← Back to FableKit

Privacy Policy

Last updated: 2 March 2026

This Privacy Policy explains how Simpaira Ltd. ("Company", "we", "us", "our") collects, uses, and protects your information when you use the FableKit service at fablekit.com ("Service").

We are committed to protecting your privacy and your child's privacy. FableKit is designed with a privacy-first approach — we collect only what is necessary to provide the Service.

1. Information We Collect

DataPurposeStored Where
WhatsApp phone numberAccount authentication & story deliveryGoogle Cloud Firestore (EU)
Child's first namePersonalising storiesFirestore (EU)
Child's age rangeAge-appropriate vocabulary & themesFirestore (EU)
Parent's nameAccount profile & print ordersFirestore (EU)
Child's appearance descriptionAI illustration personalisation (optional)Firestore (EU)
Child's photo (optional)Analysed by AI to describe appearance for illustrations — not storedProcessed in memory only
Generated stories & illustrationsYour story libraryFirestore + Cloud Storage (EU)
Payment informationProcessing purchasesStripe (PCI-compliant) — we never see your card details
Shipping addressPrint order deliveryPassed to Lulu (print partner) — not stored by us

2. How We Use Your Information

3. Children's Privacy

FableKit is a service for parents to create stories for their children. Children do not interact with the Service directly. All accounts are created and managed by parents or legal guardians.

We collect only a child's first name and age range — the minimum needed to personalise stories. We do not:

4. Data Sharing

We do not sell your data. We share information only with the following service providers, strictly as needed to operate the Service:

All service providers are bound by their own privacy policies and data processing agreements.

5. Data Storage & Security

Your data is stored in Google Cloud Firestore in the europe-west1 (Belgium) region. All data is encrypted at rest and in transit. Access to production systems is restricted to authorised personnel only.

Session tokens (JWTs) are signed with a secret key and expire after 30 days. Verification codes expire after 10 minutes.

6. Cookies & Tracking

FableKit does not use cookies, analytics trackers, or third-party tracking scripts. We use localStorage in your browser solely to store your session token for authentication. No tracking or advertising identifiers are used.

7. Your Rights (GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the right to:

To exercise any of these rights, email us at info@simpaira.com. We will respond within 30 days.

8. Data Retention

9. Legal Basis for Processing

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the Service or WhatsApp. The "Last updated" date at the top of this page indicates the most recent revision.

11. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights:

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO).