Privacy notice
Privacy Policy for Families
Effective and last updated: 21 September 2026 · Document version: family-privacy-v2-2026-09-21
FableDoor helps an adult create personal stories for their child. This notice explains what personal information the parent provides, why we use it, where it goes, how long we keep it, and how the parent can access or delete it.
FableDoor is operated by Aliaksei Melnikau, an Australian sole trader trading as FableDoor (ABN 13 460 748 489).
U 1112, 24 Levey Street, Wolli Creek NSW 2205, Australiaprivacy@fabledoor.com · +61 8 6555 7948
Aliaksei Melnikau is also the person accountable for FableDoor’s privacy practices and the contact for privacy complaints.
- Who this applies to
- Information we collect
- How we use it
- Children and parental choice
- Service providers and disclosure
- International processing
- Retention and deletion
- Your rights
- Security and incidents
- Australia, US, and Canadian launch
- Changes and contact
1. Who this notice applies to
This notice applies to FableDoor’s mobile app, public website, support, and related services offered to families in Australia and the United States. It also describes the practices intended for a future Canadian launch, but FableDoor is not currently offered to Canadian residents. “Parent” means a parent or legal guardian aged 18 or older who is authorised to act for the child.
FableDoor is an adult-directed service for parents and legal guardians aged 18 or older. The adult creates and operates the account, supplies the information, and controls the family data. Children do not create accounts, submit information, upload content, make recordings, publish profiles, message other users, make purchases, or operate FableDoor independently. A child may listen to or view a completed story with the adult present and operating the service. The adult must not submit information about a child they are not authorised to represent.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Parent account | Email address, sign-in provider, opaque account identifiers, authentication and security records. | The parent and authentication providers. |
| Child profile | First name or nickname, age, safety settings, blocked topics, and the parent’s consent record. | The parent. |
| Story and hero content | Story ideas; hero names, appearances, and traits; generated story text, titles, illustrations, narration, themes, and safety flags. | The parent and FableDoor’s generation systems. |
| Voice-derived text | Words produced when supported devices convert the parent’s speech into a typed story idea. | The device’s on-device speech recognition. FableDoor does not receive or store the audio recording. |
| Purchases | Product, store, transaction and entitlement identifiers, credit balances, subscription state, purchase/refund times, and localised price shown by the store. | Apple or Google, through RevenueCat. |
| Communications and notifications | Support messages, waitlist or print-interest email, notification preferences, device push token, platform, and short-lived delivery receipts. | The parent, device, and delivery providers. |
| Restricted technical data | App version, device/platform class, timestamps, route or failure category, generation timing/cost, safety outcomes, and opaque family identifier. | The app, worker, PostHog, and Sentry. |
We ask families to use only a child’s first name or nickname. Please do not enter surnames, addresses, schools, exact locations, contact information, passwords, medical records, or other sensitive details that are unnecessary for a story. If you send such information, ask us to delete it.
We do not intentionally collect precise geolocation, contacts, advertising identifiers, biometric templates, or a child’s photos or voice recordings. Standard internet infrastructure may temporarily process an IP address to deliver and secure a request; FableDoor does not use it to build a child profile.
3. How and why we use information
We use personal information only where reasonably necessary to:
- create and secure the parent account;
- create, store, play, and download personalised stories and heroes;
- apply the parent’s age, gentleness, blocked-topic, and safety choices;
- moderate inputs and outputs, investigate a parent’s safety report, and prevent abuse;
- deliver requested email and push notifications;
- process store purchases, restore entitlements, and maintain story-credit balances;
- answer support, access, correction, export, and deletion requests;
- protect the service and diagnose failures using data-minimised logs and crash reports; and
- understand broad product events, such as onboarding completion or generation success, without recording child names, story ideas, story text, screen contents, or touch recordings in analytics.
FableDoor does not sell personal information, show behavioural advertising, create advertising profiles, or use family content to train FableDoor models. We do not permit targeted advertising based on children’s information.
4. Children, notice, and parental choice
Before a child profile is created, the adult is shown a direct explanation of the information needed for personalised stories and is asked to confirm parental authority and consent. The shorter Kids’ Data notice is part of this privacy notice.
A parent may refuse or withdraw consent. Without the minimum profile and story input supplied by the parent, FableDoor cannot create a personalised story, but the parent can still contact us. FableDoor does not ask a child to disclose information or operate the service.
