Who is responsible
Kussberg & Partners OÜ, Hüübi 17, 13426 Tallinn, Estonia, is the controller responsible for FableBunch. Contact privacy@fablebunch.com about personal data, account deletion, or this policy.
Information we process
Account information includes a parent’s email address, authentication credentials managed by our authentication provider, account identifiers, and session information.
Family content includes the profiles, character and world descriptions, story ideas, generated stories, favourites, and media references you choose to create, save, or upload. Invitations include the details needed to invite and identify family members.
Your conversation with Wuuly, the AI assistant in the signed-in app, includes the questions you ask and Wuuly’s replies, with their language, time, the family they were written in, and references to the saved characters, worlds, stories, screens, or prepared ideas a reply pointed to.
Technical information includes IP addresses, browser and device information, page visits, performance measurements, request timing, error information, and usage counts needed to operate and protect the service. Messages you send us are processed to answer your request.
Why we use it and the legal bases
We process account details, saved creations, family membership, requested story generation, and the questions you ask Wuuly, together with the conversation kept for you, to provide the service under our contract with the adult account holder (Article 6(1)(b) GDPR).
Protecting accounts, preventing abuse, diagnosing faults, and measuring basic website reliability are legitimate interests (Article 6(1)(f) GDPR). We consider the effect on families and limit the data used for these purposes. Legal obligations may require processing under Article 6(1)(c). Where processing relies on consent, you can withdraw it without affecting earlier lawful processing.
Family and children’s information
Accounts are for adults; children can contribute ideas together with a parent or guardian. We do not require children to have their own accounts. Use nicknames or fictional details and avoid entering sensitive information, school details, addresses, or other unnecessary information about children.
Only submit another person’s information when you are entitled to do so. If a child’s information was submitted without appropriate authority, contact us so we can investigate and address it.
Service providers and sharing
Vercel hosts the website and APIs and provides website analytics, performance monitoring, and the AI Gateway. Supabase provides parent authentication, the cloud family library, storage for your conversation with Wuuly, and file storage. These providers process information needed to perform those functions.
When tracking is on, PostHog’s EU service receives pseudonymous browser and session identifiers, page categories, and limited action metadata, such as the collection opened, creation stage, language, timing, and whether an account action, saving, or generation succeeded. When you sign in, pseudonymous parent and family identifiers connect those actions to your account. This helps us understand adoption, return visits, and where a signup, creation, or reading flow needs improvement. We do not send private page addresses, URL queries, names, form entries, prompts, story text, drawings, recordings, or private media URLs to product analytics, and session recording is disabled.
While tracking is on, public homepage heatmaps measure click and sampled pointer coordinates, viewport and screen dimensions, and pseudonymous browser and session identifiers. The address is restricted to our public homepage without query strings or fragments. This feature does not run on account, authentication, or private family pages and does not send DOM text, typed values, or session recordings. PostHog’s heatmap viewer separately fetches the public homepage to render a background image; it does not capture a screenshot of your browser session.
While tracking is on, browser error diagnostics send only a predefined error class and, where available, the basename of a generated first-party script and its numeric code position. Original error messages, rejected values, and stacks are excluded. Browser reports are limited and duplicates suppressed. Server operational error reports and logs sent to PostHog use predefined service, operation, status, and error categories, elapsed time, and opaque request identifiers to diagnose faults. They exclude request bodies, submitted family content, credentials, raw addresses, and original error messages or stacks.
When you request an AI story or creative draft, the relevant descriptions, selected characters, world details, and story context are sent through Vercel AI Gateway to the model provider used for the request, such as OpenAI. Do not include private information that is unnecessary for your story.
When family reminder emails are enabled, a short excerpt from your latest saved story and its title, character and world names are sent through Vercel AI Gateway to a model provider to write each reminder. The email includes the excerpt and may include saved artwork. You can turn reminders or artwork off in Family settings.
