Privacy Policy

This privacy policy explains how we process personal data when you use the “Fabelino” website and app. We comply with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) where applicable, as well as other relevant data protection regulations. For users in the United States, additional federal or state privacy laws may apply, in particular the Children’s Online Privacy Protection Act (COPPA) and the California Consumer Privacy Act (CCPA/CPRA), where applicable.



1. Controller

The controller responsible for data processing in connection with the “Fabelino” website and app is:

Johannes Pfeiffer
Corosolweg 8, Villapark Zurzaak
Willemstad
Curaçao
E‑mail: hi@fabelino.ai



The “Fabelino” website and app are available to users worldwide.

Our EU representative within the meaning of Article 27 GDPR is:

TIM Company GmbH
c/o Factory Berlin
Rheinsberger Str. 76/77
10115 Berlin
Germany
E‑mail: info@timcompany.de



2. Description of the service

Fabelino is an AI‑powered app and website for creating personalized children’s stories. The service is aimed at families and is designed so that use by children takes place exclusively through a parent account and under the responsibility of parents or legal guardians.

On the website, the first chapter of a story can be created partly without registration. Registration is required if you want to save stories, create additional chapters, use the mobile app and access certain additional features.

Children below the legally permitted age are not allowed to register directly. Use by children requires the consent and involvement of parents or legal guardians.



3. Data we process

Depending on how you use our service, we process in particular the following categories of personal data:



3.1 Account and identification data

We process in particular:

  • Name
  • E‑mail address
  • Password (stored in encrypted form where registration takes place via e‑mail/password)
  • Information from third‑party logins, where you choose to share them, in particular via Google or Apple Login


3.2 Profile data

Information about the child or children in the parent account, in particular:

  • Name or chosen name of the main character (“hero”) of the story
  • Age
  • Gender
  • Basic preferences such as selected categories or themes (e.g. pirates, dinosaurs)
  • Language settings

These details are managed via the parent account and are used to personalize stories for your child.



3.3 Content data

We process in particular:

  • Text inputs
  • Created stories and chapters
  • Inputs for story personalization (e.g. hero’s name, age, gender, selected category/theme)
  • Speech inputs, where you actively provide them via the microphone feature
  • Transcripts generated from such speech inputs
  • Audio outputs, where stories are generated or stored as audio files
  • Information about downloads and sharing of stories or audio files, where such features are used


3.4 Technical and usage data

We process in particular:

  • IP address
  • Device and browser information
  • Operating system
  • App version
  • Language settings
  • Timestamps
  • Log files
  • Error and diagnostic data
  • Usage events and interactions within the website and app


3.5 Communication data

We process in particular:

  • Content of support requests
  • E‑mail communication
  • Other communication with you


3.6 Voice and voice cloning data

If you use the optional voice cloning feature, we process additional speech and audio data, in particular:

  • Voice recordings that you actively provide
  • Voice‑related characteristics derived from those recordings and/or a synthetic voice profile generated by the provider we use
  • A short sample or preview audio generated using your voice
  • Technical metadata related to the creation, use, deletion or regeneration of a voice

The voice cloning feature is optional and not required to use the standard story features.



4. Special information on speech data

If you use the microphone feature for speech input, your voice input is processed to recognize spoken content and convert it into text. As a rule, we store only the transcript generated from your speech input, insofar as this is required to create, continue or store a story.

Speech data is processed only if you actively use the relevant speech feature. If you do not use this feature, no speech‑based input or transcription takes place.



4a. Special information on the voice cloning feature

If you activate the optional voice cloning feature, we may use your voice recording to create a synthetic reading voice for your Fabelino account. This feature is used solely to play stories back within your account in a personalized voice or to provide audio files generated for you.

The voice cloning feature is intended only for the voice of a parent or legal guardian. Use with children’s voices, voices of other individuals without their express authorization, or fictional and protected well‑known voices is not permitted; further details are set out in our Terms.

We may use external providers for speech, text or voice technologies in connection with this feature. Where personal data is transferred to countries outside the EU/EEA, this is done only in compliance with the legal requirements for international data transfers.



