AtelierRecords Privacy Policy

Effective date: 2026-05-22 · Last updated: 2026-05-22

Who builds AtelierRecords

AtelierRecords is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

What never leaves the device

We do not collect, transmit to our servers, store on a server we operate, sell, share, or analyze:

• Your pieces, titles, artists, mediums, dimensions, dates created, edition numbers, catalogue raisonné references, signed / inscribed fields, or current location
• Your provenance entries, owner names, owner types, acquisition methods, sale catalogue references, ownership-gap flags (including Nazi-era flags), or disposal records
• Your acquisition or disposal events, costs, currencies, counterparties, buyer's premiums, sales tax, shipping, or restoration costs
• Your appraisal entries, appraiser names, credentials, purposes, values, or expiration dates
• Your condition reports, inspector names, conservator notes, treatment records, or condition photographs
• Your beneficiary designations, wishes documentation, tax basis values, or IRS Form 8283 status
• Your insurance policies, insurers, policy periods, premiums, deductibles, scheduled values, or pair-and-set coverage settings
• Your attached documents (bills of sale, auction catalogue excerpts, dealer provenance letters, restoration treatment reports, appraisal reports, etc.)
• Your name, email, phone, date of birth, address, or any account identifier
• Device identifiers (IDFA, IDFV) for advertising or tracking purposes
• Location data
• Crash reports or analytics events sent to any third party

We have no servers. The fields above never reach us.

No third-party data sharing

AtelierRecords does not share any records with auction houses, art insurance carriers, due diligence databases (Art Loss Register, IFAR, German Lost Art Foundation, US Holocaust Memorial Museum, etc.), appraisal organizations, conservation organizations, government agencies, or research databases. There is no advertising SDK, no analytics SDK, and no marketing-data partnership in the app. If a future release ever introduces any such integration, it will be strictly opt-in, with a clear in-app notice before any record leaves your device.

What lives on the device

All archive data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled.

How records are processed

Several features process data locally on your device only:

• Document scanning uses Apple's VisionKit on-device. Scanned images of bills of sale, dealer provenance letters, appraisal reports, restoration treatment reports, or insurance schedule pages never leave your phone.
• PDF report generation uses Apple's PDFKit on-device. No archive content is transmitted during generation. The Insurance Schedule, Provenance Pack, Due Diligence Reference Report, Estate Inventory Pack, IRS Form 8283 Companion, and Comprehensive Collection Archive are all built from your local records and rendered on-device.
• Provenance gap detection (including the Nazi-era 1933-1945 flag) is a local rule-based computation: the app compares each provenance entry's disposal date and the next entry's acquisition date against the date range 1933-01-30 to 1945-05-08 for pieces created before 1945. No AI, no machine learning, no cloud lookup.
• Due diligence references are static text and URL strings referring to publicly known resources (Art Loss Register, IFAR, German Lost Art Foundation, US Holocaust Memorial Museum, Washington Conference Principles 1998, UNESCO 1970 Convention). The app does not query any of these databases or transmit any of your data to them.
• App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
• Appraisal expiration and insurance renewal reminders are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

About Apple device backup

AtelierRecords stores all records on your iPhone only. The app does not use iCloud sync, CloudKit, or any cloud storage of its own. If you lose your phone and have no backup, your archive is gone.

To protect against device loss:

• Keep iCloud Backup on (iOS Settings > [your name] > iCloud > iCloud Backup). When enabled, Apple includes AtelierRecords's SwiftData store in your nightly encrypted device backup, and a new iPhone restore recovers your archive automatically.
• Alternatively, back up to iTunes / Finder on a Mac or PC. AtelierRecords's records travel with the device backup.
• Pro users can additionally export the entire archive as a JSON file via Settings > Privacy & Backup > Export full archive, save it to Files, email it to themselves, or copy it to a USB drive for an additional offline copy — suitable for family-office handoff or multi-generation transfer.

We have no servers and cannot retrieve your records for you. Apple's device backup is the canonical recovery path.

Subscription verification through Apple

AtelierRecords offers an optional Plus subscription (Annual or Lifetime one-time) via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. AtelierRecords receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

Permissions requested

• Camera — only when you tap "Scan document" on a piece or document entry.
• Photo Library — only when you tap "Import photo" or "Import document".
• Face ID — only after you enable App Lock in Settings.
• Notifications — only after you enable appraisal expiration or insurance renewal reminders.

You can revoke any of these permissions at any time in iOS Settings > AtelierRecords.

Reference-only, not inference

AtelierRecords does not perform image recognition or AI-powered cataloging on your photos, does not auto-valuate any piece, does not make claims about whether a specific piece is looted art or whether a specific dealer or owner is culpable, does not generate legal opinions, does not query any due diligence database, and does not perform any artificial-intelligence analysis on your archive. Provenance gap flags (including the Nazi-era 1933-1945 flag) are rule-based computations on dates and ranges; they are reference-only and not a determination of provenance legitimacy, title, or restitution obligation.

Children

AtelierRecords is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

Retention and deletion

You control retention completely. Records you delete in the app are removed permanently from the on-device store on the next save. There is no in-app trash, no soft-delete recovery window, and no remote copy on our servers for us to delete because we do not have servers. Pro users can export the entire archive to a JSON file before deleting anything (Settings > Privacy & Backup > Export full archive). To remove every trace of your archive: delete the app from your device. If you have an iCloud device backup, that backup may contain prior versions of the AtelierRecords store — you can manage iCloud device backups via iOS Settings > [your name] > iCloud > Manage Account Storage.

International availability

The app is published in English and is primarily marketed in North America. Because we operate no servers, we do not transfer your data internationally.

Updates to this policy

If we ever change how the app handles data, we will update this policy and surface the change in the app before you can use the affected feature. The "Last updated" date at the top of this page reflects the most recent revision.

Contact

Privacy questions: captainlongevity@gmail.com