Last updated: July 13, 2026
Privacy Policy
This Privacy Policy explains how Fableling ("Fableling", "we", "us") collects, uses, shares, and protects personal information when you use the Fableling website and applications (the "Service"). We care especially about the privacy of children, and we've built the Service to collect as little as possible.
1. Who we are
The Service is operated by Fableling, which is the data controller for the information described in this policy. For any privacy question, or to exercise any right below, contact us at privacy@fableling.app — this is our official contact point for privacy matters and is monitored.
2. Information we collect
Account information (parents / adult learners)
- Email address and an encrypted password, to create and secure your account.
- Display name (optional), and your preferred language.
- Consent records — the date, version, and IP address at the time you accept our terms and (where applicable) provide parental consent, as required by law.
- Voice recordings — if you practise a speaking section, we record your spoken answer, send it to a third-party AI provider to be transcribed into text, and score the transcript. The recording is used for that purpose only. We store the transcript and your score with your practice history; we do not build a voiceprint and we do not use recordings to identify you. Speaking practice is entirely optional — every other section works without a microphone. Children's stories involve no recording at all; speaking practice exists only in the adult exam-preparation modules.
Child profiles
- A nickname (not a real name) and an age group. That is all. We do not collect a child's real name, photograph, address, precise location, contact details, or biometric data.
Learning content & progress
- The stories, quizzes, and IELTS attempts generated for you, your answers, scores, and progress statistics — so you can review history and we can show analytics.
Technical & security information
- Basic device and session information (a device fingerprint, browser type, approximate country from IP, and session timestamps) used to secure accounts, enforce device limits, and detect abuse. We do not use this to build advertising profiles.
Payment information
- Subscriptions are processed by Lemon Squeezy, our Merchant of Record. Card details are entered on their systems — we never receive or store your full card number. We receive only the subscription status and plan needed to grant access.
3. How we use information
- To provide the Service — generate stories and tests, grade answers, and track progress.
- To create and secure accounts, enforce plan limits, and prevent fraud and abuse.
- To process subscriptions and provide customer support.
- To comply with legal obligations and enforce our terms.
- To send essential service emails (e.g. verification, billing, security). We do not sell your data or use children's data for advertising.
4. Legal bases (GDPR)
Where the GDPR applies, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure the Service and prevent abuse); consent (where required, including parental consent for children); and legal obligation (to meet our legal duties).
5. Children's information
Fableling is intended to be used by children only under the supervision of a parent or guardian, who creates and controls the account. Children provide only a nickname and age group. We do not knowingly collect personal information from a child beyond this. Parents can review, edit, or delete a child's profile at any time. See our full Children's Privacy Notice for COPPA-specific rights and our consent process.
6. How we share information
We do not sell personal information. We share it only with service providers who help us run the Service, under contract and only as needed:
- Hosting & database — our cloud infrastructure and database provider.
- AI processing — providers that generate and score learning content (see below).
- Speech transcription — a provider that converts a spoken practice answer into text so it can be scored.
- Payments — Lemon Squeezy, as Merchant of Record.
- Security & delivery — our content-delivery and security provider.
- Legal — where required by law or to protect rights and safety.
7. AI processing
Stories, quizzes, practice tests and scoring are produced using third-party AI providers. We send providers only what is needed to produce the content, and never more.
What we send. For children's stories: a nickname, an age group, and the chosen topic, style and length. We never send a child’s real name, contact details, or any direct identifier — the app has no field to store one. For exam practice: the practice prompt and the answer you wrote, or the transcript of the answer you spoke. For speaking practice, the audio recording itself is sent to a transcription provider.
Model training — stated plainly. Our primary AI provider is currently used on a free service tier, and that provider’s terms permit them to use submitted content to help improve their models. This applies to most of what we send: children’s story generation, practice-test generation, and the scoring of written and spoken answers. In practice that means an essay you write for practice, or the transcript of a speaking answer, may be seen by that provider under those terms. For children’s content the material involved is only a nickname, an age group and a topic choice — by design there is nothing in it that identifies a child. We would rather state this than imply otherwise. Moving these workloads to a paid tier whose terms exclude content from training is a priority, and we will update this policy when it is done.
If you would prefer not to have your written or spoken practice answers processed on these terms, please do not submit them for scoring; reading and listening practice is graded by us and does not involve sending your answers to an AI provider.
We apply a safety filter to generated content before it is shown.
8. Data retention
We keep personal information only as long as needed to provide the Service and meet legal obligations. When you request deletion, we remove your data within 30 days, except where we must retain limited records for legal, tax, or security reasons. Inactive child data may be purged after a period of inactivity following a warning.
9. Your rights & choices
Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal information, and to withdraw consent.
You can exercise the two main ones yourself, immediately, without asking us. In Settings → Your data:
- Download my data — a JSON file containing everything we hold about you and your children.
- Delete my account — permanently removes your account, your children’s profiles, and every story, quiz and practice record. This takes effect straight away, not after a waiting period. Limited anonymised security logs are retained for fraud prevention and are no longer linked to you.
You can also delete a single child’s profile (and everything generated for them) directly in the app. For correction, restriction, or anything else, email privacy@fableling.app and we will complete it within 30 days. You may also lodge a complaint with your local data-protection authority.
10. Security
Data is encrypted in transit (TLS) and at rest. Access is restricted, passwords are hashed, and sensitive operations run server-side only. No system is perfectly secure, but we work continuously to protect your information.
11. International transfers
We operate globally and may process data in countries other than yours, including the United States. Where required, we use appropriate safeguards for such transfers.
12. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with a new "Last updated" date, and where required we will seek renewed consent.
13. Contact us
Questions or requests: privacy@fableling.app. See also our Contact page.