Privacy Policy

Last Updated: January 6, 2026

1. INTRODUCTION

Welcome to Fairy Kids Atelier ("we", "us", "our"). We take the protection of your personal data very seriously and handle your personal information confidentially and in accordance with data protection laws and this Privacy Policy.

This Privacy Policy explains what personal data we collect, how we process it, and what rights you have.

Data Controller: Boumaland Ltd. [Your Address] [Your Email] [Your Phone Number]

2. WHAT DATA WE COLLECT

2.1 Account Data

When you register on our website, we collect:

Email address (for login and communication)

Password (stored encrypted)

This data is processed and stored by our website provider Wix.com.

2.2 Story Data

When you create a personalized bedtime story, we store:

Child's name (for story personalization)

Child's age (to tailor the story appropriately)

Physical characteristics (hair color, eye color, skin tone - for illustration purposes only)

Story theme (e.g., Ocean, Space, Forest)

Additional notes (optional parent requests)

Generated story text (AI-generated narrative)

Generated images (AI-generated illustrations)

Generated video (final bedtime story video)

This data is stored in our database (Supabase).

2.3 Usage Data

We automatically collect:

IP address

Browser type and version

Pages visited and clicks

Date and time of access

2.4 Payment Data

When you make purchases, payment data is processed by our payment provider Wix Payments. We do not store complete credit card information.

3. PURPOSE OF DATA PROCESSING

We process your data for the following purposes:

3.1 Contract Fulfillment (Legal Basis: Contract Performance)

Creating your account

Generating personalized bedtime stories

Providing and storing your videos

Processing payments

3.2 Legitimate Interest (Legal Basis: Legitimate Business Interest)

Improving our services

Technical administration of the website

Preventing abuse

3.3 Consent (Legal Basis: Your Explicit Consent)

Newsletter delivery (only with your express consent)

Marketing communications (only with your express consent)

4. DATA SHARING

4.1 Service Providers

We share your data with the following trusted service providers:

Wix.com Ltd. (Website hosting and account management)

Location: Israel (adequate data protection level recognized by EU Commission)

Purpose: Website provision and account management

Supabase Inc. (Database)

Location: USA (Standard Contractual Clauses)

Purpose: Storage of story data

OpenAI / Groq (AI text generation)

Purpose: Creating story narratives

Note: We only transmit general information (age, theme), not real names

FAL.AI (AI image generation)

Purpose: Creating illustrations

Note: Descriptions used only for image generation

ElevenLabs (Voice synthesis)

Purpose: Creating voice narration

Note: Only story text is transmitted

4.2 Legal Obligations

We share data when legally required (e.g., to law enforcement authorities).

5. DATA RETENTION

Account data: Until you delete your account
Story data: Stored permanently until you request deletion
Usage data: 30 days
Payment data: Per legal retention requirements (10 years for accounting)

6. YOUR RIGHTS

You have the following rights:

6.1 Right to Access

You can request information about your stored data.

6.2 Right to Rectification

You can request correction of incorrect data.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your data.

6.4 Right to Restriction

You can request restriction of data processing.

6.5 Right to Data Portability

You can receive your data in a structured format.

6.6 Right to Object

You can object to the processing of your data.

6.7 Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.

For EU residents: Your local data protection authority (List: https://edpb.europa.eu/about-edpb/about-edpb/members_en)

For UK residents: Information Commissioner's Office (ICO) Website: https://ico.org.uk

7. DATA SECURITY

We implement technical and organizational security measures:

SSL/TLS encryption for all data transmissions

Encrypted storage of sensitive data

Access restrictions to authorized personnel only

Regular security updates

8. CHILDREN

Our services are directed at parents and guardians. We do not knowingly collect data directly from children under 16 years of age. The input of a child's name and characteristics is done by parents for story personalization purposes.

9. COOKIES AND TRACKING

Our website uses cookies:

9.1 Necessary Cookies

Session cookies for login functionality

These are required for website operation

9.2 Analytics Cookies (optional)

Wix Analytics to improve the website

You can decline these cookies

You can manage cookies in your browser settings.

10. EXTERNAL LINKS

Our website may contain links to external websites (e.g., social media). We are not responsible for their privacy practices.

11. CHANGES TO THIS PRIVACY POLICY

We reserve the right to update this Privacy Policy to reflect changes in law or our services. The current version is always available on our website.

12. CONTACT

For privacy-related questions, contact us:

Email: Boumaland123@web.de

13. SPECIAL NOTE FOR PARENTS

What we DON'T do:

❌ We do NOT sell your data

❌ We do NOT share data with advertisers

❌ We do NOT use data for purposes other than creating your stories

❌ We do NOT store credit card details

What you CAN do:

✅ Download your stories at any time

✅ Delete your account and all data at any time

✅ Request information about stored data

✅ Receive your data in a portable format

14. CALIFORNIA RESIDENTS (CCPA)

If you are a California resident, you have additional rights:

Right to know what personal information is collected

Right to delete personal information

Right to opt-out of sale of personal information (we don't sell data)

Right to non-discrimination

To exercise these rights, contact us at Boumaland123@web.de

15. INTERNATIONAL DATA TRANSFERS

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place:

EU-US: Standard Contractual Clauses

UK-US: International Data Transfer Agreement

Adequacy decisions where applicable

16. DATA BREACH NOTIFICATION

In the unlikely event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law.

Your privacy and your family's security are important to us. If you have any questions, please don't hesitate to contact us!