Your stories belong to you.

Section i.Introduction.

i.1 Who we are

Fablr, LLC ("Fablr," "we," "us," or "our") operates Fablr.ai, a voice-powered autobiography service that helps you preserve your life stories through AI-assisted conversations.

i.2 What this policy covers

This Privacy Policy describes how we collect, use, protect, and share information about you when you use our website, mobile applications, and services (collectively, the "Services").

i.3 By using Fablr

By creating an account or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Services.

Section ii.Information we collect.

ii.1 Account information

• Name and email address (required for signup).
• Profile photo (optional, or via Google OAuth).
• Password (hashed and securely stored).
• Google account ID (if you sign in with Google).

ii.2 Voice recordings

When you use our voice conversation features, we collect:

• Audio recordings of your voice conversations.
• Recording duration and timestamp.
• Conversation topic and category.

ii.3 Conversation content

• Transcriptions of your voice conversations.
• Memories and stories you share.
• Dates, places, and people mentioned in your stories.
• Session metadata (date, duration, progress).

ii.4 AI-generated content

• Stories generated from your conversations.
• Memoir book compilations.
• Content labeled as "AI-Generated" or "AI-Assisted."

ii.5 Payment information

Payment information is processed by Stripe, our payment processor:

• We store: Stripe customer ID and plan/access status.
• Stripe stores: payment card information (PCI DSS compliant).
• We never see or store your complete credit card number.

ii.6 Usage and technical data

• Pages / features you access.
• Session duration and frequency.
• Device type, browser, and operating system.
• IP address (for WebRTC connections and rate limiting).
• Email delivery and engagement data (whether an email was delivered, opened, or clicked).
• Cookies (see Section ii.7 below).

ii.7 Cookies and tracking technologies

We use the following types of cookies and tracking technologies:

• Strictly necessary cookies: required for the site to function (session management, security tokens, and login state). These cookies are not removed by declining optional analytics cookies.
• Analytics cookies: help us understand how visitors use our site. We use PostHog for product analytics. These cookies are set unless you opt out (see Decline and Global Privacy Control below).
• Affiliate / marketing cookies: when you reach Fablr through a partner, publisher, or creator link, Rewardful may set a first-party referral identifier. Rewardful sets one unless you opt out. This identifier is used only to attribute referred sales of Fablr's own product.

Fablr serves the United States, where privacy law gives you the right to opt out rather than requiring us to ask first. So our website does not show a cookie banner. Analytics and advertising cookies and tags run unless you opt out. You can opt out at any time on our Do Not Sell or Share My Personal Information page, linked in our site footer, or by sending a Global Privacy Control signal. To undo a Decline in a browser, clear this site's cookies there; if you were signed in when you declined, email privacy@fablr.ai to turn sharing back on for your account.

Advertising measurement: Fablr serves the United States, where privacy law gives you the right to opt out of advertising measurement rather than requiring us to ask first. So we record advertising click identifiers, such as a Google or Meta click ID, when you arrive from an ad, and we send Google and Meta a server-side record of your purchase, unless you say no. Choosing Decline on our Your Privacy Choices page before you start checkout, sending a Global Privacy Control signal, or an opt-out for your account stops that purchase record. Even when you arrive with no ad, we set a first-party anonymous identifier in your browser by default and keep it for one year. It links visits from the same browser so we can credit the visit that led to a purchase, it holds no name, email, or other information you gave us, and Decline, a Global Privacy Control signal, or an opt-out for your account stops it being set. The Google Analytics and Meta Pixel tags in your browser follow the same rule: they load unless you opt out.

Do Not Track and Global Privacy Control: when you choose Decline on our Your Privacy Choices page, or your browser sends an active Global Privacy Control (GPC) signal, we stop optional analytics, advertising tags, and affiliate-cookie storage in that browser.

