Privacy Policy

01

Who we are

Fablio is developed and operated by MIDA Labs, a product lab based at Balıkesir Teknokent in Balıkesir, Türkiye. For the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the EU and UK General Data Protection Regulation (“GDPR”) and similar laws, the data controller is Ali Efe Sarıkaya, acting for MIDA Labs (“we”, “us”).

This policy applies to the Fablio apps for iOS and Android, the website fablio.co, and our communications with you about Fablio. It does not cover third-party services linked from Fablio, such as the App Store or Google Play, which have their own privacy policies.

02

Children and families

Fablio is made for families with children of about 4 to 10 years old. It is designed so that children can enjoy stories without giving us any information about themselves.

• Accounts must be created and managed by a parent or legal guardian who is at least 18 years old, or the age of majority where they live.
• Stories are created by choosing from ready-made characters, places and endings. There are no free-text fields, and we never ask for a child’s name, age, gender, appearance, photo, voice or location.
• There is no chat, no messaging, no public profile and no way to share content with other users.
• Fablio contains no advertising.
• Purchases, feedback and account deletion are protected by a parental gate.

We do not knowingly collect personal information from children. If you believe a child has created an account or given us personal information, contact us at hello@midalabs.ai and we will delete it.

In the United States, parents have rights under the Children’s Online Privacy Protection Act (COPPA) to review and delete information about their child and to refuse its further collection. You can use these rights by writing to us.

03

Information we collect

Information you give us

• Account details: your first and last name, email address, country and password. Passwords are stored by our authentication provider in hashed form, so we cannot see them.
• Sign in with Apple or Google: if you use either, we receive the name and email address the provider shares with us. With Apple, this can be a private relay address.
• Feedback and support: anything you send us through the in-app feedback form or by email, together with the app version and platform.

Information created when you use Fablio

• Stories: the choices you make (characters, place, ending, language, voice and length), the resulting story text, cover illustration and narration audio, and whether you saved the story.
• Account activity: your plan, daily story allowance and voice-token balance, and technical records of each story request, such as its status, duration and any errors.
• Purchases: subscription and purchase status, product, start and end dates, and the store used. Payments are processed by Apple or Google; we never receive your card or bank details.

Information from your device

• Device and app details: device make and model, operating system version, app version, app language and, on the website, browser type.
• Push notification token, if you allow notifications.
• IP address and request logs, which our servers and hosting providers process when your device connects to them.
• Crash reports and performance data, such as error messages, the screen where an error happened and how long operations take.

Session recordings

On iOS and Android, a random sample of about 1 in 10 app sessions is recorded by a session analytics service. A recording captures the screens shown in Fablio and the taps and gestures made during that session, and it is linked to your account ID, email address, plan and country. We use recordings to find and fix usability problems.

What we don’t collect

Fablio does not access your device’s location, contacts, photos, camera or microphone, and it does not collect advertising identifiers (IDFA or Android Advertising ID). If you turn on Face ID, Touch ID or fingerprint sign-in, the check happens entirely on your device and no biometric data reaches us.

04

How we use information

We use information only for the purposes below. The legal bases correspond to Article 6 of the GDPR and Article 5 of KVKK.

We do not sell personal information, we do not show ads in Fablio, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Where we rely on legitimate interests, you can object at any time (see section 10).

05

How stories are generated

Fablio uses artificial intelligence services to write, illustrate and narrate stories. When you create a story:

1. your story choices and language are sent to an AI language model provider, which writes the story;
2. a short scene description written by that model is sent to an AI image generation provider, which draws the cover illustration;
3. the story text is sent to a text-to-speech provider, which creates the narration.

Finished stories, covers and audio are kept in our database and file storage. Story files are stored at long, unguessable web addresses so the app can load them; these addresses are never published or shared with other users.

Stories are generated with safety instructions designed to keep content suitable for children. AI can still make mistakes. If you ever see something inappropriate, please tell us.

06

Who we share information with

We do not sell personal information. We share it only in the situations below, and only as much as each purpose requires.

Companies that work on our behalf

We use carefully selected companies to operate Fablio for us. They may use personal information only to provide their services to us, under agreements that require confidentiality and appropriate security. They fall into these categories:

• cloud hosting, database, sign-in and file storage providers;
• artificial intelligence providers that write, illustrate and narrate stories (see section 5);
• Apple, Google and a subscription management service, for app distribution, payments, subscriptions and sign-in;
• push notification services;
• crash reporting, performance monitoring and session analytics services;
• website hosting and font delivery services.

Advertising measurement

We advertise Fablio to parents on other platforms. To learn whether those ads work, the Android app includes software development kits from the advertising platforms we use. They receive events such as app installs and launches, account sign-ups (with the sign-in method used) and subscription purchases (with product, price and currency), together with device and network details such as IP address, device model and operating system version. We have disabled collection of the Android Advertising ID, and we do not send them your name, email address or account ID. These platforms process this information under their own privacy policies.

