Skip to content

Privacy Policy

Last updated 28 October 2026

This policy explains how Funky Fables handles personal information. It covers the adult account holder and the child profiles on the account. A separate notice, Children’s Privacy, sets out the extra protections for children.

The short version

  • You sign in with an email address and a one-time code. We never ask for a password.
  • Child profiles hold only a nickname, date of birth, gender and an avatar chosen from our list. No photos.
  • We track which stories are listened to so progress, favourites and recommendations work.
  • We do not sell personal information. We use and share it only to run Funky Fables.
  • There is no third-party analytics, advertising or tracking in our app.
  • The marketing website may use analytics and advertising tools. They are not in the app and never see child profiles.
  • You can see, correct or delete your family’s information at any time.

1. Who we are

Funky Fables is operated by [Company legal name] (ABN [ABN]), an Australian company (“we”, “us”). We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles, and we apply the same standards to visitors and families in other countries. Contact us at support@funkyfables.com.

2. What we collect

The account holder (a parent or guardian)

  • Email address, used to sign in, to send the one-time sign-in code and to contact you about your account.
  • Sign-in and security details, such as when you signed in, the session we keep so you stay signed in on a device, and your IP address and device type for security and abuse prevention.
  • Plan and billing details once paid plans begin. Payments are handled by Stripe. We receive your plan status, the last four digits and brand of your card, and billing country, but not the full card number.
  • Messages you send us for support.

Child profiles

You create up to 6 profiles. For each one we store:

  • a nickname you choose (please do not use a full name);
  • a date of birth, used to suggest age-appropriate stories;
  • a gender option (girl, boy or prefer not to say), used for personalising the experience; and
  • an avatar picked from our supplied list. Children cannot upload photos or images.

How stories are used

For each profile we record how it uses the library, including:

  • stories started, the page reached, whether a story was finished, and how many times it was listened to;
  • favourites, likes and dislikes, and which stories are downloaded;
  • the days a profile listened (used for streaks and badges), and badges earned; and
  • app version, device type and technical logs such as errors, used to keep the Service working and to improve it.

We do not collect a child’s precise location, contacts, photos, microphone recordings or advertising identifiers, and children cannot chat or share anything with other people.

Cookies and similar technologies

Signed-in areas use cookies or storage that keep you signed in and remember the selected profile. The marketing website may also use analytics and advertising tools. See our Cookies and Tracking page.

3. How we use it

  • To create and secure your account, and to provide, personalise and operate the stories, profiles, progress and offline downloads.
  • To apply plan rules, such as the weekly limit on a free plan and the family group rules in our Terms.
  • To process payments, prevent fraud and meet tax and accounting rules once paid plans begin.
  • To understand how the app is used so we can fix problems, choose which stories to make and improve the Service.
  • To respond to you, give support and send service messages such as sign-in codes and important notices.
  • To protect children, enforce our Terms, and comply with the law.
  • To market to the account holder, but only with their consent where the law requires it. You can opt out at any time.

We do not use a child’s information for advertising, to build advertising profiles, or to make decisions that have legal or similarly significant effects. We do not use personal information to train AI systems. See our AI Policy.

Legal bases (UK and EU). We rely on contract (to provide the Service you ask for), legitimate interests (security, improving the Service, which we balance against your and your child’s rights), legal obligation, and consent (marketing, optional cookies and, where required, parental consent for a child).

4. Who we share it with

We do not sell personal information, and we do not share it for advertising. We share it only with the following, and only as needed to run Funky Fables:

WhoWhyWhat
SupabaseDatabase, account sign-in and one-time codesEmail, profiles, usage records
Our hosting provider (Vercel)Runs the website and the service that powers the appRequests, IP addresses and logs
Email delivery providerSends sign-in codes and service emailsEmail address and message
Stripe (when paid plans begin)Payments and subscriptionsEmail, plan and payment details
Apple and GoogleDistribute the app and hold your store accountWhat their own policies describe. We do not send them child profile data

These providers act on our instructions under contracts that require them to protect the information and use it only for us. We may also disclose information if the law requires it, to protect someone’s safety, or to enforce our Terms, and if we merge or sell our business (the buyer would have to honour this policy).

The list above may change as we add providers; we will update this page and tell you where the law requires.

5. Where information is stored

Our providers store and process information in [Supabase and hosting region] and may access it from other countries, including the United States. When information leaves your country, we take steps to make sure it is protected, such as contracts with the standard clauses required by privacy laws.

6. How long we keep it

  • While your account is active we keep your account and profile information so the Service works.
  • If you delete your account, we delete the account, every profile, and all of their usage records straight away. Copies in encrypted backups are overwritten within 35 days.
  • Inactive accounts that have not been used for 24 months are deleted after we email you a warning.
  • What we may keep after deletion is limited to what the law or a genuine need requires: billing and tax records for up to 7 years, a record that you asked to be deleted, security and fraud-prevention logs, and information needed to resolve a dispute or comply with the law. We keep it only as long as that reason lasts, and we do not use it for anything else.

You can remove a child profile at any time. Removing it deletes that profile’s nickname, date of birth, gender, avatar and usage records.

7. Keeping it safe

We protect information with encryption in transit, access controls so each account can reach only its own data, limited staff access, and passwordless sign-in. No system is perfectly secure. If a breach is likely to cause serious harm, we will notify you and the regulator as the law requires, including under the Australian Notifiable Data Breaches scheme.

8. Your rights and choices

You can ask us to give you access to, correct or delete your information, or to export it, and you can object to or restrict some uses. Account holders can edit or remove profiles and delete the whole account in the app and on the website. For anything else, email support@funkyfables.com. We may need to confirm that you are the account holder first, and we will reply within 30 days. There is no charge, unless a request is clearly excessive.

Parents and guardians can also review, correct and delete their child’s information, and refuse further collection, as set out in Children’s Privacy.

9. Rights by region

Australia

Under the Privacy Act you may request access to and correction of your personal information. If you are not happy with our response you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. We are following the Children’s Online Privacy Code being developed by the OAIC and will update our practices when it applies to us.

European Economic Area and United Kingdom

Under the GDPR and UK GDPR you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time. You may complain to your local data protection authority. Children’s information is processed only with the consent of a parent or guardian.

United States

We follow the Children’s Online Privacy Protection Act (COPPA). Residents of California and some other states have rights to know, access, correct and delete their information and to opt out of its sale or sharing for targeted advertising. We do not sell or share personal information for targeted advertising, and we do not discriminate against anyone who uses their rights. We honour the Global Privacy Control signal on our website.

10. The website versus the app

The funkyfables.com marketing pages may use analytics and advertising tools, such as Google Analytics, to measure visits and the performance of our advertising. They run only on those public pages, and where the law requires it only after you agree. They are not used in the app, the signed-in library, the story player or on a child’s profile. Our app has no third-party tracking or advertising software.

11. Changes to this policy

We will update this page when our practices change and show the date at the top. For material changes we will email the account holder, and where the law requires it we will ask for consent again, including a parent’s consent for a child’s information.

12. Contact and complaints

Email support@funkyfables.com with the subject “Privacy”. We will investigate and reply within 30 days. If you are not satisfied you can contact the OAIC, or the data protection authority where you live.

[Company legal name] (ABN [ABN]), operator of Funky Fables.