PRIVACY / PRIVATE BETA
Your work
stays yours.
This notice explains how Haro LLC handles information in the Atelier Create private beta.
Artwork and project files
Atelier Create saves artwork and workspace files on your device. You start exports yourself. The app’s analytics queue and random identifiers are kept in protected app storage excluded from device backup; the app does not sync them through iCloud or another app service. Your Share or Don’t Share choice is stored separately in iOS settings storage and may be included in a device backup. If a restored device has the Share choice but not the excluded analytics state, the app asks you again before recording activity. This applies only to analytics data; it does not describe how your artwork or device backups are handled by Apple or other services.
Optional beta activity sharing
On first launch, the app asks you to choose “Share” or “Don’t Share.” Sharing is off unless you choose Share. Before you choose Share, the app does not record or send beta activity.
After you choose Share, the app sends session start/end; feature open/use/stop/failure; project-created and first-mark activity; save/export results; fixed tutorial steps and outcomes; and fixed sculpting action categories. Each event includes a random installation ID, random event and session IDs, an hour-level UTC timestamp, app version/build, platform, and beta channel. The request also includes a random credential used to authorize event uploads and deletion requests. The events use fixed categories; they do not include artwork, project IDs or names, filenames, typed text, receipts, or transaction IDs.
The app keeps a bounded queue of up to 200 events on your device and removes events older than 90 days. When you turn sharing off, the app immediately stops recording, clears unsent events, and saves a deletion request locally before contacting the service. If the device is offline or the service cannot be reached, sharing stays off and the deletion request is retried when the app is active again or when you choose Retry in Settings. Settings also lets you reset the random installation ID. The app deletes the old identity first; sharing stays off until that deletion succeeds.
Service and retention
Haro LLC uses Cloudflare Workers and D1 to receive and store beta activity. The Worker runs on Cloudflare’s global edge network. The D1 database is placed in Eastern North America (ENAM). Cloudflare’s network processes connection details, including your IP address, to deliver requests. Haro’s Worker does not read or store the IP address, and request logging is disabled.
Reports exclude events once they reach 90 days from their event hour. An hourly cleanup removes expired rows. Installation credentials are deleted after 90 days without server activity. When a deletion request succeeds, event rows and the installation identity and credential are removed. A one-way SHA-256 hash of the identity is retained for 30 days to reject replayed events. Cloudflare D1 Free Time Travel may preserve deleted rows in recovery history for up to seven days.
TestFlight crash reports
Atelier Create’s activity service does not receive crash reports. Apple may separately provide crash reports and diagnostics under its TestFlight process, subject to Apple’s settings and terms.
Contact
Privacy questions: Haro LLC, help@createinatelier.com.