Privacy Policy

Last updated: 2026-08-15

Atelaire is built around a single idea: your art is yours. Anything we collect exists only to make the app work — never to sell, profile, or advertise to you.

Atelaire is operated by STUDIO668 ("we," "us"), which is responsible for the personal data described in this policy.

1. What we collect

Account data

• Email address — to sign you in and recover your account.
• Display name — shown next to your exhibited works (optional, you choose).

Artwork data

• Artworks you exhibit to the public Gallery — including the line art and your colored version.
• Prompts used to generate line art (kept for moderation review and dispute evidence).
• Like counts and view counts on your exhibited works.

Drafts and unfinished work stay only on your device. They never reach our servers.

Subscription data

If you subscribe to Atelaire+, your subscription status is stored by Apple and synced via RevenueCat. We never see your payment details.

Diagnostic data

Anonymous crash reports and error diagnostics — stack traces and device/OS info, with no prompts, images, email, or account data — so we can find and fix bugs. Handled by Sentry and stored in the EU.

2. Third parties we use

• Supabase — auth + database + image storage.
• Apple App Store + RevenueCat — subscription management.
• fal.ai — AI line-art generation. Your prompt and the generated image are processed by fal.ai per their privacy policy.
• OpenAI — content moderation only. Your prompts and exhibited images are scanned for safety; nothing is used to train OpenAI models (we use the moderation endpoint, not chat or completion).
• Anthropic — content moderation only. Your prompts and exhibited images are also classified for copyright/trademark and child-safety risks; nothing is used to train Anthropic models.
• Cloudflare — content delivery, DDoS protection, and the human-verification check (Turnstile) on our copyright report form. Turnstile is a privacy-preserving bot check: it does not use tracking cookies and does not profile you across sites.
• Resend — email delivery. Used to send transactional and safety-related email (for example copyright/DMCA acknowledgements, counter-notice forwarding, and account or moderation notices). Recipient email addresses are processed by Resend per their privacy policy.
• Sentry — crash and error diagnostics (stack traces plus device info, used only to fix bugs). No prompts, images, or email; diagnostic data is scrubbed of personal content and stored in Sentry's EU data region.

3. What we never do

• We don't sell your data. To anyone. Ever.
• We don't use your artwork to train AI models.
• We don't show ads.
• We don't track you across other apps or websites.

4. Your rights

You can:

• Access / export your data — email [email protected] with “Privacy Request” in the subject, and we'll send a copy of your prompts, artworks, and account info within 30 days.
• Delete your account at any time (Settings → Delete Account). All your exhibited artworks, gallery scenes, and account data are permanently removed within 30 days — except the limited publication-consent and safety/copyright records described in "Data retention" below, which we are legally required to keep.
• Take down any individual exhibited work (open the piece in My Studio and take it down).

EU residents: you have additional rights under GDPR (access, rectification, portability, restriction, objection). Email [email protected] with your account email and we'll respond within 30 days.

California residents: same applies under the CCPA. We don't sell personal information.

5. Children

You must be 13 or older to use Atelaire, and the Service is not available to children under 13. We do not knowingly collect personal data from anyone under 13; if we learn a user is under 13 we terminate the account and delete their data. If you believe a child under 13 has provided data to us, email [email protected] and we'll delete it.

6. Data retention

• Account + artwork data: kept while your account is active. Deleted within 30 days of account deletion (except the records noted below).
• Moderation logs (prompts + scores): kept 90 days then deleted.
• Diagnostic data: aggregated and anonymized after 30 days.
• Publication consent records: when you publish a work to the public gallery we keep a tamper-evident record that you confirmed you have the rights to publish it. This record is retained as legal evidence and is not deleted when you delete your account, but it is held in a pseudonymized form after deletion.
• Safety and copyright evidence: if a work is flagged for a serious safety violation, or is the subject of a copyright takedown, the related record and image may be retained after account deletion for as long as the law requires (for example, to comply with legal preservation obligations).

7. Security

All data in transit is encrypted (HTTPS/TLS). Database access is restricted by row-level security — you can only read or modify your own data. Subscription tokens are managed by Apple, never touch our servers.

8. Changes to this policy

We'll bump the "Last updated" date when we change anything, and notify you in-app for material changes before they take effect.

9. Contact

Questions? Concerns? Email [email protected]. The curators reply to every message.