Privacy notes

Fabullama keeps the private-alpha stack small: account records, sessions, story metadata, generated stories, usage events, and generated media metadata are stored in the app database. Media files are stored separately on the server filesystem.

Provider calls are made server-side. Story ideas and generated content may be sent to configured AI providers when you create, edit, narrate, or illustrate a story. API keys and provider credentials are never exposed to the browser.

Optional dictation and photo inspiration require your permission before an upload is sent to OpenAI. Fabullama processes the recording or resized photo temporarily and does not save the uploaded file. Extracted text stays editable and is stored with the story only if you create it. AI providers have their own processing and retention policies; this is not a promise of zero provider retention. Use your own spoken idea and non-identifying images, such as objects or drawings.

Narration may also be sent to ElevenLabs for text/audio alignment when configured. Transactional account email uses the configured email service; payment processing uses Stripe when billing is enabled. New email addresses require verification before they replace the address on your account.

The app uses an HTTP-only session cookie for login and a small language/theme preference on the device. Do not enter sensitive child personal data, health details, addresses, school names, or other private information into story prompts.

We suggest languages using your device language preferences and, when available, a country hint from our hosting service. We do not request your precise location or save the country hint. You can always choose another language.

During private alpha, contact [email protected] for account deletion, story deletion, media deletion, or data export requests. More formal self-service controls should be added before broader rollout.