5. Purposes of processing

We process personal data in particular for the following purposes:

  • Provision and operation of the website and app
  • Registration and management of user accounts
  • Authentication via e‑mail/password and via Google or Apple Login
  • Creation, personalization, storage and management of stories
  • Provision of the microphone feature and conversion of speech to text
  • Provision of optional audio and voice features, including the creation of a personalized reading voice
  • Provision of download and sharing features for stories and audio files
  • Technical security, stability, error analysis and abuse prevention
  • Customer service, communication and support
  • Sending transactional messages (e.g. regarding account, login, support or organizational information)
  • Analysis of website usage
  • Marketing, newsletters, retargeting and promotional communication, where you have given consent
  • Sending push notifications, where you have given consent and this feature is offered in the future


6. Legal bases for processing

We process your personal data on the following legal bases:



6.1 Performance of a contract and pre‑contractual measures

Processing is based on Article 6(1)(b) GDPR where it is necessary to provide our service. This applies in particular to:

  • Registration and account management
  • Login and authentication
  • Creation and storage of stories
  • Use of personalization features (hero’s name, age, gender, category)
  • Provision of audio playback, download and sharing features
  • Communication in the context of support and use of the service


6.2 Legitimate interests

Processing is based on Article 6(1)(f) GDPR where it is necessary for the purposes of our legitimate interests. This applies in particular to:

  • Ensuring IT security
  • Abuse prevention
  • Error analysis
  • Technical logging
  • Basic stability of our systems and infrastructure
  • Establishing, exercising and defending legal claims
  • Detecting, reviewing and handling potential violations of our terms or the rights of third parties


6.3 Consent

Processing is based on Article 6(1)(a) GDPR where you have given us your consent. This applies in particular to:

  • Google Analytics on the website
  • Meta tracking, retargeting and comparable marketing technologies
  • Future newsletters and e‑mail marketing
  • Future promotional push notifications
  • Use of the optional voice cloning feature
  • Other optional tracking or marketing measures

Where voice‑related data is processed in connection with the voice cloning feature, this is done only after your prior explicit activation and consent. You may withdraw your consent at any time with effect for the future.



7. Children and parental consent

Fabelino is a family‑oriented service but is not intended for independent registration by children below the legally permitted age. Account creation and management are carried out exclusively by parents or legal guardians.

Where personal data of children is processed, this happens solely within the parent account and only with the consent of the parents or legal guardians. We do not knowingly process personal data provided directly by children without the required consent.

The voice cloning feature is not intended for children’s voices. Parents or legal guardians may only use their own voice or a voice they are legally authorized to provide and use.

For users in the European Union, we comply with the requirements of Article 8 GDPR regarding children’s consent in relation to information society services.



8. Login and authentication

Depending on availability, you can log in using:

  • E‑mail and password
  • Google Login
  • Apple Login

If you use a third‑party login, we receive the data that you make available via that provider, in particular your name, e‑mail address or a unique identifier. The specific data transferred depends on the settings and permissions in your account with the respective provider.



9. Service providers and recipients

We use external technical and organizational service providers to deliver our service. Personal data may be transferred to these providers to the extent necessary for the respective purposes.

The categories of providers and individual providers we use or may use in the future include in particular:



9.1 Hosting, infrastructure, database and authentication

  • Hetzner (hosting / server services, Germany)
  • Netlify (web hosting / technical infrastructure, where used)
  • Supabase (database, backend, authentication; currently with infrastructure in the EU, in particular Ireland)


9.2 AI, audio and speech services

  • OpenAI
  • Perplexity
  • Inworld
  • Microsoft Azure OpenAI, where used
  • Microsoft Azure Speech Services, where used

These services may be used to generate personalized stories, process content, convert speech input to text, output audio or provide an optional personalized reading voice.



9.3 Security and performance services

  • Cloudflare (security, performance, content delivery), where used


9.4 Analytics and marketing services

  • Google Analytics (website analytics)
  • Meta SDK / Meta App Events / Meta Ads‑related tracking and attribution technologies, where used
  • Mailchimp or a comparable provider for newsletter and e‑mail marketing, once this service is actively used


10. International data transfers

Some of the service providers we use are located outside the European Union or the European Economic Area or process data there, in particular in the United States. This may apply in particular to providers such as OpenAI, Perplexity, Inworld, Microsoft, Google, Meta, Mailchimp, Netlify, Supabase or Cloudflare, depending on their specific processing locations.

Where we transfer personal data to a third country, this is done only in compliance with the legal requirements. Where required, such transfers are based in particular on:

  • An adequacy decision by the European Commission, or
  • Standard Contractual Clauses (SCCs) adopted by the European Commission and, where necessary, additional safeguards, or
  • Other legally permitted transfer mechanisms.

Despite such measures, there may be a risk with data transfers to third countries that the level of data protection may not be equivalent to that in the EU.

