Legal
Privacy Policy
Last updated: 5 September 2026 · This document also serves as the KVKK (Law No. 6698) disclosure notice.
Fableself makes one-of-a-kind storybooks from the photos and stories you entrust to us. That trust is the whole business, so we collect the minimum, use it for one purpose only, and delete it when the book ships. This policy explains exactly what happens to your data.
1. Who is responsible (Data Controller)
The data controller within the meaning of KVKK and the GDPR is Fableself ("we"). You can reach us for all privacy matters at contact@fableself.com.
2. What we collect
When you create a book we collect: your name and email address; the names and roles of the people in your story; the photos you upload; and the story details you write in the order journey (occasion, setting, tone, dedication and similar). Our servers also keep short-lived technical logs (IP address, request time) for security and abuse prevention. We do not use advertising trackers or analytics cookies.
3. Your photos, the strictest rule we have
Photos are used for exactly one purpose: creating your book's illustrations. They are stored in access-controlled storage under unguessable addresses, are never shared with third parties beyond the processors listed below, are never used to train AI models, and are deleted after your book ships, at most 30 days after delivery. If you abandon an order, uploaded photos are deleted within 30 days of the upload.
4. Your book is made with AI
Your book's text and illustrations are generated by AI models; an editor then reviews every page, regenerates whatever misses, and only after that does the proof reach you. That means part of your data goes to those models, so here is exactly who receives what. Illustrations: the photos you upload go, together with the scene brief, to Google LLC's Gemini image model, so the characters look like the real people. Story text: the names and roles of the people in the story, the details you tell us, the setting, tone, dedication and title go to the model that writes the prose, which is either Anthropic PBC's Claude or Google's Gemini. No photograph is ever sent to the writing model. No model receives your name, email address, shipping address or payment details. Under our API agreements neither provider uses this data to train their models, which is a different contract from the free consumer apps. What the models produce is downloaded to our own servers and stored with your order; retention periods are in the section below.
5. Children's data
Most books are made for a child, so photographs of children and details about them are among the data we regularly process. Only a parent or legal guardian may upload them; whoever places the order is taken to have declared that they are the child's parent or guardian, or that they have permission from them. Nobody under eighteen can place an order themselves. A child's photographs and details are processed for one purpose only: writing and illustrating that book. They are not used for advertising, profiling or model training, are never sold, and our print partner receives only the finished book to be printed, not the raw photographs. The legal basis is the guardian's explicit consent together with performance of the contract you asked for. Photographs are deleted within thirty days of the book shipping at the latest, and a guardian can ask for deletion sooner by writing to contact@fableself.com, with no reason required. We use a child's likeness only to produce the illustrations for the book; we do not process it for identification or biometric recognition.
6. Why we process your data (legal bases)
We process order details, contact information and story content to perform the contract you request, writing, illustrating, proofing and shipping your book (KVKK art. 5/2-c; GDPR art. 6/1-b). We process photos, which may reveal special categories of data, on the basis of your explicit consent given at the upload step (KVKK art. 6; GDPR art. 9/2-a). Security logs rest on our legitimate interest in keeping the service safe (GDPR art. 6/1-f).
7. Who we share data with (processors)
We share data only with service providers who are contractually bound to process it solely on our instructions: our hosting and storage provider (Vercel Inc., USA), the AI providers that generate the book's text and illustrations (Google LLC and Anthropic PBC, USA; which one receives what is set out in the section above), our print-on-demand partner (who receives the finished book file and your shipping address, never your source photos), and our email provider for order correspondence. Some providers are located outside Türkiye/the EEA; transfers rely on the providers' standard contractual safeguards. We never sell personal data.
8. How long we keep data
Photos: deleted at most 30 days after your book ships (see above). Story content and proofs: kept while your order is active and for up to 12 months afterwards so we can reprint a damaged or lost book on request, then deleted. Invoicing records: kept as long as tax and commercial law require. Security logs: at most 90 days.
9. Cookies and on-device storage
Strictly necessary cookies: your language preference, and a session cookie if you are signed in. These are required for the site to work and are not subject to consent. Measurement cookies: we use Google Analytics and Microsoft Clarity to see how many people use the site and how. Clarity also records anonymous session replays, meaning movement and clicks on the page are recorded. Those two tools and the cookies they write load only if you press Accept in the cookie bar; if you decline, they never load. You can change your choice at any time from the Cookie choice link in the footer, and when you decline we also try to delete those cookies. We additionally use your browser's local storage to keep your order progress on your own device; your name and email are never written there, and it is cleared when you submit the order.
10. Your rights under KVKK (Law No. 6698, art. 11)
If you are in Türkiye, you may at any time: learn whether your personal data is processed; request information about that processing; learn the purpose and whether data is used accordingly; know the third parties to whom data is transferred in Türkiye or abroad; request correction of incomplete or incorrect data; request deletion or destruction of your data; request that corrections and deletions be notified to third parties; object to results produced exclusively by automated analysis; and claim compensation for damages arising from unlawful processing. Submit requests to contact@fableself.com; we answer within 30 days, free of charge. You may also complain to the Personal Data Protection Board (KVKK Kurulu).
11. Your rights under the GDPR
If you are in the EU/EEA or UK, you have the rights of access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability and objection, and the right to withdraw consent at any time without affecting prior processing. Withdrawing consent for photos before your book is produced cancels the order. You may lodge a complaint with your local supervisory authority.
12. Changes to this policy
If we change this policy in a way that matters, we update the date at the top and, for material changes affecting an active order, we notify you by email. The current version always lives at this address.
Questions or requests: contact@fableself.com, we respond to data requests within 30 days at the latest.