
• Purpose: Content delivery, DDoS protection, and SSL/TLS encryption.

Langfuse (AI Observability — Self-Hosted)

• What it receives: AI generation traces for monitoring story quality and safety. These traces contain story prompts which include the child's appearance description, interests, challenges, and friends' first names. The protagonist child's name is tokenized in these traces. Each trace includes a child profile UUID as a session identifier.
• Hosting: Langfuse is self-hosted on our own infrastructure — traces do not leave our servers or go to a third-party cloud service.
• Retention: Traces are retained for 90 days for safety monitoring and quality assurance, then purged.
• Purpose: Monitoring AI-generated content for safety, quality, and age-appropriateness. Not used for marketing, advertising, or profiling.

Services We Do NOT Use

FableJar does not use: Sentry, PostHog, Hotjar, Mixpanel, Amplitude, Facebook Pixel, Google Ads, or any other third-party analytics, error tracking, or advertising service on authenticated pages.

Data Retention

We retain data only as long as necessary for the purposes described in this policy. Specific retention periods:

We do not retain child data indefinitely. All child data is tied to the parent account lifecycle and is permanently deleted when the parent requests deletion of the child profile or their account.

Account Deletion

When you delete your account or a child profile:

• Deletion is immediate and permanent for live data. All child profiles, stories, illustrations, voice recordings, reaction videos, avatars, and preferences are permanently removed from our live database and storage.
• Storage buckets are wiped. All associated files (portraits, illustrations, audio, voice samples, reaction videos) are recursively deleted from storage.
• Third-party data: We cancel any active Stripe subscriptions. We do not retain or have the ability to delete data that has already been processed by third-party AI services (Google Gemini, ElevenLabs) for the purpose of generating a story or voice clone — however, these services process data transiently and do not retain it under our paid-tier agreements.
• Backups: Deleted data is fully purged from database backups within 30 days due to rolling backup retention schedules.
• Shared stories: If a story was shared with another family (e.g., via a friend connection or a shared link), the shared copy that the other family accessed may remain in their view. Deleting your account removes your data from our systems but does not retroactively remove stories that were already delivered to other families' email inboxes.

You can delete a child profile or your entire account directly from your dashboard at any time. No need to contact support.

Data Security

We maintain a written information security program specifically addressing children's personal information, as required by the amended COPPA Rule. Our security measures include:

• Encryption at rest and in transit. All data is encrypted in storage (AES-256) and all connections use TLS 1.2 or higher.
• Row-Level Security (RLS). Every database table containing child data has RLS enabled with family-scoped policies. A parent can only access their own family's data. This is enforced at the database level as defense-in-depth, in addition to application-layer authentication and authorization checks.
• Application-layer authentication. All API endpoints that access child data require a valid authenticated session and verify family membership before returning any data.
• Private storage. Sensitive files (reaction videos, voice samples) are stored in private buckets accessible only via short-lived, signed URLs generated on demand for authorized parents.
• No child-facing authentication. Children have no login credentials, no passwords, no auth tokens. All access is through the parent's authenticated session.
• Consent enforcement. Features involving sensitive data (voice cloning, reaction videos) hard-block at the code level if the required consent timestamp is not recorded.
• Regular review. We review our security practices and access controls regularly and update them as needed.

International Data Transfers

FableJar is operated by Flipbytes, LLC in the United States. If you are located outside the United States — including in the European Union, United Kingdom, Australia, India, or Singapore — your data may be transferred to and processed in the United States or other countries where our service providers operate.

We ensure that such transfers are conducted in compliance with applicable data protection laws. Where required (e.g., for transfers from the EU/UK), we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to safeguard your data.

By using FableJar, you acknowledge that your data will be processed in the United States and potentially in other jurisdictions where our service providers operate.

Legal Basis for Processing (EU/UK Users)

If you are located in the European Union or United Kingdom, we process your data under the following legal bases as required by the General Data Protection Regulation (GDPR) and UK GDPR:

You have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for child data processing, delete the child profile from your dashboard. To withdraw consent for voice cloning, delete the voice profile from Voice Studio.

Your Rights

Depending on your location, you may have the following rights regarding your personal data and your child's personal data:

• Right of access — You can view all personal information collected about you and your child at any time from your dashboard. You may also request a complete copy of your data by contacting support@fablejar.com.
• Right to rectification — You can correct or update your child's profile information (name, age range, interests, personality traits, challenges, favourites) at any time from your dashboard.
• Right to deletion — You can permanently delete your child's profile, voice recordings, reaction videos, or your entire account at any time from your dashboard. Deletion is immediate for live data. See the Account Deletion section for full details.
• Right to data portability — You may request a copy of your data in a machine-readable format (JSON) by contacting support@fablejar.com. We will fulfill such requests within 30 days.
• Right to restrict processing — You may request that we limit certain processing of your or your child's data. Contact support@fablejar.com.
• Right to object — You may object to processing based on legitimate interest. Contact support@fablejar.com.
• Right to withdraw consent — You can withdraw consent for child data processing by deleting the child profile. You can withdraw consent for voice cloning by deleting the voice profile. You can withdraw consent for reaction videos by deleting the recordings from your dashboard.
• Right to lodge a complaint — If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.

For EU users, the relevant supervisory authority can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

For all data rights requests, contact us at support@fablejar.com. We will respond within 30 days.

Data Breach Notification

In the event of a data breach that affects personal information — particularly children's data — we will:

• Investigate the breach immediately and take steps to contain and mitigate the impact.
• Notify affected users by email within 72 hours of becoming aware of the breach, describing the nature of the breach, the data affected, and the steps we are taking.
• Notify relevant data protection authorities as required by applicable law (e.g., within 72 hours under GDPR).
• Document the breach and our response for regulatory compliance purposes.

Third-Party Links

FableJar may contain links to third-party websites or services (e.g., Stripe for payment management, external blog articles). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the “Last updated” date at the top of this page.
• We will notify registered users by email at least 14 days before material changes take effect.
• We will post a notice on our website highlighting the changes.

Your continued use of FableJar after changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account at any time.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or would like to report a privacy concern, please contact us:

Email: support@fablejar.com

Mail: Flipbytes, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

We aim to respond to all privacy inquiries within 30 days.