Wuuly is an AI assistant in the signed-in app. When you ask it a question, the question, the screen you are on and the creations selected there, the most recent messages of your conversation, and any draft text you chose to include for that question are sent through Vercel AI Gateway to the model provider used for the request, such as OpenAI. To answer, Wuuly can look up your family’s saved characters, worlds, and stories and a summary of your account: the family name, the number of profiles, characters, worlds, and saved stories, whether your email address is confirmed, the family’s Sparks balance, and your reading settings. The short excerpts it looks up are sent the same way. Wuuly only reads. It cannot create, save, change, spend, or delete anything; it can point you to a screen or pre-fill a new character, world, or story, which you then finish and confirm yourself. Do not include private information that is unnecessary for your question.
Other members of your family space can access its shared library. Your conversation with Wuuly is not part of that library: each parent has their own, and other family members cannot read it. Information may also be disclosed when legally required or necessary to protect the service and people’s rights. We do not use family stories for advertising.
Cookies, local storage, and voice input
Authentication cookies maintain your signed-in session. A language cookie remembers English or German. Browser storage keeps demo creations, drafts, preferences, and local recovery copies; a demo library is not automatically a cloud account.
Clearing browser data removes local copies and preferences and can sign you out. It does not delete an existing cloud family library. You can manage cookies and local storage through your browser.
Vercel Analytics and Speed Insights measure page use and performance. Our configuration strips URL queries and fragments and excludes authentication callbacks and password-reset URLs. These measurements are not used to display advertising.
PostHog product analytics, public homepage heatmaps and browser diagnostics are on by default unless you have turned tracking off. Cookies and browser storage hold pseudonymous browser and analytics-session identifiers. The initial notice has a Close action that only acknowledges the notice; it does not turn tracking off. Open Tracking details in the website footer or your signed-in account settings to turn tracking off or back on. A separate notice cookie remembers that you closed the notice for up to 180 days; closing it does not record a tracking preference or consent. An analytics-preference cookie remembers an explicit on or off setting for up to 180 days. Existing opt-outs are respected. Turning tracking off stops future product analytics without affecting access to the service or deleting earlier records. Contact privacy@fablebunch.com to request deletion of earlier analytics records.
Where browser voice input is available, microphone access requires your browser’s permission. Speech recognition may be provided by your browser or operating-system vendor under its own privacy settings and terms.
International processing
Our service providers may process information outside Estonia and the European Economic Area, including in the United States. The location depends on the service, infrastructure, and model provider used.
Transfers requiring safeguards must use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. Our providers’ data-processing terms describe their transfer arrangements; you can contact us for details of the safeguards applicable to your data.
How long information is kept
Account and cloud-library information is kept while needed to provide your account and saved family library. You can remove creations in the app or contact us to request account and personal-data deletion. Information shared with other family members may also concern their rights; we will explain any limits that apply to a request.
Your conversation with Wuuly is one continuous chat and is saved by default so that you can pick it up again. Each message is kept for 30 days from when it was written and is then deleted; if the chat grows beyond 400 messages, the oldest are removed sooner. You can clear the chat or switch saving off at any time, in the chat’s own menu or under Privacy & data in Settings. Either choice deletes everything stored from your conversation straight away, and while saving is off nothing further is stored. Messages written in a family you have since left are deleted when the chat is next opened. Usage counts for AI help, such as the model used and the size of a request, contain no message text and are kept as usage records as described below.
Support correspondence, usage records, and security logs are retained only for as long as needed to resolve the request, protect the service, meet a legal obligation, or establish or defend legal claims. The criteria are the purpose of the record, applicable legal requirements, and whether an incident or dispute remains open. Deleted information can remain in restricted backups until those backups are replaced.
Local demo content and recovery copies remain in your browser until removed through the app or browser settings. Deleting cloud information does not automatically clear every device’s local storage.
Your choices and rights
Under the GDPR, you can request access, correction, erasure, restriction, and, where applicable, data portability. You may object to processing based on legitimate interests and withdraw consent where consent is the basis. These rights have legal conditions and exceptions.
Email privacy@fablebunch.com to exercise a right. We may need to verify that you are entitled to access the account or information. We normally respond within one month; if a lawful extension is necessary, we will explain it.
You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or to a competent supervisory authority where you live, work, or believe an infringement occurred.
Changes to this policy
We will update this page when our processing changes. The date above identifies the current version. We will provide additional notice where a material change or applicable law requires it.
Hüübi 17
13426 Tallinn
Estonia
privacy@fablebunch.com