Tibalo
Français
Legal
Privacy Policy
Tibalo writes a unique gamebook for each reader. This policy explains what data we process to do so, why, with whom, for how long, and your rights. The French version is the reference version.
Last updated: October 20, 2026
1. Data controller
Tibalo is published by CODE FAMILY, a French simplified joint-stock company (SAS) with a share capital of EUR 1,000, registered with the Versailles Trade and Companies Register under SIREN 999 566 995, with its registered office at 76 rue de Vaucanson, 78420 Carrières-sur-Seine, France.
For any question about your data: contact@code-family.fr.
This policy applies to the Tibalo app on iPhone, iPad, Mac (through the iPad app) and Android, and to these pages.
2. Data we process
Account
An account is required from the first launch. Sign-in is passwordless, through a link sent by email (Firebase Authentication). We process your email address, the technical identifier of your account (Firebase uid) and related sign-in metadata (creation and last sign-in dates, whether the address is verified). Your email address is also kept on your device until the sign-in link is used.
Your requests and books
The free text you write to describe the book you want, the chosen language, the story proposals derived from it and the generated books (world, characters, items, act outline, page text, unlocked acts). This data is stored on our servers. Your reading progress, adventure sheet and reading settings are stored on your device.
Do not include personal information about yourself or others in your requests: it is not needed to write your book.
Purchases
For each purchase: the transaction identifier sent by the store, the product bought (one act or the full book), the environment (production or test), the credit granted, any refund, and the credit balance of your account. We receive no payment data: no card number, no bank details. Payment is handled by Apple or Google.
Usage counters
To apply the free offer and control generation costs: creation dates of your free books over the last 7 days, daily cost and number of calls to the AI model, status of generation tasks. These counters contain no text from your books.
Reports
When you report a page from the app: the chosen reason, the page and book concerned and your account identifier, so that we can handle the report.
Consent
The version and date of the agreement you give, before your first creation, to sending your requests to our AI provider.
Technical data
To protect the service against automated use, the app proves its authenticity to Firebase App Check (Apple App Attest or DeviceCheck, Google Play Integrity). Our servers and those of our providers receive your IP address with each exchange and produce technical logs (IP address, errors, durations, account identifier) needed for their operation and security.
Tibalo contains no ads, no analytics and no advertising trackers. We do not sell your data or share it with advertisers.
3. Purposes and legal bases
- Creating and managing your account, signing you in by email link: performance of the contract (GDPR Article 6(1)(b)).
- Writing your books: analysing your request, proposing stories, writing, storing and displaying the pages: performance of the contract (Article 6(1)(b)). As required by the app stores, before your first creation the app tells you that your request is sent to an AI provider and asks you to accept it: this transfer remains based on the contract, the agreement is a transparency measure.
- Selling and unlocking acts, applying the free offer, returning a credit when a generation fails: performance of the contract (Article 6(1)(b)).
- Filtering prohibited content and handling reports: legitimate interest in offering a safe service and compliance with app store rules (Article 6(1)(f)).
- Security, abuse prevention and cost caps: legitimate interest (Article 6(1)(f)).
- Accounting and tax obligations for purchases: legal obligation (Article 6(1)(c)).
We make no decision producing legal effects concerning you based solely on automated processing. Declining a request that breaks our content rules has no effect other than not generating the requested book.
4. Processors and recipients
Only authorised CODE FAMILY staff can access your data, as far as they need to. We use the following providers, who act on our instructions under a contract compliant with GDPR Article 28:
| Provider | Role | Location |
|---|---|---|
| Google Firebase (Google Ireland Limited, Google LLC) | Authentication and sign-in emails, Firestore database, server functions, task queues, App Check, technical logs. | Database and functions: europe-west1 region (Belgium). Authentication: [TO VERIFY] may be processed in the United States. |
| Anthropic PBC | Claude AI model, through its API, which writes the text of the books. | United States |
| RevenueCat, Inc. | Validates purchases with the stores and sends their status to our servers. Receives your account identifier, your purchase history and technical information about the device and app (model, system, version, store country). | United States |
What is sent to Anthropic
To write your book, our servers send Anthropic's API your request and the parts of the book needed to write what comes next (world, characters, outline, pages already written). Not sent: your email address, your account identifier, your purchases. Anthropic may not use this data to train its models. It may keep it for a limited time for abuse detection [TO VERIFY: per our internal notes, no retention by default for the model used (Claude Haiku 5.5), but up to 2 years for content flagged by its safety systems].
