Privacy Policy

Last updated: August 22, 2026

Who We Are

FableJar is operated by Flipbytes, LLC, a company registered in the State of Delaware, United States.

Registered address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

Contact: support@fablejar.com

FableJar is a personalized bedtime storytelling service designed for parents and guardians to create stories for their children aged 3–10. This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have over your data.

This policy applies to all users of fablejar.com, the FableJar web application, and any associated services. By using FableJar, you agree to the practices described in this policy.

Children's Privacy and COPPA Compliance

FableJar is designed for parents to create personalized bedtime stories for their children. We fully comply with the Children's Online Privacy Protection Act (COPPA), including the amended COPPA Rule that took effect April 22, 2026.

FableJar is a parent-first platform. Children never have independent accounts:

• All accounts are created and held by a parent or legal guardian who must be at least 18 years old.
• Children exist as profiles under the parent's account. They have no login credentials, no email address, and cannot access the service independently.
• The parent is the data controller for all child profile information at all times.
• We obtain verifiable parental consent before collecting any information from or about a child. Consent is recorded with a timestamp at the point of child profile creation.
• Consent can be withdrawn at any time by deleting the child profile from the dashboard.

For full details on our COPPA compliance practices, including verifiable parental consent methods, data minimization, third-party disclosures, and parental rights, please see our dedicated COPPA Compliance page.

Eligibility

FableJar accounts may only be created by parents or legal guardians who are at least 18 years old. We verify this through an age gate during account creation where the parent must provide their birth year. Children do not create accounts, do not have login credentials, and do not interact with the service independently. All actions within FableJar — including creating child profiles, generating stories, managing friends, and configuring voice cloning — are performed by the parent.

Data We Collect

Parent Account Data

When you create a FableJar account, we collect:

• Email address — used for authentication (magic link or Google sign-in), account communications, and transactional notifications.
• Authentication tokens — session data required to keep you logged in.
• Payment information — processed and stored by Stripe, our payment provider. FableJar never stores your credit card number, CVV, or full payment details. We receive only a Stripe customer ID and subscription status.
• Referral code — a unique referral identifier auto-generated for your account.
• Custom referral message — if you edit the default share message on the Refer & Earn page.

Child Profile Data

When you create a child profile, we collect the minimum information necessary to generate personalized stories:

• First name — used to address the child as the hero of their stories. We never collect a child's last name.
• Gender — girl, boy, or non-binary. Used for pronouns in stories and to depict the child consistently in illustrations.
• Age range — a categorical range (3–4, 5–7, or 8–10), not a precise date of birth. Used to adjust story vocabulary, sentence complexity, and length. We deliberately do not collect exact birth dates.
• Interests — optional. Topics the child enjoys (e.g., basketball, dinosaurs, art), used to weave familiar elements into stories.
• Personality traits — optional. Up to three traits (e.g., kind, curious, shy), used to shape how the child's character behaves in stories.
• Current challenges — optional. Challenges the child is facing (e.g., making friends, fear of the dark), used to generate stories that address those specific situations.
• Favourites — optional. Favourite colours, animals, and activities, used to personalize story details.
• Physical appearance description — optional. A text description of the child's appearance, used to generate a consistent avatar for illustrations.
• Story preferences — story language (default English), preferred story length (short, medium, or long).
• Story world preferences — optional. Preferred fantasy settings (e.g., magical forest, space adventure) for non-real-world stories.

We do not collect a child's email address, phone number, physical address, last name, precise date of birth, Social Security number, or precise geolocation.

Child Photo (Avatar Generation)

If a parent chooses to upload a child's photograph for avatar generation:

• The photo is uploaded to our secure storage temporarily.
• The photo is compressed (maximum 512px, JPEG quality 80) and sent to Google's Gemini image model as inline data to generate a stylized illustrated avatar.
• The original photo is deleted automatically immediately after avatar generation completes — whether the generation succeeds or fails. Deletion is enforced programmatically in a guaranteed cleanup step.
• We never retain the original photograph. Only the generated stylized avatar illustration is stored.
• A separate consent notice is displayed at the point of upload explaining this process.

The generated avatar is an artistic illustration, not a photographic reproduction or facial template. It is used in story illustrations so the child sees a character that resembles them.

