1. Who is responsible
BeeBee Tones AB, org. no. 559589-2323, Sweden, is the data controller for Fabeligo and the support page. Contact us at hello@beebeetones.com.
2. The child app
Fabeligo is always free, with no purchases in the app. It has no accounts, advertising or analytics SDKs. We do not collect personal data from children. Listening progress, favourites and settings stay on the device.
When a device streams or downloads story files, our delivery provider processes the IP address and technical request data needed to deliver that file. We do not use this to identify a child or build a listening profile.
The app also downloads the public Story friends list described in section 4. It only fetches public information and never sends child data.
3. Optional adult web support
The /support page is voluntary and for adults only. It offers an optional one-time contribution in SEK. Stripe Checkout may show the amount in the payer’s local currency. A contribution does not buy access to Fabeligo and does not guarantee a story, language, reply, or delivery.
Our support service, run on Cloudflare (Workers and D1), stores Stripe payment identifiers, the amount and currency (SEK), purpose, optional wish, optional display name, your choices about showing your name, amount and wish, any public version of your wish that we have approved, moderation and work status, page language and timestamps. It does not store an email address or card details.
Stripe processes the payment and your receipt and contact details under its own privacy policy. Card payment may include Apple Pay or Google Pay where Stripe makes those available. The support form uses Cloudflare Turnstile to stop automated abuse, which processes technical browser and device signals for that check.
4. Story friends (public thanks)
Story friends is the public thanks list for adults who have contributed. It is voluntary and adult-only. A contribution appears only when it is paid, you have explicitly agreed to show your display name, and we have approved the name. We moderate names for a children’s audience.
The list shows the display name, purpose (the whole library, a story or a language), status (supporting, in progress or completed), the linked story or language once completed, and the date. The amount appears only if you separately chose to show it, which requires name consent. Your original wish, payment identifiers and contact details are never shown.
Showing a wish is a separate, optional choice that requires name consent. We never show your wish exactly as you wrote it. We write a short public version of at most 140 characters, may shorten or edit it (for example to remove a child’s name or anything that identifies a person) and approve it separately. It appears next to your name as plain text on this website and in the app. We may decline to show a wish.
Story friends appears on this website and inside the Fabeligo app. A completed story may also show your name as a supporter credit on that story.
You can withdraw by emailing hello@beebeetones.com. We then remove your name, your wish and its public version and revoke your consent. A refund or payment dispute also removes public attribution. App copies that are offline update on their next catalog refresh.
5. Legal bases (GDPR Article 6)
- Delivering stories: legitimate interests (Art. 6(1)(f)). Our content provider processes the IP address and technical request data to deliver story files and protect the service against abuse. Our interest is a working, secure service. We limit this to what is necessary and never build profiles.
- Handling a contribution: steps at your request (Art. 6(1)(b)). We process support data to take the steps you ask for when you choose to contribute, and to administer that contribution.
- Story friends: consent (Art. 6(1)(a)). Showing your display name, and separately your amount and your wish, is based on your consent. You can withdraw it at any time, without affecting processing that took place before.
- Accounting records: legal obligation (Art. 6(1)(c)). We keep payment records as required by the Swedish Bookkeeping Act (Bokföringslagen), currently for seven years.
- Bot protection: legitimate interests (Art. 6(1)(f)). Cloudflare Turnstile checks the support form to prevent automated abuse and fraud.
We do not use automated decision-making or profiling that produces legal or similarly significant effects (Art. 22).
6. How long we keep data
- On-device data (listening progress, favourites, settings, downloads) stays on the device until you delete the app.
- Delivery and security logs are kept by Cloudflare for a short period, up to 30 days.
- Support records are kept while needed to administer the contribution and public thanks. Payment records are kept privately for seven years under the Swedish Bookkeeping Act.
- Public thanks is shown until you withdraw consent or a refund or dispute removes it. Withdrawal also deletes your name, your wish and its public version.
7. International transfers
Cloudflare (content delivery, the support service and Turnstile) and Stripe (payments) are based in the United States and may process data outside the EU/EEA. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses (SCCs), with supplementary measures where needed.
8. Your rights and complaints
Under the GDPR you have the right to access, rectification, erasure, restriction, objection and data portability, and to withdraw consent at any time where processing is based on consent. A parent or guardian may exercise these rights on a child’s behalf. Email hello@beebeetones.com. We respond within one month, free of charge in ordinary cases.
You can also lodge a complaint with the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), at imy.se, or with the supervisory authority where you live.