Privacy Policy

Last updated: 2026-10-14

Atelaire is built around a single idea: your art is yours. Anything we collect exists only to make the app work — never to sell, profile, or advertise to you.

Atelaire is operated by STUDIO668 ("we," "us"), which is responsible for the personal data described in this policy.

1. What we collect

Account data

• Email address — to sign you in and recover your account.
• Display name — shown next to your exhibited works (optional, you choose).
• Your age — not collected — Atelaire is for adults (18+). The app asks Apple for your Apple Account's age range, and only whether you passed (18 or over) is kept, on your device. No age, age range or birth date is sent to us. Under 18, the app cannot be used.
• App Store install id — when you are signed in, the app sends the identifier the App Store gives this download of Atelaire on your Apple Account. We use it for one thing: where the law requires it (for example in Texas), Apple tells us when a parent withdraws consent for a child's use of the app, naming only that identifier, and we pause the matching account until the parent allows the app again.

Artwork data

• Artworks you exhibit to the public Gallery — including the line art and your colored version.
• Prompts used to generate line art (kept for moderation review and dispute evidence).
• Like counts and view counts on your exhibited works.

Drafts and unfinished work stay only on your device. They never reach our servers.

When you generate line art, the drawings are held on our servers for up to two days, together with a short record of which drawings belong to which request. That record is how the app still delivers them if your connection drops before they arrive. Both are deleted automatically afterwards.

Subscription data

If you subscribe to Atelaire+, your subscription status is stored by Apple and synced via RevenueCat. We never see your payment details.

Feedback you send

Messages you send through Feedback in the app, along with the app version, device model and iOS version, so we can answer and fix what you report.

Removal requests

If you ask us to remove a private image of you, we keep what you send — your name, email, phone if given, the link and any details — to handle the request and to show how it was handled. The person who posted the picture is told it was taken down, never who asked.

Notifications

If you allow notifications, we store the address Apple gives your device for them (a push token) with your account, along with the two notification switches in Settings, so we can tell you when we reply to your feedback or when people react to your art. It is not an advertising identifier and is never used for tracking. Turning notifications off in iOS Settings stops them; the token is deleted with your account, or when Apple tells us it is no longer valid.

Diagnostic data

Crash reports — anonymous stack traces and device/OS info, with no prompts, images, email, or account data, so we can find and fix crashes. Handled by Sentry and stored in the EU.

Error messages shown in the app — when the app shows you an error (for example "you're offline" or "something went wrong on our side"), it records which message it was, the screen, the technical codes behind it, your app and iOS version and your device model. This record is linked to your account, so we can tell a connection problem from a fault on our side and follow up on what you went through. It never includes what you typed or drew. Stored with our database provider (Supabase).

2. Third parties we use

• Supabase — auth + database, including the error-message records described above.
• Apple App Store + RevenueCat — subscription management.
• Apple Push Notification service — delivers the notifications you allow; it receives the push token and the notification text.
• fal.ai — AI line-art generation. Your prompt and the generated image are processed by fal.ai per their privacy policy.
• OpenAI — content moderation only. Your prompts and exhibited images are scanned for safety; nothing is used to train OpenAI models (we use the moderation endpoint, not chat or completion).
• Anthropic — content moderation only. Your prompts and exhibited images are also classified for copyright/trademark and child-safety risks; nothing is used to train Anthropic models.
• Cloudflare — image storage and delivery (R2), DDoS protection, and the human-verification check (Turnstile) on our copyright report and removal-request forms. Turnstile is a privacy-preserving bot check: it does not use tracking cookies and does not profile you across sites.
• Resend — email delivery. Used to send transactional and safety-related email (for example copyright/DMCA acknowledgements, counter-notice forwarding, and account or moderation notices). Recipient email addresses are processed by Resend per their privacy policy.
• Sentry — crash and error diagnostics (stack traces plus device info, used only to fix bugs). No prompts, images, or email; diagnostic data is scrubbed of personal content and stored in Sentry's EU data region.

3. What we never do

• We don't sell your data. To anyone. Ever.
• We don't use your artwork to train AI models.
• We don't show ads.
• We don't track you across other apps or websites.

4. Your rights

You can:

• Access / export your data — email [email protected] with “Privacy Request” in the subject, and we'll send a copy of your prompts, artworks, and account info without undue delay and within the time the law gives us (one month in the EU and UK, extendable where the law allows; 10 days in Korea).
• Delete your account at any time (Settings → Delete Account). All your exhibited artworks, gallery scenes, and account data are permanently removed within 30 days — except the limited publication-consent and safety/copyright records described in "Data retention" below, which we keep so we can answer legal claims and meet child-safety reporting duties.
• Take down any individual exhibited work (open the artwork in My Studio and take it down).

Depending on where you live (for example under the EU and UK GDPR or Korea's Personal Information Protection Act) you also have the right to correct your data, to restrict or object to how we use it, to take it with you in a portable form, to withdraw a consent you gave (such as for notifications), and to complain to your data-protection authority. Email [email protected] with your account email; see section 10 for details.

