Direct notice to parents and guardians

How FableDoor Handles Kids’ Data

Effective and last updated: 21 September 2026 · Document version: kids-data-v3-2026-09-21

This is the short notice for adult parents and legal guardians. It explains what information the parent can provide about a child, why it is needed, who helps process it, and the parent’s choices. The Privacy Policy for Families gives the full details.

What we ask for

• a child’s first name or nickname and age;
• story ideas typed or spoken by the parent, including chosen themes and characters;
• hero names, appearances, and personality traits;
• the stories, illustrations, and narration created from those details;
• safety preferences and reports, such as blocked topics; and
• limited app and device information needed for security, reliability, notifications, and purchase records.

Please use a first name or nickname only. Do not enter a surname, address, school, exact location, contact details, health records, or other information that a story does not need.

What happens when the parent speaks

Why we use this information

We use it only to operate the parent’s account, make and play personalised stories for the child, keep characters consistent, apply the parent’s safety choices, prevent misuse, provide support, deliver requested notifications, manage story credits and purchases, and improve the service using restricted technical measurements.

Who receives it

FableDoor is the operator. We disclose only what is needed to service providers that help us run FableDoor: Supabase (accounts, database, and private storage), Fly.io (application hosting), Google’s paid Gemini API (story text and illustration descriptions), OpenAI (safety checks, hero appearance descriptions, illustrations, and narration), Apple or Google and RevenueCat (purchases), Resend (automated transactional email), Google Workspace (support, privacy, and general-contact email), Expo/Apple/Google (notifications), PostHog (restricted product analytics), and Sentry (sanitised crash reports). They may process data in Australia, the United States, Canada, and other countries where they or their infrastructure operate.

Gemini receives the child’s age, the parent’s story idea, hero names, appearances and traits, story length, the gentleness setting, and Blocked topics (including any text the parent enters), including any personal details the parent puts in those inputs. Under Google’s paid Gemini API terms, prompts and responses are not used to improve Google’s products, including its AI models. Google may retain them for a limited period for abuse prevention and legal obligations; paid access does not mean zero retention. See the full privacy notice.

FableDoor is currently offered in Australia and the United States. It is not currently offered to Canadian residents; a service provider processing data in Canada does not mean FableDoor is available there.

Children do not submit information or operate FableDoor independently. We do not provide child accounts, public posting, messaging, or public profiles. We do not sell children’s personal information, use it for targeted advertising, or use family content to build advertising profiles. FableDoor does not use children’s information to train its own AI models. OpenAI states that data submitted through its business/API services is not used to train its models unless the customer affirmatively opts in; FableDoor does not opt in.

How long we keep it

A child profile and its family stories remain while the parent keeps them in the account. The parent can delete the child’s data at any time. FableDoor then removes the profile, stories, heroes, and private media from active systems through a durable deletion process. Short-lived secure download and deletion links expire after 24 hours. Limited de-identified operational records may remain when they cannot reasonably identify the child, and providers may keep protected backup or security copies for a limited period under their retention rules.

The parent’s choices

The parent may review and correct the child profile, request a portable download, delete one child’s information while keeping the parent account, delete the whole account, withdraw consent to future collection, or ask who received the information. FableDoor will not require a child to disclose more information than is reasonably needed for story creation.

Use Settings → Account & privacy or contact privacy@fabledoor.com. We may verify account control before providing or deleting information.

What a parent can explain to their child

Operator contact