FablunaSign in
Draft. This is a working draft, not final legal text — it will be reviewed by a professional before launch.

Privacy

Last updated 2 November 2026 — while our privacy review is under way

Fabluna makes personalised stories for your child. This page explains what we collect, why, who helps us, how long everything is kept, and what you can do about it. We've written it in plain English. Where the law needs a precise word, we use it and explain it.

The short version

  • You hold the account. Your child never signs in and never types anything into Fabluna.
  • We use AI from three companies — Anthropic, OpenAI and Google — to make the stories. They receive your child's first name and the other details a story needs. None of them uses what we send to train its AI.
  • They don't delete it the moment they answer. Each keeps it for a short time to check for misuse: up to 30 days at Anthropic and OpenAI, and up to 55 days at Google. The details are below.
  • We never send a surname, a home address, your email address or your child's birthday.
  • We never sell your data, never show ads and never build advertising profiles.
  • You can download everything, or delete one child or your whole account, from your settings at any time.

Who we are

Fabluna is run by David Darwin, trading as Fabluna, Pappelallee 11, 10437 Berlin, Germany. That makes us responsible for your data under the GDPR (the "controller"). Email hello@fabluna.co — it reaches a real person. Our legal details are on our Impressum.

We're appointing Prighter as our representative in the UK, as the UK GDPR asks, and we'll add their UK address here. Until then, people in the UK can reach us directly at hello@fabluna.co.

What we collect, and why

Your email address
Why: so you can sign in with a link instead of a password, and so we can send service emails (your sign-in link, receipts, changes to this page). While your account is new, we also send a few emails about it: a welcome from Linky, a note from Dave, a reminder before your free week or Preview pass ends, and a note when it has ended. Every one has a link to turn them off.
Legal basis: our contract with you. For the welcome and reminder emails, our legitimate interest in helping you use what you signed up for.
Kept: until you delete your account, then gone within 30 days.
Optional emails — your choice
A box on the sign-in page, and a switch in Settings, ask whether you'd like Linky's weekly letter about the stories your family made and read, with three ideas for the next one (from 15 November), and now and then an offer. The box is never ticked for you. We keep a record of your yes or no, with the date and the words you saw.
Why: so we only send these emails if you said yes.
Legal basis: your consent. You can stop them at any time in Settings, or with the link at the bottom of every email.
Kept: the record of your choice, as long as your account exists. If you delete your account, we keep it for 3 years as an anonymous receipt, as for your tick on the sign-in page.
Your country
When you first sign in, we save the country your connection comes from, as our host tells us. We save only the country, never your town or your IP address with it.
Why: so emails and plans show prices in your currency.
Legal basis: our legitimate interest in showing you the right price.
Kept: as long as your account exists.
Where you found us, and how you use Fabluna
When you first open our site, we save one small cookie of our own for 30 days: the campaign code in the link you followed (if it had one), the website that sent you, and the first page you saw. When you sign up, we copy it to your account once and delete the cookie. If a gift, an invite or our waitlist brought you, we note that too.
We also count what happens in your account, one line a day: stories made, read, read again, hearted or listened to, links you opened in our emails, your plan, and what the stories cost us to make. Never the story words, names or anything you type.
Why: to see which ways of finding Fabluna bring families who keep reading, and to make Fabluna better.
Legal basis: our legitimate interest in understanding and improving our service.
Kept: the daily lines as long as your account exists, and 13 months at most. Totals that point to no family (for example "41 families read this week") we keep.
Your tick on the sign-in page
That you're 18 or over, a parent or guardian, and agree to our terms and this page — with the date and the version you agreed to.
Why: to show what you agreed to, and when.
Legal basis: our duty to show we follow the law.
Kept: as long as your account exists. If you delete your account, we keep an anonymous receipt for 3 years: what you agreed to, the version and the date, with a scrambled reference in place of your account. It holds no email, no name and nothing about your child. Then it's deleted.
Your child's profile
Their first name, age (or birthday, if you prefer), what they look like, the things they love and any notes you add.
Why: so each story is about your child, and grows up with them.
Legal basis: our contract with you.
Kept: until you remove the child or delete your account. One child is deleted straight away; a whole account within 30 days.
Your child's look and cartoon character
The options you pick in the character builder, including a skin tone. It's a drawing made from your choices — never a photo. We never ask for one.
In the character builder you choose how your child's cartoon looks: hair, eyes, clothes and skin tone. Every choice is yours, none has to match your child, and you can change any of them at any time. We use these choices only to draw your child in their stories, and never for anything else. They are deleted with your child's profile.
Why: so the pictures look like your child, the same way every time. A skin tone can hint at ethnic origin, which the law treats with extra care.
Kept: as for the profile.
Family, friends, pets and places
A first name, who they are to your child, and how they look if you tell us. A friend is another family's child, so please only add a friend whose grown-up is happy for them to appear in stories. A place is a name you give it, never an address.
Why: so the people, pets and places your child loves can be in their stories.
Legal basis: our legitimate interest, and yours, in stories about your child's real world.
Kept: as for the profile.
The story box, the stories and how you use them
What you type into the story box; the stories, pictures and recordings we make; which ones you open, finish or favourite; and Linky's weekly letters (from 15 November). A letter shows on your Home screen for a week, whether or not you get it by email.
Why: so you can read them again, and so we can suggest the next one, in the app and in the weekly letter.
Legal basis: our contract with you.
Kept: until you delete them, the child or your account.
Subscription details
From our payment provider: whether you pay, which plan, your country and currency. Never your card number, and never anything about your child.
Why: so you get what you paid for, and to keep the business records the law requires.
Legal basis: our contract with you, and our legal duty to keep records.
Kept: as long as German tax law requires (up to 10 years).
Waitlist and contact form
Your email address, and anything you write to us.
Why: to tell you when Fabluna opens, and to answer you.
Legal basis: your consent for the waitlist; our legitimate interest in answering you.
Kept: the waitlist until you unsubscribe or ask us to remove you. If you never press the confirm link, your sign-up is deleted after 90 days. Messages are kept for 12 months after the conversation ends.
Security records
Your IP address and browser type when you sign in or change something important, and a bot check on the sign-in and waitlist forms.
Why: to keep accounts safe and stop abuse.
Legal basis: our legitimate interest in a secure service.
Kept: IP address and browser for 30 days.
Error reports
Details of what went wrong, with names, emails and story text stripped out.
Why: to find and fix faults.
Legal basis: our legitimate interest in a service that works.
Kept: up to 90 days.

