Privacy notes

Fabullama keeps the private-alpha stack small: account records, sessions, story metadata, generated stories, usage events, and generated media metadata are stored in the app database. Media files are stored separately on the server filesystem.

Provider calls are made server-side. Story ideas and generated content may be sent to configured AI providers when you create, edit, narrate, or illustrate a story. API keys and provider credentials are never exposed to the browser.

The app uses an HTTP-only session cookie for login and a small language/theme preference on the device. Do not enter sensitive child personal data, health details, addresses, school names, or other private information into story prompts.

During private alpha, contact the operator for account deletion, story deletion, media deletion, or data export requests. More formal self-service controls should be added before broader rollout.