Email open and click tracking: the email we send you includes a small tracking image that helps us estimate whether our email is being opened. Some mail programs block these images and others load them automatically, so this signal is approximate. Three categories of email also route their links through our email provider, Postmark, so we can record which links are clicked: storyteller invitation and reminder email, including re-sent copies of the private recording link; story and chapter notification email, including story digests; and the email that announces a finished book. Account-security email, such as sign-in links and password resets, never uses link tracking. The Family Story Preservation Check result link is excluded from link tracking as described in Section ii.8.

ii.8 Family Story Preservation Check

If you choose to complete the Family Story Preservation Check, we store the option choices, calculated plan, requested delivery email, optional feedback, and separately optional newsletter choice to provide the plan and learn whether the check is useful. We do not use the check's answers or score for advertising. We send no lead or signup event to any advertising platform for the check. Ordinary page, advertising, and affiliate tracking are suppressed on both the public check page and the unlisted preview page. If you have accepted optional analytics, GPC is not active, and no other privacy preference blocks analytics, either page may send five content-free milestones: assessment started, section completed, email step reached, assessment completed, and completion duration. These milestones do not include your email, answers, scores, tailoring choices, result link, or detailed source information. Optional analytics remain fully suppressed on the private result page.

We delete identifiable check responses and their response-owned delivery and feedback records after 12 months. Before deletion, we may add only coarse, non-identifying counts and score totals to the check's aggregate statistics; those statistics contain no email, free text, detailed source, or cross-attribute profile, and reporting cells with fewer than 20 responses are suppressed. If you separately choose newsletter updates, that membership is retained under the newsletter's own consent and unsubscribe lifecycle and is not deleted merely because the check response expires.

Your private result link is a bearer link: anyone who has it can view the plan. The requested result email necessarily sends this link through Fablr's transactional email provider. Fablr sends a referrer policy that keeps the link from being shared with other sites, and excludes the link from application analytics, advertising-provider payloads, and application logs. Our hosting platform may still retain ordinary infrastructure access logs containing requested URL paths under its own operational retention; do not share the private link publicly.

ii.9 Testimonials

If you choose to share a testimonial about Fablr, we store the name you type for display, the relation, city and state, and age you choose to give, your words exactly as you wrote them, an optional private rating, and a contact email that is never shown publicly. We also record the IP address and browser of the submission and the exact permission text you agreed to, together with the name, attribution line, and words you confirmed on the read-back screen, so we can show what was agreed and verify any later request from you. A testimonial appears on fablr.ai and in Fablr marketing only after a person at Fablr reviews it, and only exactly as you confirmed it; we never rewrite it and no automated system edits it. The testimonial form is for adults only: the permission you tick states that you are 18 or older, and we do not knowingly accept a testimonial from anyone younger.

You can withdraw your permission at any time by emailing support@fablr.ai. Withdrawal removes the testimonial from every public surface. We keep the consent record and the withdrawal date so we can show what was agreed and when; you may ask us to delete that record entirely by emailing privacy@fablr.ai. Submissions we never publish are deleted after 12 months.

Section iii.How we use your information.

We use your information for the following purposes:

iii.1 Provide and improve services

• Enable voice conversations with our AI biographer.
• Process and transcribe your voice recordings.
• Generate written stories from your conversations.
• Create and deliver memoir books.
• Improve our service features, user interface, and conversation experience — your content is never used to train AI models.

iii.2 Account management

• Create and manage your account.
• Authenticate your identity.
• Communicate with you about your account and services.
• Provide customer support.

iii.3 Payment processing

• Process subscription payments.
• Manage billing and invoices.
• Prevent fraud and unauthorized transactions.

iii.4 Legal compliance

• Comply with applicable laws and regulations.
• Respond to legal requests (court orders, subpoenas).
• Enforce our Terms of Service.
• Protect the rights, property, or safety of Fablr, our users, or others.

iii.5 Preservation-check retention

Identifiable preservation-check responses, their private result links, requested-delivery state, and optional feedback are deleted after 12 months. We may retain only sufficiently populated aggregate counts that cannot identify a participant. Newsletter consent, if separately given, follows the newsletter's own consent and unsubscribe rules.

iii.6 Testimonial retention

Testimonial submissions that are never published are deleted after 12 months. Published testimonials remain until you withdraw them. Withdrawn testimonials leave every public surface at once; their consent and withdrawal records are kept unless you ask us to delete them.