Child Reaction Videos

FableJar offers an optional feature where parents can record their child's reaction while listening to a story:

• This feature requires separate, explicit parental consent before it can be used. The consent is recorded with a timestamp. The upload endpoint will not accept any recording without stored consent.
• Reaction videos are stored in a private, access-controlled storage bucket. They are never publicly accessible and are served only via short-lived signed URLs to the parent who recorded them.
• Reaction videos are never shared with third parties, never used for AI training, and never used for any purpose other than allowing the parent to view the recording.
• Parents can delete reaction videos at any time from their dashboard. Videos are also permanently deleted when the child profile or parent account is deleted.
• Reaction videos may contain biometric data (a child's facial expressions and voice). We treat this data with the highest level of protection and it never leaves our secure storage infrastructure.

Story Content

When a story is generated, the following is created and stored:

• Story text — the personalized narrative containing the child's name, their challenge scenario, and any included friends' names.
• AI-generated illustrations — images depicting scenes from the story, including a character based on the child's avatar.
• AI-generated audio — if voice narration is selected, an audio file of the story narrated by an AI voice or a cloned family member's voice.
• Story metadata — the challenge selected, setting chosen, friends included, and generation timestamp.

Story content is stored as long as the parent account is active and can be accessed through the Memory Jar at any time.

Voice Cloning Data

FableJar allows parents and family members (grandparents, aunts, uncles, etc.) to record their voice so stories can be narrated in a familiar voice:

• We only collect voice recordings from adults — never from children. The voice cloning feature requires an authenticated parent or an invited adult family member. There is no mechanism to record a child's voice.
• Voice recordings are approximately 30–60 seconds of the adult reading a passage aloud.
• Recordings are sent to ElevenLabs to generate a voice clone model. The generated voice model is used to narrate subsequent stories.
• Voice cloning requires separate, explicit parental consent, which is recorded with a timestamp.
• Voice recordings can be deleted at any time by the parent. Previously narrated stories will continue to play (the audio was already generated), but no new narrations can be created with a deleted voice profile.

Real Friends Data

When a parent connects their child with another child's profile on FableJar:

• The connection requires two-sided parental consent: the sending parent must verify via email confirmation, and the receiving parent must accept via a separate email.
• Once connected, the following data is shared between the two families for story generation purposes only: the child's first name, gender, age range, avatar, interests, and personality traits.
• No parent account information (email, payment details) is shared between families.
• When a story is generated that includes a connected friend, the friend's parent is automatically notified via email with a link to the story. This email contains the children's first names.
• Either parent can remove the connection at any time. Removal immediately stops data sharing between the families. Previously generated stories containing both children remain in each family's Memory Jar.
• Friends' first names are sent to our AI story generation service (Google Gemini) to generate natural dialogue and narrative, as is the protagonist child's first name.

Referral Data

When you use the Refer & Earn feature:

• Your unique referral link and referral code are stored in your account.
• When someone clicks your referral link, a referral attribution cookie (30-day expiry) is stored in their browser.
• When a referral is completed, we record: the referrer's user ID, the referred user's ID, and the completion timestamp.
• Referral data is used solely to award bonus stories and is never shared with third parties.

Cookies and Local Storage

FableJar uses essential and functional cookies everywhere, and analytics/advertising cookies only on our public marketing pages — never on an authenticated page, and never where child data is present. The analytics cookies are described under Analytics and Advertising Tools below, along with how to switch them off.

We do not use Hotjar, Mixpanel, PostHog, Sentry, or any other third-party analytics or tracking service on authenticated pages where child data is present.

Analytics and Advertising Tools

On our public marketing pages only (e.g., the homepage, pricing page, features page) we use the following third-party tools to understand how visitors find and use FableJar:

All four are programmatically blocked from loading on any authenticated route (/dashboard/*, /create/*), through both server-side and client-side enforcement. That block is unconditional: accepting analytics does not enable them on those routes.

Your choice. If you are visiting from the European Economic Area, the United Kingdom, or Switzerland, none of these tools load at all until you accept them on the banner we show you. If we cannot determine where you are visiting from, we treat you as though you were in that group. Everywhere else, they load by default and the same banner lets you turn them off.

You can change your choice at any time using the Cookie Settings link in the footer of any page. We store your choice in the fj_analytics_consent cookie described above; clearing your cookies resets it.

Declining stops these tools from being loaded in your browser going forward. It does not by itself delete data a tool collected before you declined — to request deletion of that data, contact us at support@fablejar.com.

How We Use Your Data

Parent data is used to:

• Authenticate your account and maintain your session.
• Process payments and manage your subscription.
• Send transactional emails (login links, friend request notifications, story sharing, voice clone invitations, billing notifications).
• Attribute and reward referrals.
• Communicate service updates and policy changes.

Child data is used to:

• Generate personalized stories where the child is the hero.
• Generate AI illustrations that depict the child's avatar consistently.
• Generate age-appropriate vocabulary, sentence structure, and story length based on the child's age range.
• Weave the child's interests, personality traits, and favourites into story content naturally.
• Address the specific challenge the parent selected through the story's narrative.
• Include the child's real friends as characters in stories when the parent chooses to do so.

Child data is NEVER used to:

• Train any AI or machine learning model.
• Build advertising profiles or serve advertisements.
• Target marketing to children.
• Sell, rent, or share with any third party for their marketing purposes.
• Create a public profile or directory of children.

Third-Party Services

The following services process data as part of providing FableJar. Below we set out what each one receives and why.

What we mean by “third party.” Any company other than Flipbytes, LLC, which operates FableJar. Google is a third party, and so is every other service named in this section. Some AI requests that contain your child's first name are sent straight to Google's own API, so that only one outside company handles them; others go through a middleman service that resells access to several AI companies, and are handled by that service as well as by the model vendor. Which is which is set out below. Either way Google is a third party, not us. We use that definition consistently here and on our COPPA Compliance page.

Google Gemini (Story Generation and Avatar Generation)

• What it receives: Story generation prompts containing the child's first name, appearance description, interests, personality traits, challenges, story preferences, and friends' first names.
• Which calls carry the name: The child's first name is used on every step of story creation — writing the story, re-writing it when our safety or quality checks reject the first attempt, updating the child's Story Bible, scoring the finished story, and generating the illustrations. It is not withheld from any of them.
• Why we send it: A story in which the child is the hero has to be written with the child's name in it, and the same is true of the Story Bible that keeps their recurring characters consistent from one story to the next.
• Which of those steps go only to Google: Updating the Story Bible, scoring the finished story, and generating the illustrations are fixed in our code to Google's own API and cannot be repointed at another AI company. Writing the story and re-writing it are not fixed, and they do not go only to Google: they are currently routed through OpenRouter, a service that resells access to AI models from several companies, which passes the prompt on to the model we have selected — a Google Gemini model at present. So OpenRouter receives the story prompt, including your child's first name, every time a story is written. The same setting can select a model from a different vendor, such as Anthropic, in which case that vendor receives the prompt too. Both are disclosed below.
• For avatar generation: A compressed version of the child's photograph (if uploaded) is sent to generate a stylized avatar. The photo is deleted from our servers immediately after generation.
• AI training: We are on Google's paid API tier. Under Google's paid-tier terms, prompt data we send directly to Google's API is not used to train or improve Google's models, and is not retained by Google for training purposes. Those terms are an agreement between us and Google, so they cover the calls we make to Google directly — Story Bible updates, story scoring, and illustration and avatar generation. Story writing and re-writing reach a Google model through OpenRouter instead of directly, and are covered by the OpenRouter entry below.

OpenRouter, and the Model Vendors It Reaches (Story Generation)

• What it is: OpenRouter resells access to AI models from several companies through a single API. The story-writing and re-writing steps are routed through it, and it passes the prompt on to the model we have selected — a Google Gemini model at present. The same setting can select a model from a different vendor, such as Anthropic's Claude.
• What it receives: The same story generation prompt described under Google Gemini above — including your child's first name, appearance description, interests, personality traits, challenges, story preferences, and friends' first names. OpenRouter receives it, and so does the vendor of whichever model is selected.
• Purpose: Writing and re-writing the story. Routing those steps through OpenRouter is how we can change which model writes your child's stories without shipping new code.
• What is never routed this way: Story Bible updates, story scoring and illustration are fixed in our code to Google's API and cannot reach OpenRouter at all.
• AI training: We send no flag asking any provider to train on or learn from our requests. The Google paid-tier terms described above are an agreement between us and Google and do not extend to a model reached through OpenRouter, so we are pursuing formal Data Processing Agreements with OpenRouter and the model vendors it reaches to confirm no-training terms there as well.

ElevenLabs (Voice Cloning and Narration)

• What it receives: Adult family members' voice recordings (30–60 seconds) for voice clone generation. Story narration text containing the child's first name (because the story is read aloud with the child as the hero).
• What it does NOT receive: Child voice recordings. We never collect or send children's audio to ElevenLabs.
• AI training: Voice recordings and narration text are processed solely for generating the voice clone and narrating stories. We are pursuing a formal Data Processing Agreement with ElevenLabs confirming no-training terms.

