Fablyos: Privacy Policy
The short version (not a substitute for the policy below)
- Your stories are encrypted with a key only your password or recovery code unlocks. We can't read them.
- We don't sell your data, show ads, track you across sites, or train AI on your stories.
- To write and check stories, your text goes to the AI and safety services listed in Section 5.
- You can download your stories and delete your account at any time. For other privacy requests, write to privacy@fablyos.com (Section 11).
- What We Collect
- How We Use It
- Encryption of Stories
- Recovery Code
- Who Processes Your Data
- Pictures
- Cookies
- Retention
- Reports and Feedback
- The Android App
- Your Privacy Rights
- Children's Privacy
- Security
- International Users
- Changes
- Contact
This Privacy Policy explains how Fablyos LLC, a Texas limited liability company ("Fablyos," "we," "us" or the "Operator"), collects, uses and shares personal information through the Fablyos website at fablyos.com, the Fablyos Android app, and related services (the "Service"). It forms part of the Terms of Service (the "Terms"), and terms defined there have the same meaning here. Fablyos LLC is responsible for your personal information.
1. What We Collect
| Information | Source | Why we use it |
|---|---|---|
| Username, password (stored only as a salted hash), email address if you give one | You | To create and secure your account and contact you about it |
| Month and year of birth (never the day); adult or teen status; whether your age was additionally verified | You; an app store where applicable | Only to apply the age rules in Section 2 of the Terms. Never sent to the services that write, check or illustrate stories |
| Your acceptance of the Terms and its date | You | To record our agreement |
| Stories, save points, worlds, world-builder answers, settings | You and the Service | To provide the Service. Stored encrypted (Section 3) |
| Sign-in records: IP address, browser or device type, times | Your device | Security, preventing abuse, enforcing registration limits |
| Usage and spending: which features you used and their cost | The Service | Applying allowances, billing, and understanding how the Service is used |
| Safety records: time, story, category and scores of blocked Content (never the Content) | The Service | Enforcing Sections 4 to 6 of the Terms and legal compliance |
| Reports and feedback you send, including any story text you include | You | Reviewing Content, enforcing the Terms, improving the Service (Section 9) |
We do not collect your precise location, contacts, photos (other than pictures you choose to upload), or payment card details (any future payment provider would collect those directly).
2. How We Use It
Only to: provide, secure and maintain the Service; apply age rules, Content Levels and allowances; prevent fraud, abuse and violations of the Terms; respond to you; improve the Service's writing, filters and features using reports, feedback and aggregate usage figures; and comply with law. We do not sell your personal information, share it for targeted advertising, use it for profiling with legal or similarly significant effects, or use your stories to train AI models.
3. Encryption of Stories
Your stories, save points, worlds you do not share, and stored pictures are private to you. They are encrypted with keys that only your password (or your recovery code) can unlock. Those keys are held in the Service's memory only while you are signed in and are never written to disk. The Operator cannot read your stored stories; its administrative tools show only metadata such as Content Level, number of passages, size and cost. While you play, your text is necessarily processed in memory by the Service and the Third-Party Providers in Section 5 in order to write and check it. World maps, and the cards of worlds you share, are stored unencrypted.
4. Recovery Code
When your account is created you are shown a recovery code once. If you forget your password, or if the Operator resets it at your request, your stories can be unlocked only with that code. If both your password and your recovery code are lost, your encrypted stories and worlds cannot be recovered by anyone, including the Operator, and may be deleted. You can make a new recovery code at any time under Account.
5. Who Processes Your Data
To write, illustrate and check Content, the Service sends the necessary text and pictures, never your name, email, birth date or account details, to these Third-Party Providers:
| Provider | What it receives | Purpose |
|---|---|---|
| OpenRouter, Inc. and the AI model providers it routes requests to | Story text, cards, world-builder answers | Writing passages, building worlds, AI classification of sexual Content |
| Wiro | Picture and clip descriptions; reference pictures you choose to use | Generating pictures and clips |
| OpenAI | Text and generated pictures | Moderation (Terms Section 6.2(c)) |
Their processing is governed by their own terms and privacy policies. The Service is hosted on servers in the United States operated by our hosting provider, which stores our data but does not use it.
6. Pictures
Generated pictures are not kept on our server or at the image provider: once a picture passes review it is delivered once to your device, and the Operator directs the image provider to delete its copy (the provider may keep a record of the request). Pictures are then held only in your browser's storage on that device and are lost if you clear it. The exceptions are one small cover picture per story, kept only if suitable for the Teen Content Level; world map paintings; and a cover picture a world's owner uploads, which must be suitable for the Teen Content Level and is shown with the world, including in the shared catalog, until removed.
