Privacy Notice

Who Niblet is for

Niblet Story Creator is designed for adult parents, carers and family account holders who create personalised stories for children. Niblet accounts are adult-managed rather than child accounts. The adult account holder chooses the information, photos, characters and story ideas used with the service.

Information we handle

Depending on how you use Niblet, we may handle:

• adult account information, such as your email address and profile name;
• character information, including names, descriptions, relationships and appearance details;
• photos or reference images you choose to upload, which may include a child;
• story ideas, selected characters, style choices, generated story text, illustrations and narration;
• service, security, generation-status, retry and diagnostic information needed to operate and protect Niblet;
• limited first-party product-use events, such as a story being read, narration being requested or optional adult feedback;
• subscription and billing identifiers or status supplied by Stripe. Niblet does not store your full card details;
• a minimal pseudonymous Welcome Story offer claim marker, derived from the verified adult account email using a secret one-way keyed hash, so deleting and recreating an account with the same email does not generate another free story.

How we use information

We use information to provide the features you request, including creating reusable characters, generating and moderating stories and illustrations, producing narration, saving your private library, supporting account access and subscriptions, preventing misuse, restoring failed-generation credits, diagnosing faults and measuring the reliability and cost of the service.

We do not sell personal information and we do not use children’s content for behavioural advertising.

AI and service providers

Relevant content is transmitted to specialist providers where needed to deliver Niblet. The launch architecture uses Supabase for authentication, database and private media storage; Vercel for application hosting and runtime infrastructure; OpenAI services for AI-assisted story, character, image, narration and safety processing; and Stripe for adult subscription checkout, billing and customer-portal services.

We aim to send only the information reasonably needed for the requested function. Providers may process information in countries other than the country where you live. The commercial operator is responsible for ensuring that any required international-transfer safeguards and provider arrangements are in place.

Private family content

Character media, story illustrations and story audio are stored in private storage rather than public buckets. Niblet uses account-level database and storage controls so signed-in users can access only content associated with their own account.

Children and uploaded photos

If you provide a child’s name, description or photograph, you must be the child’s parent or carer, or otherwise have the authority needed to use that information with Niblet. Please avoid adding sensitive or unnecessary personal information. A real child photo is optional; fictional or text-described characters can also be used.

Niblet does not intentionally perform facial recognition, biometric identification, child scoring or behavioural advertising profiling.

How long information is kept

Saved characters and stories are generally kept while you choose to keep them in your account so that your family library remains available. When a story is deleted, its stored story media and story-linked generation/usage records are removed through the application and database deletion rules. When you permanently delete your account, Niblet removes the account’s private media and deletes the associated application records.

A minimal pseudonymous Welcome Story offer claim marker is retained after account deletion for promotion-abuse prevention. It does not contain the email address, character data, story content or uploaded media. Some provider security, backup, billing or operational records may also remain where technically necessary or required for a legitimate legal, accounting, security or dispute purpose. Financial and accounting records that Niblet Story Creator Ltd is legally required to retain may be kept for the applicable statutory period; for Corporation Tax records this is generally six years from the end of the relevant accounting period, and longer where the law requires it. Child/family story content is not retained merely for accounting purposes. Niblet’s internal retention position is reviewed periodically and data that no longer has a justified purpose should be deleted or anonymised.

Cookies and browser storage

Niblet uses essential authentication and security cookies to keep an adult account signed in and protect access to private content. If you choose to allow optional marketing measurement, a first-party attribution cookie lasts for up to 90 days. It links campaign labels and public landing pages to adult registration, character creation, story-generation outcomes and subscription activity. Measurement reports contain totals rather than customer names, email addresses, photos or story content. We do not send this measurement data to Meta, Google or other advertising platforms, use advertising pixels or fingerprint your device.

You can decline measurement and use Niblet normally, or withdraw your choice through the Measurement preferences control. Withdrawal clears the attribution cookie and removes the associated visit and campaign links. A separate preference cookie remembers a declined choice for up to 180 days. Pseudonymous measurement records are retained for up to 13 months and removed sooner where your account is deleted. Essential operational and billing records follow the separate retention rules above.

Your choices and rights

You can delete individual stories and characters within the service and can permanently delete your whole account from the Account page. Depending on the law that applies, you may also have rights to request access, correction, deletion, restriction, portability or objection to certain processing, and to complain to the Information Commissioner’s Office or another applicable data-protection regulator.

Go to your account settings

Operator, lawful bases and privacy contact

Niblet Story Creator is operated by Niblet Story Creator Ltd, a private company limited by shares incorporated in England and Wales (company number 17460848). Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Privacy contact: support@nibletstories.com.

Our lawful basis depends on why we are using the information. For adult account, subscription and service information that is necessary to provide Niblet, we rely on performance of our contract with the adult account holder. For child/family information that an adult deliberately provides so Niblet can create and store private characters and stories, and for proportionate security, abuse-prevention, reliability and limited operational analysis, our launch position is legitimate interests. Those interests are to provide and protect the parent-led private storytelling service, and we give children’s rights and interests particular weight through data minimisation, private-by-default storage, no behavioural advertising, optional use of real photos and deletion controls. Where processing is necessary to meet a legal obligation, including applicable tax, accounting or regulatory duties, we rely on legal obligation. If we introduce optional processing that requires consent, we will ask for that consent separately before using the information for that purpose.

Changes to this notice

We may update this notice as Niblet evolves. When changes are material, we will update the date above and provide additional notice where appropriate.