The iOS app does not include these kits. On iOS we use Apple’s privacy-preserving attribution frameworks, which report only aggregated, anonymous campaign results.

Other disclosures

• Legal reasons: when required by law, a court order or a competent authority, or when necessary to protect the rights, safety or property of our users, the public or us.
• Business changes: if MIDA Labs is involved in a merger, acquisition or sale of assets, information may be transferred to the new owner, who must continue to protect it as described in this policy.
• With your permission: in any other case, only with your consent.
• Our team: only authorised MIDA Labs staff who need access to operate and support Fablio can view account data.

07

International transfers

MIDA Labs is based in Türkiye. Our main database and file storage are hosted in Frankfurt, Germany. Several of our service providers are located in, or process information in, the United States and other countries outside Türkiye and the European Economic Area.

When information is transferred abroad, we rely on the safeguards available under applicable law, such as standard contractual clauses under KVKK or the GDPR, adequacy decisions, or the EU–U.S. Data Privacy Framework where a provider participates in it. You can ask us for more information about these safeguards.

08

How long we keep data

• Account details and stories: for as long as your account exists. Depending on your plan, some stories may stop appearing in your library after a period of time; all of them are erased when you delete your account.
• Temporary processing data on our story server: removed automatically within 7 days.
• Crash reports, performance data and session recordings: kept by the relevant service providers for their standard retention periods, then deleted automatically.
• Purchase records: Apple, Google and our subscription management service may keep transaction records for as long as needed for accounting, tax and fraud prevention.
• Emails and feedback: as long as needed to deal with your message and any follow-up.

Where the law requires us to keep information for longer, or it is needed for a legal claim, we keep only what is necessary for that purpose and only for as long as necessary.

09

Deleting your account

You can delete your account at any time in the app:

1. Open Fablio and go to Settings.
2. Complete the parental gate.
3. Tap Delete Account and confirm.

Deletion is permanent and takes effect immediately. We erase your profile, all your stories with their covers and audio, the subscription records in our database, the devices registered for notifications, your in-app feedback, and the activity records linked to your account.

Copies held by service providers, such as crash reports, session recordings, push notification records and subscription records, are deleted according to their retention schedules. If you would like us to ask them to delete this information sooner, or you can no longer access the app, email hello@midalabs.ai from the address linked to your account.

10

Your rights

Depending on where you live, and in particular under Article 11 of KVKK and the GDPR, you have the right to:

• learn whether we process your personal data and receive a copy of it;
• learn the purpose of the processing and whether the data is used for that purpose;
• know the third parties, in Türkiye or abroad, to whom it is transferred;
• have inaccurate or incomplete data corrected, and have those third parties informed;
• have your data erased or anonymised, and have those third parties informed;
• receive your data in a structured, portable format;
• restrict processing, or object to it, including processing based on legitimate interests;
• withdraw your consent at any time, for example by turning off notifications in your device settings;
• object to a result that affects you negatively and was produced solely by automated analysis;
• claim compensation for damage caused by unlawful processing.

To use these rights, email hello@midalabs.ai from the address linked to your Fablio account, or send a written request to the address in section 14. We may ask you to confirm your identity. We reply free of charge and within 30 days at the latest.

You also have the right to complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu, kvkk.gov.tr); in the EU, the authority of the country where you live; in the UK, the Information Commissioner’s Office (ico.org.uk). We would appreciate the chance to address your concern first.

Residents of some U.S. states have similar rights to access, correct and delete personal information. We honour these requests wherever you live.

11

Security

We protect information with measures appropriate to its sensitivity:

• connections between Fablio and our servers are encrypted (HTTPS/TLS);
• database access rules let each account reach only its own data, and administrative access is limited to authorised staff;
• if you choose to save your sign-in details on your device, they are kept in the iOS Keychain or Android Keystore and unlocked with your device’s biometrics;
• purchases, feedback and account deletion are protected by a parental gate.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

12

Local storage and cookies

The apps store a small amount of information on your device so they work properly, such as your sign-in session, language and app-update preferences. On Android, this app data may be included in your device’s backup to your Google account if device backup is turned on.

fablio.co does not use advertising or analytics cookies. It stores only what it needs to work, such as your language choice, reports errors to a crash monitoring service and loads fonts from a font delivery service. This page on midalabs.ai sets no cookies.

13

Changes to this policy

We may update this policy as Fablio changes. We will update the effective date at the top of this page and, if the changes are significant, tell you in the app or by email before they take effect.

This policy is available in English, Turkish, German, Spanish, French and Italian. If the versions differ, the English version prevails, unless local law requires otherwise.

14

Contact us

For questions about this policy or your personal information, contact us:

Email

hello@midalabs.ai

Data controller

Ali Efe Sarıkaya, for MIDA Labs

Address

MIDA Labs, Balıkesir Teknokent, Balıkesir, Türkiye

Product

Fablio for iOS, Android and fablio.co

Applications under KVKK may also be made in writing to the address above, or by any other method set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.