We don't collect anything from your child directly, because your child never uses Fabluna on their own.

Cookies: we use the cookies Fabluna needs to keep you signed in and the site secure, and one cookie of our own, fl_ft, that remembers how you first found us. It holds the campaign code in the link you followed (if it had one), the website that sent you and the first page you saw — nothing else. It lasts 30 days, or until you sign up, when we copy it to your account and delete it. It is ours alone: no other company reads it, and it doesn't follow you to other websites. There are no advertising or tracking cookies. To refuse it, press "Turn it off" on the small cookie note at the bottom of our pages. We then delete it and save your choice in one small cookie, fl_cookie_choice, for a year, so we don't ask again. If you closed the note with "OK" and change your mind, delete our cookies in your browser and the note comes back.

Your child's data and AI — the part that matters

Stories are written, checked and illustrated with AI. Here is exactly what reaches it, who gets it, and for how long.

What the AI receives, the illustrator included: your child's first name, age, look and the things they love; the cartoon character you built; the first names of the family, friends and pets you've added, and who they are to your child; the names of any places saved on their profile (like their nursery); the topics you asked us to keep out of stories, with any note you wrote about them; and anything you type into the story box. The note and the story box go as written, so keep surnames, addresses and school names out of them.

From your account and your child's profile, we never send a surname, a home address, your email address or your child's birthday. There's nowhere on the profile for a surname or an address, and a birthday goes only as the age it works out to. A place you save goes as you wrote it, so give it a name such as “Grandad's allotment”, never an address.

Linky's weekly letter (from 15 November): once a week, the AI receives the titles of the stories your family made or read that week, which companion was in each, whether you saved one or read it again, and each child's first name and age. Nothing else from the profile goes with it: not the story box, notes, family, pets or places, although a story's title can include a name from the story. Before the letter is shown, an AI check reads the finished letter, which can include your child's first name, to make sure it reads as if a person wrote it. So that the letter never suggests a story your child already has, another AI check may compare a story idea with the titles of your child's earlier stories that share a word with it.

Share only what you're comfortable with — a first name and a few details are all a story needs.

Who: we use AI models from Anthropic, OpenAI and Google. Between them, they plan and write each story, check it before you see it, draw the pictures, write Linky's weekly letter (from 15 November), and — when you tap “Read aloud” — read the story aloud.

Google receives a story in one more case, which is rare: when our usual checks can't give an answer, a Google model checks the story instead. It then receives the story's text, with the names in it, and nothing else from the profile. It never receives a picture.

We ask the illustrator not to write names or any other words in the pictures. The one exception is the story's title on the cover, which can include a name.

No training: none of them uses what we send to train or improve its AI models. That is part of each company's business terms for paying customers like us.

How long they keep it: each company deletes what we send after a short time. Until then it keeps a copy to check for misuse, and if its automatic systems flag something, a trained person at that company may look at it.