What this means for you: When you use Fabelino, certain personal data may be transferred to the technical, AI, audio or analytics providers mentioned above, insofar as this is necessary to provide the relevant features. This may include, in particular, child profile data, content data, text inputs, transcripts, speech recordings, voice‑related data, technical usage data and generated content, where such data is required for the respective function.



11. Analytics, tracking and marketing

11.1 Google Analytics

We use Google Analytics on our website to statistically evaluate usage of our web offering and improve our service. Google Analytics is activated only based on your consent.



11.2 Meta tracking and retargeting

Where we use Meta‑related technologies such as Meta SDK, App Events or retargeting, this is done exclusively on the basis of your consent. These technologies can be used to analyze usage of our service, measure conversions or optimize marketing activities.



11.3 Newsletter and e‑mail marketing

Where you subscribe to our newsletter or similar marketing communication, we process your e‑mail address and any additional optional details on the basis of your consent. In future we may use Mailchimp or a comparable provider to send such e‑mails.



11.4 Push notifications

We may in future use push notifications for reminders, product updates, re‑engagement or marketing purposes. Such push notifications are sent only if you have explicitly enabled them on your device.



12. No use for our own AI model training

At present, we do not use personal data from your use of Fabelino to train or otherwise improve our own AI models beyond what is necessary to provide the specific feature you are using. Your data is processed solely to deliver and personalize the features you use within our service.

Where external AI or voice providers are used, they process data only in accordance with their contractual and data protection agreements with us and the terms applicable to the respective feature.



13. Storage periods

We store personal data only for as long as necessary for the respective purposes or where legal retention obligations apply.

  • Account data and stored content are generally kept until the account is deleted.
  • Stored stories, child profiles and related content are generally kept until you delete them yourself or delete your account, unless statutory retention obligations require longer storage.
  • Technical logging and security data are stored only as long as necessary for security, stability and error analysis.
  • Marketing‑related data is stored until you withdraw your consent or until the respective purpose ceases to apply.
  • If you use the voice cloning feature, we store settings, generated sample audio and other data linked to this feature only for as long as necessary to provide the feature or until you delete your voice, related content or your account, or withdraw your consent.

If you delete your account, we delete your personal data and stored stories, child profiles and voice cloning data linked to your account, unless we are legally obliged to retain certain data for longer.



14. Your rights

Within the limits of applicable law, you have in particular the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Right to withdraw consent with effect for the future
  • Right to lodge a complaint with a data protection supervisory authority

To exercise your rights, simply contact: hi@fabelino.ai.

If you use a parent account and wish to exercise rights in relation to a child’s data, we may request proof of your authority in order to protect the child and their data.



15. Account deletion and deletion of voice data

You can delete your account directly in the app. In this case, we delete the personal data linked to the account, including stories, child profiles and voice cloning data, unless statutory retention obligations or other compelling reasons prevent immediate deletion.

Where the app provides a separate deletion feature for the voice cloning function, you can terminate or withdraw the use of your personalized voice independently of deleting your account. In this case, use of this voice for your account will cease and the relevant data will be deleted or blocked in accordance with our technical and legal processes.



16. Shared content and user responsibility

Where we provide features for sharing or downloading stories or audio files, you decide whether and to what extent you use generated content outside your account.

Please be aware that personalized stories or audio files may contain personal data, in particular children’s names or AI‑generated audio based on a voice recording you have provided. If you share or publish such content, you are responsible for ensuring that you are entitled to do so and that you do not infringe any third‑party rights or applicable laws.

We may provide notices, descriptions or technical labels to make it clear that certain audio content is AI‑generated. Such measures may be used in particular in connection with download or sharing features.



17. Privacy rights under US law

Where US law applies to your use of our service, you may have additional rights, in particular under COPPA, CCPA/CPRA or similar state privacy laws. These may include, in particular, rights of access, deletion, objection to certain processing activities and specific protections for children’s data.

If you wish to make a request under applicable US privacy law, please contact us at: hi@fabelino.ai.



18. Security

We implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, manipulation or other unauthorized processing. These measures include, in particular, encrypted transmissions, access restrictions, logging of security‑relevant events and technical safeguards within our systems and at our service providers.

In connection with voice, audio and sharing features, we may also use additional technical and organizational measures to detect, review and appropriately respond to abusive uses, unlawful content or violations of our terms. Such measures are not necessarily error‑free or exhaustive.



19. Changes to this privacy policy

We reserve the right to amend this privacy policy if legal requirements, our service or the providers we use change. The current version is available in the app and on our website.