Privacy Policy

Last updated: 2026-05-06

Atelaire is built around a single idea: your art is yours. Anything we collect exists only to make the app work — never to sell, profile, or advertise to you.

1. What we collect

Account data

• Email address — to sign you in and recover your account.
• Display name — shown next to your exhibited works (optional, you choose).

Artwork data

• Artworks you exhibit to the public Gallery — including the line art and your colored version.
• Prompts used to generate line art (kept for moderation review and dispute evidence).
• Like counts and view counts on your exhibited works.

Drafts and unfinished work stay only on your device. They never reach our servers.

Subscription data

If you subscribe to Atelaire+, your subscription status is stored by Apple and synced via RevenueCat. We never see your payment details.

Diagnostic data

Anonymous crash reports and basic usage signals (which screens were visited, no personal content). You can opt out in Settings.

2. Third parties we use

• Supabase — auth + database + image storage.
• Apple App Store + RevenueCat — subscription management.
• fal.ai — AI line-art generation. Your prompt and the generated image are processed by fal.ai per their privacy policy.
• OpenAI — content moderation only. Your prompts and exhibited images are scanned for safety; nothing is used to train OpenAI models (we use the moderation endpoint, not chat or completion).
• Cloudflare — content delivery and DDoS protection for our website.

3. What we never do

• We don't sell your data. To anyone. Ever.
• We don't use your artwork to train AI models.
• We don't show ads.
• We don't track you across other apps or websites.

4. Your rights

You can:

• Export your artwork at any time (Settings → Export Data).
• Delete your account at any time (Settings → Delete Account). All your exhibited artworks, room settings, and account data are permanently removed within 30 days.
• Take down any individual exhibited work (Solo Exhibition → tap work → Remove from Gallery).

EU residents: you have additional rights under GDPR (access, rectification, portability, restriction, objection). Email [email protected] with your account email and we'll respond within 30 days.

California residents: same applies under the CCPA. We don't sell personal information.

5. Children

Atelaire is rated 9+ in the App Store. We don't knowingly collect data from children under 13 without verifiable parental consent (per COPPA). If you're a parent and believe your child registered without consent, email [email protected] and we'll delete the account.

6. Data retention

• Account + artwork data: kept while your account is active. Deleted within 30 days of account deletion.
• Moderation logs (prompts + scores): kept 90 days then deleted.
• Diagnostic data: aggregated and anonymized after 30 days.

7. Security

All data in transit is encrypted (HTTPS/TLS). Database access is restricted by row-level security — you can only read or modify your own data. Subscription tokens are managed by Apple, never touch our servers.

8. Changes to this policy

We'll bump the "Last updated" date when we change anything, and notify you in-app for material changes before they take effect.

9. Contact

Questions? Concerns? Email [email protected]. A real person will respond.