7. Cookies and Similar Technologies
The Service uses one sign-in cookie, a short-lived cookie recording that a browser failed the age gate, and your browser's storage for settings and for pictures on your device. It uses no advertising cookies, no third-party analytics and no cross-site tracking, so there is nothing to opt out of; "Do Not Track" and Global Privacy Control signals are respected by default.
8. Retention
| Data | Kept |
|---|---|
| Account, stories, save points, worlds | Until you delete them or your account |
| Sign-in sessions | Up to fourteen (14) days |
| Security and safety logs | Up to twelve (12) months; a record that an account was suspended for safety reasons is kept |
| Usage and spending | Detailed for ninety (90) days, then as daily totals |
| Reports | Handled reports twelve (12) months; story-problem reports from playtest accounts thirty (30) days; all deleted with your account |
| Feedback | Twelve (12) months; deleted with your account |
| Backups of the database (in which stories remain encrypted) | Up to six (6) months, then deleted on a rolling basis; deleted accounts disappear from backups as they expire |
After you delete your account, logs and usage totals remain identified only by a numeric account identifier (and, for security logs, IP addresses). Information the law requires us to keep or report is kept as the law requires.
9. Reports and Feedback
A report holds the reason you pick, your note, the story's number, its Content Level and, unless you untick it, the text of that passage (for a picture, its caption; pictures themselves are never sent). No story text is sent or kept with a report about minors. Reports and feedback are stored unencrypted so that the Operator can read and act on them.
10. The Android App
The app shows this website inside the app, collects nothing beyond what the website collects, and offers the same Content Levels. The app runs on your device's Chrome browser, so pictures you keep in the app are stored in Chrome's storage for fablyos.com; they are removed when you delete your account from that device or clear fablyos.com's site data in Chrome (uninstalling the app alone does not remove them).
11. Your Privacy Rights
Wherever you live, you can see and change your account details under Account; download your stories and the worlds you built; delete any story; and delete your account and its data at any time from the Library or at fablyos.com/delete-account.
Depending on your state of residence and applicable law, you may also have the right to:
- Confirm whether we process your personal data and access that data.
- Correct inaccuracies in your personal data.
- Request deletion of personal data we maintain about you.
- Obtain a portable copy of certain personal data you have provided to us.
- Opt out of certain processing activities where applicable law provides that right, including targeted advertising, the sale of personal data, or qualifying profiling. As Section 2 explains, we do not engage in these activities.
To submit a privacy request, contact privacy@fablyos.com. Please identify the request you are making and provide sufficient information for us to authenticate your request without collecting unnecessary additional personal data.
We will respond within the time required by applicable law. Where permitted by law, we may request additional information reasonably necessary to verify your identity or authority to act on another person's behalf. We will explain the basis for any denial where required and provide information about how to appeal that decision.
Appeals. If we deny a privacy request and applicable law provides a right to appeal, you may appeal by replying to our decision or contacting privacy@fablyos.com with the subject line "Privacy Request Appeal." We will review the appeal and inform you of our decision within the period required by applicable law, including information about any further complaint rights where required.
We do not discriminate against users for exercising privacy rights protected by applicable law.
Some rights are subject to legal exceptions. The availability of a particular right depends on your jurisdiction, the type of data involved, and applicable law.
Residents of the European Economic Area, the United Kingdom and Switzerland also have the rights to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority. Our legal bases are performing our contract with you (providing the Service), our legitimate interests (security, preventing abuse, improving the Service), legal obligations, and your consent where we ask for it.
12. Minimum Age and Children's Privacy
Fablyos is intended for users who are at least 13 years old. Individuals under 13 may not create or use an account.
We do not knowingly permit children under 13 to maintain accounts. If we learn that an account belongs to a child under 13, we will take appropriate steps to restrict the account and delete personal information collected from that child, as required by applicable law.
If you believe a child under 13 has created an account or provided personal information to Fablyos, please contact privacy@fablyos.com with the subject line "Under-13 Privacy Concern." Please do not include sensitive personal information or upload potentially illegal material in your report.
Our minimum-age policy does not eliminate any obligations that may apply under children's privacy laws. We will handle any affected personal information in accordance with applicable legal requirements.
13. Security
We use encryption in transit (HTTPS) and at rest for stories, hashed passwords, restricted server access and other safeguards. No system is completely secure. If a breach affects your personal information, we will notify you and the authorities as the law requires.
14. International Users
The Service is operated from and hosted in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States, where data protection laws may differ from those of your country.
15. Changes
Changes to this Privacy Policy are made as described in Section 18 of the Terms. The version and effective date appear at the top of this page.
16. Contact
Fablyos LLC, 5900 Balcones Drive, Suite 100, Austin, TX 78731, United States. Privacy requests and appeals: privacy@fablyos.com. Other questions: support@fablyos.com, or Send feedback in the Library.