The parent can review and change the child profile, download the child’s information, delete the child’s profile and content while keeping the parent account, or request deletion of the whole account. See section 8.
5. Service providers and disclosure
We disclose only the information reasonably needed for providers to perform services for FableDoor, subject to their agreements and security controls. Our current provider categories are:
| Provider | Purpose and information | Typical processing |
|---|---|---|
| Supabase | Authentication, database, and private story-media storage: parent account, child profile, stories, heroes, settings, operational records. | Primary FableDoor data is hosted in Australia; provider support or subprocessors may operate elsewhere. |
| Fly.io | Runs FableDoor’s application worker and transports requests needed to make and retrieve stories. | Primary application region is Sydney, Australia; network and support infrastructure may be global. |
| Google — Gemini API | Writes story text and illustration descriptions using the child’s age, the parent’s story idea, hero names, appearances and traits, story length, the gentleness setting, and Blocked topics (including any text the parent enters). Names or other personal details included by the parent in those inputs are sent with them. | Google and its service providers may process data internationally. FableDoor uses the paid Gemini API; see the data-use explanation below. |
| OpenAI | Safety checks, hero appearance descriptions, illustrations, and narration from the relevant story and hero details, generated text, and reference artwork. | United States and other locations used by the provider. FableDoor does not opt API data into model training. |
| Apple and Google | App distribution, sign-in when selected, on-device services, push delivery, and store purchases. | Under the platform account and privacy terms chosen by the parent. |
| RevenueCat | Validates purchases and subscriptions and sends entitlement events to FableDoor. | United States and provider/subprocessor locations. |
| Resend | Delivery of automated transactional email, such as sign-in, export, deletion, and safety notifications. | United States and provider/subprocessor locations. |
| Google Workspace | Receives and stores messages sent to FableDoor’s support, privacy, and general-contact mailboxes and sends human replies. | Australia, the United States, and other provider/subprocessor locations, according to Google’s service configuration. |
| Expo notification service | Routes a requested push notification to Apple or Google using a device push token. | United States and provider/subprocessor locations. |
| PostHog | Restricted, allow-listed product events identified by an opaque family ID. Screen recording, autocapture, and location enrichment are disabled. | Configured service region and provider/subprocessor locations. |
| Sentry | Sanitised technical crash reports. Default personally identifying data is disabled and child content is not intentionally sent. | United States and provider/subprocessor locations. |
Under Google’s paid Gemini API terms, prompts and responses are not used to improve Google’s products. Google may retain them temporarily for abuse prevention and legal obligations; paid access does not mean zero retention.
We may also disclose information if reasonably necessary to comply with law, protect a child or another person from serious harm, investigate fraud or abuse, enforce our rights, or complete a business transfer. A transfer does not permit the recipient to ignore this notice or applicable law. We do not disclose a child’s personal information for unrelated commercial purposes.
6. International processing
FableDoor is based in Australia. Its primary database, private media storage, and application region are in Australia, but the service providers above may process information in the United States, Canada, and other countries where they or their subprocessors operate. Foreign laws may allow courts, law enforcement, or regulators to access information.
Where Australian privacy law applies, we take reasonable steps in relation to overseas recipients. Where Canadian law applies, we use safeguards appropriate to the sensitivity of the information. Contact us for more information about a relevant provider or transfer.
7. Retention and deletion
We keep personal information only for the specific purpose described below, and not indefinitely.
| Information | Retention approach |
|---|---|
| Child profile, heroes, stories, and private media | While the parent keeps them in the account. Deleted on the parent’s request or with account deletion through a durable active-system deletion process. |
| Parent account and preferences | While the account is active, then deleted when account deletion completes, except a limited record required for security, legal obligations, dispute handling, or preventing duplicate trial grants. |
| Export and account-deletion links | Expire after 24 hours. Used or expired request secrets are removed on the service’s cleanup cycle. |
| Push delivery tickets and receipts | Short-lived operational records; receipts are swept after the provider’s approximately 24-hour receipt window. |
| Purchase and financial records | For the period needed to administer entitlements, handle refunds or disputes, and meet tax, accounting, fraud-prevention, and legal requirements. |
| Support, security, and safety records | For as long as reasonably needed to resolve the request or incident and establish what action was taken, then deleted or de-identified unless law requires longer retention. |
| De-identified operational records | Generation cost, timing, broad age band, and controlled scenario or safety labels may remain after child deletion only after direct identifiers, prompts, and story content are removed and the record is not reasonably linkable to a child. |
Deletion from active systems may not immediately remove encrypted backup copies or limited provider security logs. Those copies are isolated from ordinary use and expire or are overwritten under provider retention cycles. OpenAI states that API abuse-monitoring logs are generally retained for up to 30 days unless law, security, or an approved configuration requires otherwise.
