1. Who is responsible
BeeBee Tones AB, org. no. 559589-2323, Sweden, is the data controller for Fabeligo, content contributions and the support page. Contact us at [email protected].
2. The child app
Fabeligo is always free, with no purchases in the app. It has no accounts, advertising or analytics SDKs. We do not collect personal data from children. Listening progress, favourites and settings stay on the device.
When a device streams or downloads story files, our delivery provider processes the IP address and technical request data needed to deliver that file. We do not use this to identify a child or build a listening profile.
The app also downloads the public Story friends list of content contributors described in section 3. From app version 1.6.0, it does not download the thanks list for supporters described in section 5. It only fetches public information and never sends child data.
3. Content contributions by email
Adults can offer Fabeligo a story text, illustrations or a narration by emailing [email protected], as the contribution guide on this website explains. Only adults aged 18 or older may submit. Please do not send material that contains children’s voices, photos or likenesses, or anything that identifies another person. If we learn that a submission comes from a child, or that it contains a child’s voice or likeness, we delete it.
When you email a submission, we receive your email address, your name and anything else you write in your message, and your attachments, such as story texts, images and voice recordings. A voice recording is personal data. We use it only to assess your submission and, if we accept it, to publish it as narration in Fabeligo. If we accept a narration, we send the recording to OpenAI’s speech-to-text service, solely to align the narration’s timing with the story text. We never use a recording to identify you or anyone else, and we never use it to build or clone a voice.
We use this information to assess your submission, to agree the licence with you if we accept it, to publish the accepted work, and, if you agree, to thank you by your chosen display name in Story friends. Our mailbox is hosted by Google Workspace, which processes emails and attachments on our behalf as our processor. OpenAI processes accepted narrations on our behalf as our processor, only for the timing alignment described above.
Story friends is the public list of adults whose content contributions we have published. It also credits work by the Fabeligo team. You appear in it only if you have explicitly agreed to show a display name and we have approved the name. We moderate names for a children’s audience. The list shows the display name, the type of contribution (story text, illustration or narration), the language where relevant, the story it belongs to, and the date. It never shows your email address, your message or other contact details. Story friends appears on this website and in the Fabeligo app.
We record listed contributions in our support service on Cloudflare (Workers and D1): the display name, contribution type, language, story, publication status and dates. It does not store your email address.
You can withdraw your consent at any time by emailing [email protected]. We then delete your Story friends entry, and the app shows the updated list the next time it is online. You can also ask us to delete a submission that we have not accepted. The terms of use explain what happens to a work we have already published.
4. Optional adult web support
The /support page is voluntary and for adults only. It offers an optional one-time contribution in SEK. Stripe Checkout may show the amount in the payer’s local currency. A contribution does not buy access to Fabeligo and does not guarantee a story, language, reply, or delivery.
Our support service, run on Cloudflare (Workers and D1), stores Stripe payment identifiers, the amount and currency (SEK), purpose, optional wish, optional display name, your choices about showing your name, amount and wish, any public version of your wish that we have approved, moderation and work status, page language and timestamps. It does not store an email address or card details.
Stripe processes the payment and your receipt and contact details under its own privacy policy. Card payment may include Apple Pay or Google Pay where Stripe makes those available. The support form uses Cloudflare Turnstile to stop automated abuse, which processes technical browser and device signals for that check.
5. Public thanks for supporters
Separately from Story friends, this website shows a public thanks list for adults who have made a contribution through the support page. It is voluntary and adult-only. A contribution appears only when it is paid, you have explicitly agreed to show your display name, and we have approved the name. We moderate names for a children’s audience.
The list shows the display name, purpose (the whole library, a story or a language), status (supporting, in progress or completed), the linked story or language once completed, and the date. The amount appears only if you separately chose to show it, which requires name consent. Your original wish, payment identifiers and contact details are never shown.
Showing a wish is a separate, optional choice that requires name consent. We never show your wish exactly as you wrote it. We write a short public version of at most 140 characters, may shorten or edit it (for example to remove a child’s name or anything that identifies a person) and approve it separately. It appears next to your name as plain text on this website. We may decline to show a wish.
From app version 1.6.0, the thanks to supporters appears only on this website, not in the Fabeligo app. Older app versions may still show it inside the app (your name, and your amount and wish if you chose to show them) until they are updated, and a withdrawal, refund or dispute removes it there the next time the app refreshes its catalog. A completed story’s page on this website may also show your name as a supporter credit.
You can withdraw by emailing [email protected]. We then remove your name, your wish and its public version and revoke your consent. A refund or payment dispute also removes public attribution.
6. Legal bases (GDPR Article 6)
- Delivering stories: legitimate interests (Art. 6(1)(f)). Our content provider processes the IP address and technical request data to deliver story files and protect the service against abuse. Our interest is a working, secure service. We limit this to what is necessary and never build profiles.
- Assessing a content submission: legitimate interests (Art. 6(1)(f)). We read and assess what you send us because you asked us to consider it. Our interest is choosing suitable material for Fabeligo, and we use the submission for nothing else.
- Publishing an accepted content contribution: contract (Art. 6(1)(b)). Once we accept your work, we process your details and the work, including a voice recording used as narration, to agree and perform the licence you grant us.
- Story friends: consent (Art. 6(1)(a)). Showing your display name in Story friends is based on your consent. You can withdraw it at any time, without affecting processing that took place before.
- Handling a support contribution: steps at your request (Art. 6(1)(b)). We process support data to take the steps you ask for when you choose to contribute, and to administer that contribution.
- Thanks to supporters: consent (Art. 6(1)(a)). Showing your display name, and separately your amount and your wish, is based on your consent. You can withdraw it at any time, without affecting processing that took place before.
- Accounting records: legal obligation (Art. 6(1)(c)). We keep payment records as required by the Swedish Bookkeeping Act (Bokföringslagen), currently for seven years.
- Bot protection: legitimate interests (Art. 6(1)(f)). Cloudflare Turnstile checks the support form to prevent automated abuse and fraud.
We do not use automated decision-making or profiling that produces legal or similarly significant effects (Art. 22).
7. How long we keep data
- On-device data (listening progress, favourites, settings, downloads) stays on the device until you delete the app.
- Delivery and security logs are kept by Cloudflare for a short period, up to 30 days.
- Content submissions we do not accept, and the emails about them, are deleted within six months of our decision.
- Accepted content contributions are kept, together with the emails that record the licence, for as long as we use the work and after that for as long as we need them to show what was licensed.
- Story friends entries are shown until you withdraw consent. Withdrawal deletes the entry.
- Support records are kept while needed to administer the contribution and public thanks. Payment records are kept privately for seven years under the Swedish Bookkeeping Act.
- Thanks to supporters is shown until you withdraw consent or a refund or dispute removes it. Withdrawal also deletes your name, your wish and its public version.
8. International transfers
Cloudflare (content delivery, the support service, the Story friends list and Turnstile), Google (Google Workspace, our mailbox), OpenAI (speech-to-text for accepted narrations) and Stripe (payments) are based in the United States and may process data outside the EU/EEA. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (SCCs), with supplementary measures where needed.
9. Your rights and complaints
Under the GDPR you have the right to access, rectification, erasure, restriction, objection and data portability, and to withdraw consent at any time where processing is based on consent. A parent or guardian may exercise these rights on a child’s behalf. Email [email protected]. We respond within one month, free of charge in ordinary cases.
You can also lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se, or with the supervisory authority where you live.