Privacy Policy

Last updated: April 22, 2026

Children's Privacy (COPPA)

FableJar is designed for parents to create personalized bedtime stories for their children. We fully comply with the Children's Online Privacy Protection Act (COPPA), including the COPPA 2025 amendments that took effect April 22, 2026.

  • Children are profiles under parent accounts — they never have their own login credentials.
  • We require verifiable parental consent before collecting any child-related information.
  • Child names are used solely for story personalization and are never shared with third parties for non-essential purposes.
  • Parents can review, modify, or delete all child data at any time from their dashboard.
  • Guest stories (created before signup) are automatically deleted after 7 days if unclaimed.
  • We practice data minimization — collecting only the information needed for each feature phase.

Data Collection

We collect the following information:

  • Parent account: Email address, authentication tokens
  • Child profiles: First name, age range, interests, story preferences
  • Content preferences: Reading format preferences (e.g., text size, layout options) for accessibility purposes
  • Stories: Generated story content, illustrations, reading history
  • Voice data: Optional voice cloning samples from parents only — never from children
  • Usage data: Analytics for improving the service (restricted to pre-authentication pages only, never on child data routes)

Data Minimization: We only collect information needed for the current features you're using. For example, reading format preferences are only collected when you customize them.

Third-Party Services & Data Sharing

We use the following services to provide FableJar. No child data is sold, rented, or shared for marketing or advertising purposes:

  • Google Gemini: AI story generation — child names are replaced with placeholders before sending, actual names are substituted back after generation. Reading preferences (text size, language style, story structure) are sent as story customization instructions to generate age-appropriate content.
  • Nano Banana: AI illustration generation — uses character reference images for consistency, no child PII in prompts
  • ElevenLabs & Google Cloud TTS: Voice narration — only parent voice samples, never child voices
  • Supabase: Authentication and encrypted data storage with row-level security
  • Stripe: Payment processing
  • Cloudflare: CDN and DDoS protection — child profile data is not sent in CDN request payloads

Analytics Restriction: Per COPPA requirements, we do not use any analytics or tracking on authenticated pages or child data routes (/dashboard, /create). Analytics are limited to pre-login pages only.

Data Retention & Deletion

  • Unclaimed guest stories: 7 days, then permanently deleted
  • Child profile data: retained while account is active, permanently deleted within 30 days of parent request
  • Account data: retained while subscription is active
  • AI generation traces: anonymized, 90-day retention for safety monitoring
  • Voice cloning data: stored securely, deletable upon request

Your Rights: You can request immediate deletion of all child data directly from your dashboard. No need to contact support.

Contact

For privacy questions or data deletion requests, contact us at support@fablejar.com