Privacy policy

What this policy covers

This is Fairyteller's privacy policy: what we collect about you and your child, why, who else sees it, and what say you have over it. It covers the app and the website you are reading this on. It is written for you, the adult — nothing here is addressed to your child, and nothing on this website or in the app asks your child for information directly.

The short version

We collect what we need to have a conversation about your child and write their stories, to bill you through Apple, and to keep Fairyteller working and safe. We do not sell information about you or your child, we do not run advertising, and nothing about your child is ever used to build a profile of them for anyone else's benefit. The sections below say exactly what that means.

What we collect about you

An email address and the language you read this website or app in, if you join our list before launch or contact us.

An account identifier and confirmation from Apple that you have paid for a subscription or a one-time purchase — we never see or store your card details ourselves; Apple handles those.

Anything you send us directly, such as a support message or a comment about a particular story.

What we collect about your child

The conversation that gets your child's stories started, and anything you change afterwards, is used only to write and personalise those stories: their first name, birthdate — we work out their age from it when a story needs it, and never store an age on its own — interests, the people, pets and places in their life, comforting routines, and anything you would rather a story avoided.

We deliberately do not ask for, and ask you not to volunteer, a diagnosis, a condition, a medication, or any other health information about your child, even in your own words. Where a child would benefit from a gentler pace, plainer language, or the same story shape every night, the app lets you turn that on directly, described by what it does rather than by why your child needs it — precisely so that this kind of especially sensitive information never has to reach us at all. Data protection law calls this a special category of personal data, and we have designed the conversation to avoid collecting it, rather than to collect it carefully.

How a particular story landed with your child, and, if there is a specific part of a story you would rather we had not included, which part and why, is kept with the details above too, so future stories can do better.

What we collect about how Fairyteller is used

We keep first-party records of things like which stories were opened and when, and roughly how the app is performing on your device, so we can see that Fairyteller is working and fix it when it is not.

We do not use advertising identifiers, third-party advertising or tracking software, or any tool that would let another company follow your child across other apps or websites — on the screen your child uses, or anywhere else in Fairyteller.

Children's privacy

Fairyteller is set up, and paid for, by a parent or another adult responsible for the child — never by the child. A grown-up has the conversation that starts their stories, a grown-up subscribes, and a grown-up can review, change or delete anything we hold about their child at any time.

Because children as young as two use Fairyteller, we treat every child's information as sensitive, whatever your family's home country. European data protection law lets a country set an age below which a parent, rather than the child, must consent to a service like this on the child's behalf; Sweden's is 13, and every child Fairyteller is built for is younger than that, so it is always the responsible adult who consents, by setting up the account. If you are in the United States, we treat information gathered directly from your child's own use of the screen where their stories are shown and read aloud — not the information you, the parent, give us in conversation — as covered by the children's online privacy law, COPPA, and handle it accordingly: no third-party advertising or tracking on that screen, ever.

As the responsible adult, you can ask us at any time to show you what we hold about your child, correct it, or delete it — see 'Your choices,' below.

Stories, voices and pictures are made by artificial intelligence

Every story is written by artificial intelligence, from what you have told us about your child; the voice that reads it aloud is artificial too, chosen by you from a set of ready-made narrators; and where a story comes with a picture, that picture is artificial as well. Nova, the assistant who has the conversation with you, tells you plainly that she is AI the first time you speak with her.

Where the law requires it — including Article 50 of the EU's AI Act — we disclose that you are interacting with an artificial-intelligence system, and mark this kind of content as AI-generated in a way a machine can detect, not only in the words of this page.

The next section names who actually does this work on our behalf.

Who processes this information on our behalf

We do not do everything ourselves. The companies below receive some of the information described above, only to do the specific job listed, under a contract that stops them using it for anything else — including training their own general-purpose systems on it, wherever we are able to require that.

OpenAI, reached through our infrastructure provider Vercel's AI Gateway, writes the text of your child's story from what you have told us about them. It sees those details for as long as it takes to write that story, and nothing about your account or your payment.

ElevenLabs turns a story's text into narration, in the voice you chose from our set of ready-made narrators. It sees the story's text; it does not see what you have told us about your child beyond the words of the story itself.

Pictures for stories are an AI-generated feature we are still building. We have not yet finalised which company will generate them; we will name that company here, and confirm exactly what it sees, before the feature reaches your child's stories.

Vercel hosts Fairyteller's app and website and routes the requests above. RevenueCat and Apple handle your subscription and confirm your payment to us, without sharing your card details with us. Resend holds the pre-launch list of parents who would like to hear when Fairyteller launches. Datafast measures how many people visit this website, from your browser alone, without a cookie and without anything that identifies you or your child.

Where any of these companies is outside the European Union, we rely on the legal safeguards the law provides for that transfer, in most cases standard contractual clauses; we will set out the detail here once it has been through legal review.

Why we are allowed to use this information

To have a contract with you at all — an account, a subscription — we need your billing details and enough of what you have told us about your child to write their stories; that is our contractual basis for both.

Building your child's stories in the first place, and anything about them beyond the bare minimum a story needs, rests on your consent as their parent or guardian, which is also what allows us to process it at all under European data protection law, given your child's age. You can withdraw that consent at any time by deleting what you have told us.

Keeping Fairyteller secure and preventing misuse rests on our legitimate interest in doing so, which we believe is balanced against your and your child's own interest in a service that is safe to use.

How long we keep it

We keep what you have told us about your child for as long as their account exists, so their stories can keep building on what came before; we delete it, and every story and narration built from it, when you delete their details or close your account.

We keep the conversation that starts your child's stories only for as long as it takes to fold what you said into their details afterwards; we do not keep a permanent transcript of the conversation itself.

We keep account and billing records for as long as the law requires, for tax and accounting purposes, even after an account is closed.

We are still finalising exact timeframes for the categories above, and for things like inactive accounts and backups. This section will be more specific once that review is done, and, as the law requires for a service used by children, we will publish the finished policy here rather than keep it to ourselves.

Keeping it safe

We encrypt information between your device and ours, and limit which of our own team can see a child's details to what their work requires. We are putting a fuller written security programme in place before launch, as the law expects of a service used by children, and we will describe it here once it exists.

Your choices

You can see, correct, or delete what we hold about your child from inside the app at any time, or ask us to do it for you (see 'Getting in touch,' below). You can also ask us what we hold about you, ask us to stop using it beyond what is needed to keep your account running, or ask for a copy of it. Closing your account deletes your child's details and everything built from them.

If you are in the European Union and you do not think we have handled a request fairly, you also have the right to complain to your national data protection authority — in Sweden, that is IMY, Integritetsskyddsmyndigheten.

Cookies and analytics on this website

This website uses one analytics script, from Datafast, that sets no cookie and cannot identify you individually — so we do not show a cookie banner, because there is no tracking here to ask your permission for. We load nothing from an advertising network, on this website or in the app.

Changes to this policy

We will update this page as Fairyteller changes, including once it has had a proper legal review, which has not happened yet. We will post the new version here, and if a change is significant, we will tell you inside the app.

Getting in touch

Fairyteller is currently being built by [the legal entity name and registered address will go here]. For anything about this policy, or to ask about your own or your child's information, you can reach us at [a support email address will go here].