Section iv.Voice recording and AI processing.

iv.1 Voice processing pipeline

Here's what happens when you record a conversation:

• Recording: your voice is captured through your browser or mobile app.
• Transmission: audio is securely transmitted via LiveKit WebRTC to our servers.
• AI processing: OpenAI's GPT Live voice model processes your voice in real time, with an OpenAI GPT model working behind it during the conversation.
• Storage: transcripts and stories are saved to our secure database.
• Your control: you can download or delete recordings at any time.

iv.2 Third-party AI services

We use the following AI services:

• OpenAI GPT Live: voice-to-voice conversation processing.
• OpenAI GPT models: story generation and content creation.
• LiveKit: WebRTC infrastructure for real-time voice transmission.

iv.3 AI data retention

• OpenAI: API requests retained for 30 days for abuse monitoring only.
• LiveKit: no permanent storage of voice streams (temporary buffering only).
• Fablr: we store transcripts and stories until you delete them.

iv.4 AI training policy

Your content is not used to train AI models for general use.

We send your content to OpenAI only to provide AI conversation and story features. Fablr does not permit OpenAI to use our API data for model training unless we explicitly opt in.

OpenAI may retain API abuse-monitoring logs that include customer content for up to 30 days under its API data-control policies, unless Fablr later qualifies for and enables a stronger retention control such as Zero Data Retention or Modified Abuse Monitoring. If we enable one of those controls, we will update this policy to describe it.

For more information, see OpenAI's API data controls and OpenAI's Privacy Policy.

Section v.Data sharing and third parties.

We do not sell your personal information. We do share some of it with Google and Meta so they can tell us which of our ads work. When you buy, our server sends Meta a hashed (SHA-256) copy of your email address and name, the order value, and Meta's click and browser identifiers when your browser has them. Unless you opted out, it also sends Google Analytics the transaction ID, amount, and product under your browser's analytics identifier; Google does not receive your email address or name. A printed book order also sends Meta a hashed phone number, network details such as an IP address and browser type, and order details. We send no signup or conversation events to Google or Meta, and the Fablr iPhone and iPad app does no ad tracking. California law may treat this as "sharing" for cross-context behavioral advertising. You can opt out with Decline on our Your Privacy Choices page, Global Privacy Control, or an opt-out for your account; the Do Not Sell or Share My Personal Information link in our site footer says what each one covers. An opt-out covers records we create after it; a checkout already in progress, or a record already waiting to be sent, may still go out.

When you reach us through an affiliate or referral link, the attribution data we share with the relevant affiliate network may include a click or referral identifier, page and purchase events, IP address, order value, and transaction ID so the partner who referred you can be credited.

v.1 Service providers we use

v.2 When we share data

• With your consent: when you explicitly authorize sharing.
• Legal obligations: to comply with laws, regulations, or legal processes.
• Business transfers: in connection with a merger, acquisition, or sale of assets. We will notify you via email before your personal information is transferred to a new entity and becomes subject to a different privacy policy.
• Protection: to protect our rights, property, or safety, or that of others.
• Aggregated data: we may share de-identified, aggregated information that cannot reasonably identify you (for example, total number of stories created across all users).

Section vi.Data retention.

We retain different types of data for different periods based on their purpose and legal requirements:

Voice recordings

90 days (default) or until you delete. Playback feature, user control.

Transcripts & stories

Account lifetime or until you delete. Core service feature.

Account data

Account lifetime + 30 days. Grace period for accidental deletion.

Payment records

7 years. Tax and accounting legal requirement.

AI processing logs (OpenAI)

30 days. Abuse monitoring (OpenAI policy).

Session metadata

90 days. Service improvement, support.

vi.1 Data deletion process

• Immediate: removed from your account when you delete.
• Within 30 days: deleted from production database.
• Within 90 days: purged from all backups.
• Exceptions: payment records (7 years), legal holds, fraud prevention.

Section vii.Your rights and choices.

vii.1 Rights for all users

• Access: view all data we have about you.
• Download: export your data in multiple formats (JSON, PDF, audio).
• Delete: delete recordings, stories, or your entire account.
• Correct: update inaccurate information.
• Opt-out: decline voice recording (use text-only mode).
• Withdraw consent: stop recording or AI processing at any time.

vii.2 EU / EEA / UK residents (GDPR rights)

You have additional rights under GDPR:

• Right to erasure: request deletion of your data (with limited exceptions).
• Right to restriction: limit how we process your data.
• Right to data portability: receive data in a machine-readable format.
• Right to object: object to certain types of processing.
• Right to lodge complaint: file a complaint with a supervisory authority.
• Response time: we respond within 30 days (may extend to 60 days).

vii.3 California residents (CCPA rights)

You have additional rights under CCPA / CPRA:

• Right to know: categories of data collected, purposes, third parties.
• Right to delete: request deletion (with exceptions).
• Right to correct: update inaccurate information.
• Right to opt-out: we do not sell personal information.
• Right to non-discrimination: no penalty for exercising rights.
• Response time: we respond within 45 days (may extend to 90 days).