Google Cloud Text-to-Speech (Voice Narration)

• What it receives: Story narration text containing the child's first name.
• What it does NOT receive: Child voice recordings or biometric data.
• AI training: Text is processed solely for generating audio narration and is not used for model training under Google's paid-tier terms.

Resend (Transactional Email)

• What it receives: Parent email addresses, and in some transactional emails, children's first names. Specifically: story-sharing emails include the child's name in the subject and body (“Samaira just created a story featuring Svara!”), friend request emails include the child's name, and voice clone invitation emails include the family relationship label.
• Purpose: Sending login links, friend request notifications, story sharing notifications, voice clone invitations, referral notifications, and billing communications.
• Data retention: Resend processes emails for delivery and retains delivery logs per their standard terms. Email content is not used for marketing or training purposes.

Supabase (Authentication and Data Storage)

• What it stores: All parent account data, child profile data, story content, illustrations, voice recordings, reaction videos, and referral data.
• Security: All data is encrypted at rest and in transit. Child data tables have row-level security (RLS) enabled with family-scoped policies — a parent can only access their own family's data. Private storage buckets (reaction videos, voice samples) are service-role-only and served via short-lived signed URLs.
• Location: Data is stored on Supabase infrastructure. Specific hosting region details are available upon request.

Stripe (Payment Processing)

• What it receives: Parent billing information (email, payment method). Stripe does not receive any child data — no child names, profiles, or story content.
• Purpose: Processing subscription payments, managing billing cycles, and handling refunds.
• Compliance: Stripe is PCI DSS Level 1 compliant. FableJar never stores credit card numbers, CVVs, or full payment details.

Cloudflare (CDN and Security)

• What it receives: Standard network traffic required to deliver the service (IP addresses, request headers). We do not send child profile data in CDN request payloads.
• Purpose: Content delivery, DDoS protection, and SSL/TLS encryption.

Langfuse Cloud (AI Observability)

• What it receives: AI generation traces for monitoring story quality and safety. These traces contain story prompts which include the child's first name, appearance description, interests, challenges, and friends' first names. Each trace includes a child profile UUID as a session identifier. Nothing is stripped or masked from a prompt before the trace is sent.
• Hosting: Traces are sent to Langfuse Cloud (cloud.langfuse.com), a hosted service operated by Langfuse. They are stored on Langfuse's infrastructure, not ours, which makes Langfuse a third-party processor of the data listed above.
• Retention: Traces are retained for as long as the retention period configured on our Langfuse Cloud plan keeps them. That period is a setting on the hosted service rather than something our own code enforces, so we do not state a fixed number of days here; the period currently in force is available on request.
• Purpose: Monitoring AI-generated content for safety, quality, and age-appropriateness. Not used for marketing, advertising, or profiling.

Services We Do NOT Use

FableJar does not use: Sentry, PostHog, Hotjar, Mixpanel, Amplitude, or Google Ads.

The four marketing-page tools listed under Analytics and Advertising Tools above (Google Analytics, Google Tag Manager, the Meta Pixel and TruConversion) are the only third-party analytics or advertising services we use, and none of them runs on an authenticated page.

Data Retention

We retain data only as long as necessary for the purposes described in this policy. Specific retention periods:

We do not retain child data indefinitely. All child data is tied to the parent account lifecycle and is permanently deleted when the parent requests deletion of the child profile or their account.

Account Deletion

When you delete your account or a child profile:

• Deletion is immediate and permanent for live data. All child profiles, stories, illustrations, voice recordings, reaction videos, avatars, and preferences are permanently removed from our live database and storage.
• Storage buckets are wiped. All associated files (portraits, illustrations, audio, voice samples, reaction videos) are recursively deleted from storage.
• Third-party data: We cancel any active Stripe subscriptions. We cannot delete data already processed by a third-party AI service to generate a story or voice clone. Google Gemini and ElevenLabs process it transiently and do not retain it under our paid-tier agreements. We have no such agreement with OpenRouter or with the model vendor it relayed the story prompt to, so we cannot tell you what either of them retains — we are pursuing Data Processing Agreements with both.
• AI generation traces: Traces already recorded in Langfuse Cloud are not removed by deleting an account or a child profile. They fall away under that service's retention setting instead. Contact us at support@fablejar.com if you would like the traces relating to your family removed sooner.
• Backups: Deleted data is fully purged from database backups within 30 days due to rolling backup retention schedules.
• Shared stories: If a story was shared with another family (e.g., via a friend connection or a shared link), the shared copy that the other family accessed may remain in their view. Deleting your account removes your data from our systems but does not retroactively remove stories that were already delivered to other families' email inboxes.