Apple and Google
Apple (App Store) and Google (Google Play) sell in-app purchases in their own name. They act as independent controllers, not as our processors: their processing of your data as stores is governed by their own privacy policies.
5. Transfers outside the European Union
Your books and requests are stored in the European Union (Firestore, europe-west1 region, Belgium). Transfers to the United States occur in the following cases:
- Anthropic PBC, to write the books: covered by the Standard Contractual Clauses adopted by the European Commission, included in Anthropic's Data Processing Addendum [TO VERIFY].
- RevenueCat, Inc., to manage purchases: [TO VERIFY: Standard Contractual Clauses and/or EU-US Data Privacy Framework certification].
- Google LLC, for authentication: Google is certified under the EU-US Data Privacy Framework and its data processing terms include the Standard Contractual Clauses [TO VERIFY].
You can get a copy of these safeguards by writing to us.
6. Retention
| Data | Period |
|---|---|
| Account (email address, identifier) | Until the account is deleted. |
| Generated books and generation data (request, world, outline, pages) | Until the account is deleted. |
| Story proposals not chosen (with the request text) | 7 days, then deleted automatically. |
| Generation tasks and daily cost counters | About 30 days, then deleted automatically. |
| Creation dates of free books | Erased once outside the 7-day window, at your next book creation, and at the latest with the account. |
| Agreement to sending data to the AI provider (version, date) | Until the account is deleted. |
| Reports | [TO VERIFY: report retention period] |
| Technical logs | Google Cloud default retention [TO VERIFY: 30 days]. |
| Purchase records | Detached from your account and email address when the account is deleted (they stay linked to the store's transaction identifier), then kept for ten years from the end of the financial year as accounting records (French Commercial Code, Article L123-22). |
Tibalo does not automatically delete inactive accounts: your data is kept until you delete your account. Data stored on your device is erased when you uninstall the app.
7. Security
Encrypted connections (HTTPS/TLS). All database writes are made by our servers; access rules let each account read only its own books. The service only accepts calls from genuine apps (App Check) and from accounts with a verified email address. Provider keys are kept in a secret manager, never in the app.
8. Your rights
Under the GDPR and the French Data Protection Act, you have the following rights:
- Access (Article 15): get a copy of your data.
- Rectification (Article 16): correct inaccurate data.
- Erasure (Article 17): delete your account in the app, under Réglages (Settings), then "Supprimer mon compte" (Delete my account), or ask us by email. See Delete your account (in French).
- Portability (Article 20): receive your data in a structured, machine-readable format.
- Objection (Article 21) and restriction (Article 18) of processing.
- Stopping the transfer to the AI provider: books cannot be written without it. To stop it, stop creating books or delete your account.
- Instructions on what happens to your data after your death (Article 85 of the French Data Protection Act).
To exercise these rights, write to contact@code-family.fr from your account's email address. We answer within one month at the latest (GDPR Article 12(3)) and may verify your identity before answering.
You may lodge a complaint with the CNIL (French data protection authority, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France) or with the supervisory authority of your country of residence.
9. Minimum age
Tibalo is rated 16+ on the app stores and is intended for people aged 16 or over. We do not knowingly collect data about younger children. If you believe a child under 16 uses Tibalo, write to us and we will delete the account.
10. Cookies
These pages use no cookies, no analytics and no third-party services: fonts are hosted on our own servers.
11. Changes
We may update this policy, for example when we add a provider. Any substantial change will be announced in the app or by email before it takes effect.
12. Contact
CODE FAMILY, 76 rue de Vaucanson, 78420 Carrières-sur-Seine, France. contact@code-family.fr.