Additional rights under CPRA (effective January 2023):

• Right to limit use of sensitive personal information: voice recordings and biometric data are considered sensitive personal information. You may request that we limit our use of this data to what is necessary to provide our service.
• Right to opt-out of sharing: we share limited personal information with Google and Meta for advertising measurement, which California law may treat as sharing for cross-context behavioral advertising (see Section v.). Opt out by choosing Decline on our Do Not Sell or Share My Personal Information page, turning on Global Privacy Control, or asking us to opt your account out.
• Authorized agents: you may designate an authorized agent to submit requests on your behalf. We may require written proof of the agent's authorization and verify your identity directly.

vii.4 How to exercise your rights

vii.5 Residents of other U.S. states

Several U.S. states provide additional privacy rights to their residents, including Virginia, Colorado, Connecticut, Texas, and others. If your state has a comprehensive privacy law, you may have rights to:

• Access and obtain a copy of your personal data.
• Request deletion of your personal data.
• Correct inaccurate personal data.
• Opt out of targeted advertising, sale of personal data, or profiling.

To exercise these rights, contact us at support@fablr.ai. We will respond within the timeframe required by your state's law.

Section viii.Security.

We implement industry-standard security measures to protect your data:

viii.1 Encryption

• In transit: TLS 1.2 or higher for all HTTPS connections.
• Voice transmission: WebRTC DTLS-SRTP for LiveKit connections.
• At rest: AES-256 encryption for database storage.
• Backups: all backups are encrypted.

viii.2 Access controls

• Role-based access: staff access limited by role.
• Least privilege: minimum necessary access only.
• Multi-factor authentication: required for admin accounts.
• Audit logs: administrative changes to user data are logged.

viii.3 Third-party security

• OpenAI: SOC 2 Type II certified.
• Stripe: PCI DSS Level 1 certified.
• LiveKit: enterprise-grade encryption.
• Render.com: SOC 2 Type II and ISO 27001 certified infrastructure.

viii.4 Security limitations

viii.5 Data breach notification

In the unlikely event of a data breach that compromises your personal information, we will notify you by email within 72 hours of confirming the breach. Our notification will describe the nature of the breach, the types of data affected, and the steps we are taking to address the incident and protect your information, as required by applicable state and federal law.

Section ix.Children's privacy.

ix.1 Age restrictions

• You must be 18 years or older to use Fablr, wherever you live.
• By creating an account, you confirm that you are at least 18 years old.

ix.2 Content about children

Your biography may include stories about children. You are responsible for:

• Ensuring you have the right to share information about children.
• Obtaining parental consent before recording children's voices.
• Respecting children's privacy in your stories.

ix.3 Inadvertent collection

If we discover we have collected data from a child under the minimum age, we will promptly delete it. Parents can contact support@fablr.ai to report inadvertent collection.

Section x.International data transfers.

x.1 U.S.-based service

Fablr is designed for users in the United States. Your data is processed and stored on servers located in the United States via Render.com. Our third-party service providers, including OpenAI and LiveKit, may process data on their own U.S.-based infrastructure to provide their respective services.

x.2 International users

If you access our Services from outside the United States, you do so at your own initiative. By using our Services, you consent to the transfer of your data to the United States, where privacy laws may differ from those in your jurisdiction. We require our service providers to protect your data through contractual obligations consistent with this Privacy Policy.

x.3 Appropriate safeguards

We implement appropriate safeguards including encryption and access controls to protect your data. All service providers listed in Section v. are contractually required to protect the data we share with them.

Section xi.Changes to this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

xi.1 How we notify you

• Email notification for material changes (at least 30 days in advance).
• In-app notification banner.
• Updated "Last updated" date at the top of this policy.

xi.2 Your acceptance

Continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy. If you do not agree to changes, you may cancel your account.

Section xii.Contact us.

If you have questions about this Privacy Policy or our data practices, please contact us: