Data controller
Aspida ApS, Refshalevej 147, 1432 Copenhagen, CVR 41351659. Contact: contact@eventyrmagic.com.
What information we process
- Account: name, email address, password (encrypted).
- Family content: descriptions of grandparents and children, images, voice recordings and stories that you create yourselves.
- Payment: subscription status and billing details. Card data is handled by our payment provider — we never see it.
- Technical: IP address, browser and device in logs for operations and security.
Purposes and legal basis
- Providing the subscription (contract, GDPR Article 6(1)(b)).
- Customer service and billing (contract and legal obligation).
- Operations and security (legitimate interest, Article 6(1)(f)).
Specific information about children
EventyrMagic is intended for use by adult family members and about children. Adult family members create profiles and content about children — we do not collect data directly from children, and children's profiles are only displayed within the private family universe. There are no advertisements and no tracking of children.
Consent when uploading images, names and voices
When you create a universe and upload images, names or voice recordings of children and other adults, you confirm to us:
- that you have parental responsibility or are otherwise entitled to create the child's universe,
- that you have permission to use the child's name and any images,
- that you have consent from other adults who appear in the stories by name, image or voice,
- that you understand that uploaded images and voices are only used to create that specific universe — not for advertising, resale or AI training,
- that you can always have a child's profile, images, voices and stories deleted by writing to contact@eventyrmagic.com.
Consent must be freely given, specific, informed and unambiguous, and it can always be withdrawn. For children under 13, consent is given by the person with parental responsibility. Read more from Datatilsynet at datatilsynet.dk/borger/samtykke.
Data processors
We use the following data processors to provide the service:
- Supabase — database, authentication and file storage (EU).
- Cloudflare — hosting and content delivery.
- Google (Gemini) — AI generation of images and text.
- ElevenLabs — voice cloning and text-to-speech.
- Lovable — sending transactional emails.
Some subcontractors may process data outside the EU/EEA. In such cases, the transfer is safeguarded by the European Commission's Standard Contractual Clauses.
Retention
We retain your data for as long as the subscription is active. After cancellation, family data is deleted within 90 days, except for accounting records, which are retained for 5 years under the Danish Bookkeeping Act.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to contact@eventyrmagic.com. You can always lodge a complaint with Datatilsynet.
See also our cookie policy and security & trust.