Privacy Policy

Effective: May 22, 2026

This policy explains what data Fablespun ("we") collects, how we use it, and your rights. By using the service, you agree to this Policy.

1. Who We Are

Fablespun is operated by Fablespun LLC, a South Carolina limited liability company, at fablespun.ai. For questions, contact support@fablespun.ai.

2. Information We Collect

Account info: Your email address and an encrypted password, managed via Supabase Auth.

Profile info you provide (parent accounts): First names, age ranges (e.g. "3-5", "6-8", "9-12"), and optional appearance details of children and supporting characters you add to your saved roster. This data is provided BY YOU as the parent or guardian — it is not collected from children directly.

Classroom info you provide (teacher accounts): Classroom names, grade bands, default reading levels, and a roster of students. For each student you choose to add: first name, age range, and reading level. Provided BY YOU as the educator under the representations in our Terms of Service §8.

Teacher application data: If you apply for a teacher account, we collect school name, role (teacher, librarian, specialist, or homeschool), grade levels taught, and country/state. We use this only to review the application; we do not share it with third parties.

Generated content: The stories, illustrations, audio recordings, word-timing transcripts (used for read-along highlighting), and educational artifacts you create, plus the inputs you provided when generating them.

Subscription info (teacher accounts): Stripe customer and subscription identifiers and status. Payment card details are handled directly by Stripe — we never see or store card numbers.

Usage data: Basic technical info such as IP address, browser type, and session timestamps, used for security and reliability.

Administrative logs: When an admin reviews a teacher application or takes an action on an account, we log the action, the admin's user ID, and a timestamp.

We do NOT collect:

• Last names of children or students
• Birthdates
• Photographs of children or students
• Precise location data
• Payment card details (handled by Stripe directly)

3. How We Use Your Information

• To generate the stories, illustrations, audio, and educational artifacts you request.
• To save your stories, roster, and classrooms so you can come back to them.
• To process subscription payments and manage your billing relationship via Stripe.
• To review teacher applications.
• To verify your identity and keep your account secure.
• To run automated content moderation on inputs and outputs to keep the experience age-appropriate.
• To communicate with you about your account, application status, or major service changes.
• To diagnose errors via aggregated error reports (without your account credentials).

We do NOT sell your data. We do NOT use it for advertising or train AI models on it.

4. Who We Share Information With

We share limited data with third-party providers who help us operate the service:

• Supabase — authentication, database, and file storage
• Anthropic — generates story text from your inputs
• OpenAI — generates illustrations, generates audio narration (TTS), produces word-level transcripts of audio (Whisper), and provides automated content moderation
• Stripe — processes subscription payments and stores payment methods (teacher accounts only)
• Resend — sends transactional email (e.g. teacher application decision notifications)
• Sentry — captures aggregated error reports for debugging
• Cloudflare — provides DNS, abuse protection, and bot-check (Turnstile) at signup
• DigitalOcean — hosts our server

Each provider has its own privacy practices. We send them only the data needed to perform their function and do not authorize them to use it for any other purpose.

5. Children's Privacy

Fablespun is intended for adults (18 and older). We do NOT knowingly collect personal information directly from children under 13.

When a parent adds a child's first name, age range, or appearance details to their account, the parent confirms they are the parent or legal guardian of that child and authorizes us to store this information so we can generate stories for them. We treat this as parent-provided information about a child, not as information collected from a child.

When an educator adds a student's first name and age range to a classroom roster, the educator confirms — under Terms §8 — that they have appropriate authority (through their school, district, or directly from a parent or guardian) to enter that information. Fablespun is not a school official or an authorized FERPA vendor unless we separately sign such an agreement with you.

If you believe we have inadvertently collected information directly from a child under 13, please contact us at support@fablespun.ai and we will delete it promptly.

6. Data Security

We use standard practices to protect your data: encrypted connections (HTTPS), password hashing via Supabase Auth, private storage buckets with short-lived signed URLs, access controls scoped per user account, and bot-protection on signup. No system is 100% secure, but we take this seriously.

7. Data Retention

We keep your data for as long as your account is active. If you delete your account, we delete your profile data, saved roster, classrooms, students, stories, illustrations, audio, and educational artifacts within 30 days. Subscription billing records are retained as required by tax and accounting law.

8. Your Rights

You can:

• Access the data we hold about you — it's visible to you within the app.
• Edit or delete saved characters, students, classrooms, and stories at any time.
• Delete your entire account from the account settings (or by emailing us).
• Cancel a teacher subscription from the billing portal at any time.
• Request an export of your data by emailing us.

9. Cookies & Local Storage

We use browser session storage to keep you signed in and to remember UI preferences. We do not use third-party advertising cookies or trackers.

10. International Users

Fablespun is hosted in the United States. If you use the service from outside the US, your data will be transferred to and stored in the US.

11. Changes to This Policy

We may update this Policy. We'll post the new version at fablespun.ai/privacy with a new "Effective" date.

12. Contact

Questions or requests? Email support@fablespun.ai.