Legal

Privacy Policy

Effective date: 16 June 2026

Fabily is a place where your child becomes the hero of their own story. To do that well, we look after a small amount of information about your child and you. This policy explains what we collect, why we collect it, and the choices you have. We have written it for parents and educators, in plain language, not legal jargon.

Fabily is an Australian business based in Adelaide, South Australia. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) set out in Schedule 1 of that Act, and we follow the guidance published by the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. This policy is our open and transparent statement of how we manage personal information, as APP 1 requires.

The short version

We collect only what we need to build your child's stories and run your account. We never use real photos of your child. We do not sell your information. Payment card details go straight to Stripe, so we never see or store them. You can ask to see, correct, export, or delete your child's information at any time by emailing hello@fabily.ai.

What information we collect

We only collect personal information that we genuinely need, which is what APP 3 requires. When you create an account and build a story, that includes:

• Your child's first name, age, and chosen interests.
• Avatar preferences your child selects, such as hair, skin tone, and outfit. These build a fictional 3D character, not a likeness drawn from a photo.
• Your email address as the parent or guardian, and your account login. If you sign in with Apple or Google, we receive your name and email from that sign-in, not your password.
• The stories you create and your saved library, so you can read them again.
• Basic usage and marketing-attribution information, such as which link brought you to Fabily, so we understand how families find us.

Under APP 5, we tell you why we are collecting information at the point we collect it, for example on the sign-up and avatar-builder screens.

What we do not collect

We have deliberately designed Fabily to hold as little sensitive information as possible:

• No photographs of your child. Real-life photos cannot be uploaded.
• No biometric data and no facial recognition.
• No location or GPS tracking.
• No payment card numbers. All payments are processed by Stripe, and your card details are entered with Stripe, never stored by Fabily.

Children's information and parental consent

Fabily is built for children, but accounts are created and controlled by an adult. You must be 18 or older to hold an account, and by using Fabily you confirm you are the parent or legal guardian of any child whose details you provide, and that you consent to us handling that information for them.

For a child under 15, we rely on your consent as the parent or guardian. This follows OAIC guidance, which treats an individual under 15 as generally not having the capacity to consent on their own, so a parent or guardian consents for them. We also keep the best interests of the child at the centre of how we design Fabily, and we use clear, age-appropriate language. These principles reflect the Children's Online Privacy Code currently being developed by the OAIC under the Privacy and Other Legislation Amendment Act 2024, and we will update this policy as that Code is registered.

How we use your information

We use personal information only for the purposes you would reasonably expect, in line with APP 6:

• To generate personalised stories where your child is the hero, using their name, age, interests, and avatar.
• To run your account, save your library, and provide support.
• To send you account emails, and, where you have given consent, marketing emails through Klaviyo. You can unsubscribe from marketing at any time, and account emails are kept to what you need.
• To understand how families discover Fabily through marketing-attribution analytics, so we can reach more parents.
• To improve the quality of our story generation. We do not allow our AI providers to use your inputs to train their public AI models.

The third parties we work with

Building a personalised story takes a few trusted specialists. We share only the minimum information each one needs to do its job, and each is required to protect it:

• Google Gemini, to generate the words of each story.
• BytePlus and gpt-image, to create the illustrations.
• ElevenLabs, to narrate stories as audio.
• Stripe, to process payments and subscriptions.
• Klaviyo, to send account and marketing emails.
• Vercel, to host the Fabily website and app.
• Neon, to store account and story data securely.

Sending information overseas

Some of these providers store or process information outside Australia. Where that happens, we take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles, as APP 8 requires. You can ask us which providers handle a particular kind of information by emailing hello@fabily.ai.

How we store and protect information

Keeping your family's information safe is a responsibility we take seriously, in line with APP 11:

• Account and story data is held in a Neon PostgreSQL database, reached only over encrypted connections.
• Images and audio are stored on Cloudflare R2 and served from our assets domain.
• We limit who can access personal information and review our safeguards as Fabily grows.

Your rights as a parent or guardian

The information is yours and your child's, and you stay in control of it. At any time you can:

• Ask to see the personal information we hold (APP 12).
• Ask us to correct anything that is wrong or out of date (APP 13).
• Ask us to delete your child's information or your account.
• Ask for a copy of your child's data so you can take it with you.

To make any of these requests, email hello@fabily.ai. We will respond within a reasonable time and may need to confirm your identity first.

How long we keep information

We keep personal information only for as long as we need it to provide Fabily to you, or for as long as the law requires. When you delete your account, we remove your child's personal information and stories from our active systems, and we remove backups on our routine cycle. If you would like your information deleted sooner, email hello@fabily.ai and we will help.

Cookies and analytics

We use a small number of cookies and analytics tools to keep the site working and to understand how it is used. You can read more in our Cookie Policy.

Changes to this policy

We may update this policy as Fabily grows or as the law changes, including when the Children's Online Privacy Code is registered. If a change is significant, we will let you know by email or through the app. The latest version will always live at fabily.ai/privacy.

Complaints and contact

If you have a question or a concern about your privacy, please email our team at hello@fabily.ai first. We will look into it and aim to respond within a reasonable time.

If you are not satisfied with our response, you have the right to complain to the Office of the Australian Information Commissioner. You can find out how at oaic.gov.au or by calling the OAIC enquiries line.

Fabily, Adelaide, South Australia. Email: hello@fabily.ai.