Privacy Policy

1. Information We Collect

Information Stored on Your Device & iCloud

The following information is stored on your device and in your personal iCloud account via Apple CloudKit. When you create a story, selected story details are sent to our generation service only as described below:

• Child profiles:story nickname, age (3–8), and an emoji avatar — entered by a parent or guardian, never by the child
• Stories: title, text, illustrations, and audio narration
• Reading activity:reading streaks, read counts, and story ratings — stored locally on your device only (not synced or sent to any server)
• App preferences:bedtime reminder settings and display preferences — stored locally on your device only
• Subscription status and monthly story quota

Information Sent to Our Story Generation Service

When you create a story, the following information is sent to our servers for processing. A parent or guardian is always the one initiating this action. This data is processed in real time and is not storedon our servers — it exists in memory only for the few minutes it takes to generate your story, then it is permanently discarded:

• Your story prompt (the idea you describe)
• Story nickname and age band (to personalize the story)
• Selected art style and story length
• Premium subscription status
• Toy photo(only if you choose to include one) — we process the photo briefly to describe the toy for the story, then discard it. The photo is never stored on our servers. Please photograph just the toy and avoid including people in the photo.

Information Shared During Read Together (SharePlay)

When you use Read Together to share a story with another device, the story content (text, illustrations, and audio) is temporarily held on our server so the other device can access it. This data is automatically deleted after 1 hour. Toy photos and generation metadata are never included in shared data.

Information We Do Not Collect

Fablito does not collect:

• Email addresses, phone numbers, or physical addresses
• Last names or full names of children
• User account credentials (we do not have user accounts)
• Tracking cookies or advertising identifiers
• Behavioral or usage analytics
• Location data
• Photos or videos of children

We do not maintain a user database on our servers. We have no analytics SDKs, no advertising frameworks, and no crash reporting services in the app.

2. How We Use Information

The information we process is used solely to:

• Generate personalized story text based on your prompt and your story nickname and age band
• Create illustrations that match your chosen art style and story content
• Produce audio narration of the finished story
• Incorporate a toy into the story, if you provide a toy photo

Story generation data is processed in real time and is not retained after the story is delivered to your device. Our backend server is stateless — it does not write to any database and holds data only in temporary memory during generation.

3. Information Sharing & Third-Party Services

We do not sell, rent, or trade any personal information. We share data only with the following service providers, solely to generate your stories. Under the Children’s Online Privacy Protection Act (COPPA), these providers act as “service providers” (16 CFR 312.2) and are contractually required to:

• Use your data only to provide the story generation service
• Not disclose the data to any other parties
• Not retain data after processing is complete
• Maintain the confidentiality and security of the data

4. Children’s Privacy (COPPA Compliance)

Fablito is designed for families with children aged 3–8. We comply with the Children’s Online Privacy Protection Act (COPPA) and take children’s privacy very seriously.

What we collect and why

• Story nickname and age band:Used solely to personalize stories (the nickname appears in the story text and narration, and the age band helps tailor vocabulary and themes). Parents are prompted to use a nickname or story name rather than a child’s full legal name.

Parental consent

The app is designed to be set up and operated by a parent or guardian. A parent or guardian downloads the app, creates child profiles, writes story prompts, and initiates all story generation. Children do not independently submit any personal information through the app.

Our commitments

• Minimal data collection:We collect only a story nickname and age band — the minimum needed to personalize a story.
• No persistent identifiers: We do not assign or track persistent identifiers tied to children.
• No behavioral tracking:We do not monitor, track, or profile children’s behavior within the app. There are no analytics, no advertising, and no tracking SDKs.
• No AI training on children’s data:Your child’s name, stories, prompts, and toy photos are never used to train or improve any AI models. They are used solely to generate your requested story and then discarded.
• Service provider safeguards: When we share data with third-party AI services to generate stories, those providers are contractually bound to use the data only to provide the service, to not retain it, and to maintain confidentiality (see Section 3 above).
• Data stays with you:All child data is stored in the parent’s iCloud account, under Apple’s encryption and privacy protections.

5. Data Retention

• Stories and child profiles: Stored on your device and in your iCloud account for as long as you choose to keep them. You can delete them at any time.
• Story generation data:Exists in our server’s temporary memory only during generation (typically 1–3 minutes). It is permanently discarded once the story is delivered to your device. Our server does not write to any database.
• Read Together (SharePlay) data: Story content shared during a Read Together session is held in temporary server memory and automatically deleted after 1 hour.
• Server logs: Our servers do not log personal information such as story nicknames, story prompts, or toy photos.

6. Data Storage & Security

• On-device storage: Stories, child profiles, and app preferences are stored locally using SwiftData and synced to your iCloud account via Apple CloudKit. Apple encrypts this data both in transit and at rest.
• No server-side storage: Our story generation service is stateless. Prompts and child information are processed in memory and discarded immediately after the story is delivered. We do not maintain a database of user data.
• Secure transmission: All communication between the app and our services uses encrypted connections (HTTPS/TLS).

7. Your Rights & Parental Controls

Because your data lives on your device and in your iCloud account, you have full control:

• Access and review: All stories and child profiles are visible within the app at any time.
• Edit:You can update your child’s name or age in their profile at any time.
• Deletion: You can delete individual stories or entire child profiles at any time. Deleting a child profile removes all stories associated with that child.
• Refuse further collection: You can stop creating stories at any time. Since we only process data when you actively request a new story, no further data is collected unless you initiate it.
• Complete removal: Uninstalling the app and removing its data from iCloud removes all Fablito data entirely. Because we store nothing on our servers, no further deletion request is needed.

If you have questions about your child’s data or wish to exercise any privacy rights, please contact us at the address below. We will respond to parental inquiries promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by updating the effective date at the top of this page. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, our privacy practices, or your child’s data, please contact us at:

We actively monitor this address and will respond to parental inquiries as quickly as possible.