California residents: same applies under the CCPA. We don't sell personal information.

5. Children

You must be 18 or older to use Atelaire, and the Service is not available to anyone under 18. We do not knowingly collect personal data from anyone under 18; if we learn a user is under 18 we close the account and delete their data. If you believe someone under 18 has provided data to us, email [email protected] and we'll delete it.

6. Data retention

• Account + artwork data: kept while your account is active. Deleted within 30 days of account deletion (except the records noted below).
• A work you take down: its gallery entry and its images are removed at once. If removing the images fails, our server clears them within about a day. A copy already shown to someone — the picture, and the title and name on its gallery card — may stay in their app's cache on their device for up to 30 days, so they can still see it offline; we cannot reach it.
• Safety-check results for a published work: kept while the work is published, and deleted when it is taken down.
• Prompts our filters refuse: the reason is kept with your account for 90 days, so we can tell a mistake from misuse, then erased. Separately, the text of the refused prompt is kept with no link to your account — no account, no exact time (only the week), and email addresses, phone numbers and links removed — so we can improve our filters.
• Crash reports: aggregated and anonymized after 30 days.
• Error messages shown in the app: kept with your account for 90 days (deleted with your account). After that they are kept only without any link to your account, rounded to the day, to find and fix problems.
• IP addresses: used only to limit abuse of our feedback, copyright and removal-request forms, and deleted within 30 days.
• Generated drawings awaiting delivery: deleted after 2 days (the delivery record after 3).
• Push tokens: kept while notifications can reach your device; deleted with your account or when Apple reports the token invalid.
• Feedback messages: kept so we can answer and improve the app. If you delete your account, they are kept without your account attached.
• Publication consent records: when you publish a work to the public gallery we keep a tamper-evident record that you confirmed you have the rights to publish it. We keep it as evidence in case a claim about that work is ever made, so it is not deleted when you delete your account. After deletion it holds no directly identifying information, but it keeps a one-way cryptographic identifier derived from your Apple ID. That lets us recognise the same Apple ID if it signs in again, and it could be matched back to you if the corresponding information were provided to us — for example in response to a valid legal request. We cannot reverse it on our own.
• Your name from Apple: if Apple provides your name when you first sign in, we keep it on your account so we can identify you in a copyright or safety dispute. It is never shown publicly — the gallery shows only the display name you choose. It is deleted with your account.
• Contact details on safety and copyright evidence: if a work of yours is the subject of a copyright takedown or a serious safety violation, we record your account email and Apple identifier alongside that evidence, so a claim can still be answered after the account is gone. This applies only to flagged works — an ordinary account leaves none of it. These details are erased automatically three years afterwards, except where the law requires longer (child-safety evidence).
• Safety and copyright evidence: if a work is flagged for a serious safety violation, or is the subject of a copyright takedown, the related record and image may be retained after account deletion for as long as the law requires (for example, to comply with legal preservation obligations).

7. Security

All data in transit is encrypted (HTTPS/TLS). Database access is restricted by row-level security — you can only read or modify your own data. Subscription tokens are managed by Apple, never touch our servers.

8. Changes to this policy

We'll bump the "Last updated" date when we change anything, and notify you in-app for material changes before they take effect.

9. Contact

Questions? Concerns? Email [email protected]. The curators reply to every message.

10. For people in the EU, the UK, Korea and elsewhere

Who is responsible

STUDIO668, a sole proprietorship registered in the Republic of Korea, is the controller of the personal data described here. Privacy contact (개인정보 보호책임자 / data-protection contact): STUDIO668, at [email protected].

Why we are allowed to use your data

• To provide the app you asked for (performance of our contract with you): your account, making underdrawings, saving and publishing your work, subscriptions, answering your feedback.
• Our legitimate interests, balanced against yours: screening prompts and published work for safety and copyright, preventing abuse of the free allowance, keeping evidence for claims, crash reports and error records to fix problems, and security.
• Legal obligations: handling copyright notices and reporting child sexual abuse material where the law requires.
• Your consent: notifications (you can turn them off at any time in iOS Settings).

Where your data goes

We are based in Korea and the providers listed in section 2 process data on our behalf mostly in the United States (Sentry: the EU). When data leaves the EU, the UK or Korea, it is protected by those providers' data-processing terms — the European Commission's Standard Contractual Clauses, or the EU–U.S. Data Privacy Framework where a provider is certified — and it is sent only for the purposes and kept only for the periods in this policy. You can refuse this transfer by not using the features that need it, or by deleting your account.

Complaints

Please write to us first — we would rather fix it. You can also complain to the data-protection authority where you live or work: in the EU, your national authority; in the UK, the Information Commissioner's Office; in Korea, the Personal Information Protection Commission (Personal Information Infringement Report Center, 118).