Anthropic
Keeps what we send for up to 30 days.
If its safety systems flag a request as breaking its usage policy, up to 2 years. It may keep the safety scores (not the request itself) for up to 7 years.
OpenAI
Keeps what we send for up to 30 days.
Longer only if the law requires it. Pictures are also scanned for child-abuse material, and a flagged picture may be kept for review.
Google
Keeps what we send for up to 55 days.

We don't have zero-retention agreements with these companies yet. We'll update this page, and tell you, if that changes.

Where: these companies are based in the USA and may process what we send there or elsewhere. See “Sending data outside the EU and UK” below.

Who else handles your data for us

We use a few other services to run Fabluna. Each works only on our instructions, under a data processing agreement, and may not use your data for anything else.

Supabase
Our database, file store and sign-in. Holds what we keep, as set out above. In the EU (Frankfurt).
Vercel
Hosts the website and runs our code, on servers in Frankfurt. A US company.
Inngest
Runs the steps that make each story. Sees the story details while a story is made, and keeps a short run history. In the USA.
Upstash
Counts requests so nobody can flood the site. Sees an IP address or an account reference, briefly.
Cloudflare (Turnstile)
Checks that a sign-in or waitlist form comes from a person, not a bot. Sees your IP address and browser signals. A US company.
Resend
Sends our emails: your sign-in links, the waitlist confirmation, the welcome, reminder and Preview emails, Linky's weekly letter (from 15 November), if you said yes to it, and the messages you send through our contact form. Receives the email address and the message, and the weekly letter includes your child's first name. We keep a record of which of these emails we sent, so none goes twice, for 13 months. It also sends us a daily note about very busy accounts, which names each account only by a reference number. In the USA.
Sentry
Tells us when something breaks. Receives error details with names, emails and story text removed. In the EU.

Payments: Paddle (Paddle.com Market Ltd, London) sells the subscription to you as our reseller and handles your card. Paddle is responsible for the payment data itself, under its own privacy notice. We never see or store your full card number.

Sending data outside the EU and UK

Some of the companies on this page are in the USA. When your data goes there, we protect it with the European Commission's Standard Contractual Clauses (and the UK's addendum to them) in each company's data processing agreement, or with the EU–US Data Privacy Framework where that company is certified. You can ask us for a copy of the safeguards at hello@fabluna.co.

What we never do

  • We never sell your data or your child's data.
  • We never share it for advertising, never show ads, and never build advertising profiles of you or your child.
  • We never use your child's information to train AI, and the AI companies we use don't either.
  • We never make decisions about you by automated means that have legal or similarly serious effects. Our automatic checks only decide whether a story is ready to show you.

Deleting everything

One child: on their profile page, choose Remove and type their name. Their profile, with the family and friends on it, and every story, picture and recording made for them are deleted straight away.

Your whole account: from your settings. We permanently remove your data — including your child's profile, their stories and their images — within 30 days.

We keep a private copy of your data for 14 days so we can recover from a fault. A deleted account leaves the copies 14 days after it is deleted.

You can download a copy of everything we hold, including the family and friends on your child's profile, from your settings.

The copy also holds our records of how each story was made: the steps, their times and any problems, the AI models we used and, for the first seven days, the AI's full answers.

The AI companies delete their copies on the timetable above. We can't shorten it.

Your rights

You can ask us at any time to:

  • see the data we hold about you and your child, and get a copy;
  • correct it;
  • delete it;
  • restrict how we use it, or object to a use based on our legitimate interests;
  • give it to you in a format another service can read;
  • withdraw a consent you've given, such as the waitlist or the optional emails. This doesn't affect anything we did before.

Email hello@fabluna.co, and we'll answer within one month. As your child's parent or guardian, you use these rights for them.

If you're unhappy with how we handle your data, please tell us first. You can also complain to a data protection authority: in Germany, the Berlin Commissioner for Data Protection and Freedom of Information (datenschutz-berlin.de); in the UK, the Information Commissioner's Office (ico.org.uk); or the authority where you live.

If you live in the USA, you have these rights too. Some US states give you more rights over your personal data or your child's; email us and we'll help.

Children's privacy

Fabluna is for a parent or guardian aged 18 or over to use with their child. There is no child-facing login, and a child can't sign up or use Fabluna on their own. Our children's privacy notice (linked below) explains this in more detail.

How we keep it safe

Your data is encrypted in transit and at rest, and kept behind strict access controls. Story images live in a private store and are only ever shown through short-lived, signed links.

Changes and contact

If we change this notice we'll update the date above. If a change is significant — for example a new AI company — we'll email you before it takes effect.

Questions about your privacy? Email hello@fabluna.co, or write to David Darwin, Fabluna, Pappelallee 11, 10437 Berlin, Germany.