Google’s paid Gemini API terms allow limited-period logging of prompts and responses for abuse prevention and legal obligations. Those general terms do not specify a fixed number of days; paid access does not mean zero retention.
8. Access, correction, export, deletion, and complaints
A parent or other person with applicable rights may ask FableDoor to:
- confirm whether we hold personal information and explain its use and disclosures;
- provide access to or a portable copy of it;
- correct inaccurate information;
- delete a child’s information or the whole account;
- withdraw consent for future collection, use, or disclosure;
- explain a material automated decision, if FableDoor ever makes one; or
- raise a privacy complaint.
Use Settings → Account & privacy or email privacy@fabledoor.com. We may verify control of the account and parental authority before disclosure or deletion. We respond within the period required by applicable law, explain any lawful refusal, and do not charge unless the law permits a reasonable fee disclosed in advance.
Automated moderation and generation help create and filter stories, but they do not make decisions about credit, employment, health, education admission, or other matters with legal or similarly significant effects.
9. Security and privacy incidents
FableDoor uses measures appropriate to the sensitivity of family information, including authenticated parent access, private media storage, short-lived signed download links, encrypted network transport, restricted service credentials, provider access controls, input/output safety checks, minimised analytics, and deletion workflows designed to retry incomplete cleanup.
No online service can promise absolute security. If we identify a privacy incident, we will contain and investigate it, keep legally required records, and notify affected people and regulators when applicable law requires. Please report suspected unauthorised access to privacy@fabledoor.com.
10. Regional information
Australia
We design FableDoor around the Australian Privacy Principles and child-centred privacy safeguards, including data minimisation, clear parental control, and the child’s best interests. Some small businesses may be exempt from the Privacy Act 1988 (Cth); this notice is a commitment to the practices described and does not remove any rights that apply under Australian law. A person may complain to the Office of the Australian Information Commissioner after first giving FableDoor a reasonable opportunity to respond.
United States — adult-operated service
FableDoor is directed to and operated by adults, not children. A parent or legal guardian aged 18 or older creates the account and supplies information about their child; FableDoor does not knowingly collect personal information online directly from a child. The parent can refuse further collection and ask us to delete the child’s information. If FableDoor learns that a child has created or operated an account, submitted information directly, or used the service independently, we will suspend the affected collection and delete the information unless we establish and document a lawful way to retain it.
Canada and Quebec
Before a Canadian launch, FableDoor must establish practices for accountability, identified purposes, meaningful consent, limited collection/use/disclosure/retention, accuracy, safeguards, openness, access, and complaint handling where Canada’s Personal Information Protection and Electronic Documents Act applies. That includes express parental consent for sensitive child information and for a child who cannot meaningfully consent; Canadian privacy regulators generally treat children under 13 as unable to provide meaningful consent except in unusual circumstances.
Canada availability: FableDoor is not currently offered to Canadian residents. Before enabling its country-wide Canada storefront, we must complete Canadian consent and provider reviews, the required Quebec privacy assessment, and the French-language product and contract work. For future reference, Quebec generally requires a parent or tutor to consent to collection from a child under 14 unless the collection is clearly for the child’s benefit. Aliaksei Melnikau is the person in charge of the protection of personal information.
When the Canadian service is offered, Canadian residents may contact the Office of the Privacy Commissioner of Canada or the appropriate provincial regulator after raising the matter with us.
11. Changes and contact
We may update this notice when the service, providers, or law changes. We will post the new date here. If a change materially expands how children’s information is collected, used, or disclosed, we will give parents a new notice and obtain fresh consent where required before applying that change.
Questions, requests, or complaints can be sent to privacy@fabledoor.com, phoned to +61 8 6555 7948, or mailed to Aliaksei Melnikau trading as FableDoor, U 1112, 24 Levey Street, Wolli Creek NSW 2205, Australia.