You can delete a child profile or your entire account directly from your dashboard at any time. No need to contact support.

Data Security

We maintain a written information security program specifically addressing children's personal information, as required by the amended COPPA Rule. Our security measures include:

• Encryption at rest and in transit. All data is encrypted in storage (AES-256) and all connections use TLS 1.2 or higher.
• Row-Level Security (RLS). Every database table containing child data has RLS enabled with family-scoped policies. A parent can only access their own family's data. This is enforced at the database level as defense-in-depth, in addition to application-layer authentication and authorization checks.
• Application-layer authentication. All API endpoints that access child data require a valid authenticated session and verify family membership before returning any data.
• Private storage. Sensitive files (reaction videos, voice samples) are stored in private buckets accessible only via short-lived, signed URLs generated on demand for authorized parents.
• No child-facing authentication. Children have no login credentials, no passwords, no auth tokens. All access is through the parent's authenticated session.
• Consent enforcement. Features involving sensitive data (voice cloning, reaction videos) hard-block at the code level if the required consent timestamp is not recorded.
• Regular review. We review our security practices and access controls regularly and update them as needed.

International Data Transfers

FableJar is operated by Flipbytes, LLC in the United States. If you are located outside the United States — including in the European Union, United Kingdom, Australia, India, or Singapore — your data may be transferred to and processed in the United States or other countries where our service providers operate.

We ensure that such transfers are conducted in compliance with applicable data protection laws. Where required (e.g., for transfers from the EU/UK), we rely on Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to safeguard your data.

By using FableJar, you acknowledge that your data will be processed in the United States and potentially in other jurisdictions where our service providers operate.

Legal Basis for Processing (EU/UK Users)

If you are located in the European Union or United Kingdom, we process your data under the following legal bases as required by the General Data Protection Regulation (GDPR) and UK GDPR:

You have the right to withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent for child data processing, delete the child profile from your dashboard. To withdraw consent for voice cloning, delete the voice profile from Voice Studio.

Your Rights

Depending on your location, you may have the following rights regarding your personal data and your child's personal data:

• Right of access — You can view all personal information collected about you and your child at any time from your dashboard. You may also request a complete copy of your data by contacting support@fablejar.com.
• Right to rectification — You can correct or update your child's profile information (name, age range, interests, personality traits, challenges, favourites) at any time from your dashboard.
• Right to deletion — You can permanently delete your child's profile, voice recordings, reaction videos, or your entire account at any time from your dashboard. Deletion is immediate for live data. See the Account Deletion section for full details.
• Right to data portability — You may request a copy of your data in a machine-readable format (JSON) by contacting support@fablejar.com. We will fulfill such requests within 30 days.
• Right to restrict processing — You may request that we limit certain processing of your or your child's data. Contact support@fablejar.com.
• Right to object — You may object to processing based on legitimate interest. Contact support@fablejar.com.
• Right to withdraw consent — You can withdraw consent for child data processing by deleting the child profile. You can withdraw consent for voice cloning by deleting the voice profile. You can withdraw consent for reaction videos by deleting the recordings from your dashboard.
• Right to lodge a complaint — If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority.

For EU users, the relevant supervisory authority can be found at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

For all data rights requests, contact us at support@fablejar.com. We will respond within 30 days.

Data Breach Notification

In the event of a data breach that affects personal information — particularly children's data — we will:

• Investigate the breach immediately and take steps to contain and mitigate the impact.
• Notify affected users by email within 72 hours of becoming aware of the breach, describing the nature of the breach, the data affected, and the steps we are taking.
• Notify relevant data protection authorities as required by applicable law (e.g., within 72 hours under GDPR).
• Document the breach and our response for regulatory compliance purposes.

Third-Party Links

FableJar may contain links to third-party websites or services (e.g., Stripe for payment management, external blog articles). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the “Last updated” date at the top of this page.
• We will notify registered users by email at least 14 days before material changes take effect.
• We will post a notice on our website highlighting the changes.

Your continued use of FableJar after changes take effect constitutes acceptance of the updated policy. If you do not agree with the changes, you may delete your account at any time.

Contact Us

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or would like to report a privacy concern, please contact us:

Email: support@fablejar.com

Mail: Flipbytes, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, United States.

We aim to respond to all privacy inquiries within 30 days.