privacy policy

about this policy

this policy explains the privacy framework for atoll studio’s website and the applications that refer to it. “we” and “us” mean atoll studio, the publisher of the relevant service. contact us at contact@atollstudio.xyz about your data or this policy.

apps can work differently. the privacy notice provided with an app explains its actual data collection, providers, permissions and retention. read it alongside this policy; the more specific notice applies to that app. this policy does not mean that every app collects each category described below.

the website

this website does not include advertising, audience analytics, tracking pixels or cookies set by our own code. the water effect runs on your device; pointer movements and taps are not sent to us. fonts are hosted with the site.

our hosting provider processes technical request information, such as ip addresses, requested pages, browser information and timestamps, to deliver and secure the website. access controls, where enabled, may involve the hosting provider’s own authentication. if you email us, we receive your email address, your message and any information you choose to include.

information in our apps

depending on the features you use, an app may process settings and content stored on your device; information you submit to support; account details where accounts are offered; content you choose to upload; purchase entitlements or credit balances; and technical information needed to operate a service. a permission prompt is not, by itself, a complete explanation of processing: the app’s privacy notice provides the relevant details.

access to device features such as photos, camera, microphone or location is requested when needed for a feature. you can manage permissions in your device settings. denying a permission may make that particular feature unavailable. information kept only on your device is not accessible to us unless you choose to send it or use a feature that transfers it.

purposes and legal grounds

we use information to provide requested features, recognise purchases, answer support requests, protect services against misuse and meet legal obligations. where european data protection law applies, the relevant basis may be performance of a contract, a legal obligation, consent, or a legitimate interest such as service security or responding to correspondence, balanced against your rights.

the app notice identifies the basis for its specific processing. where consent is required, it is requested separately and can be withdrawn without affecting processing that was lawful before withdrawal. accepting terms of use is not consent to unrelated data processing.

service providers and sharing

information may be processed by providers needed for hosting, support, payments or a feature you request. an app’s notice identifies its relevant providers and any optional analytics or other integrations. apple processes app store payments under its own policies; we do not receive your full payment card details.

content is shared with other users only through features that make that sharing clear. information may also be disclosed when legally required, to protect rights and safety, or as part of a lawful business transfer with appropriate notice and safeguards. a feature using an external ai service must explain what is sent and how it is handled in the applicable app notice before use; this studio-wide policy does not authorise undisclosed training or secondary use.

retention and security

we keep personal information only for as long as needed for the stated purpose, including any applicable legal retention requirement. support correspondence is kept as needed to resolve and follow up on the request; records may need to be retained longer for a legal obligation or dispute. app-specific notices explain retention periods or the criteria used for hosted data.

local information can generally be removed through the app or by deleting it, although device backups and cloud synchronisation may be managed separately by your platform. we use reasonable safeguards appropriate to the information involved. no storage or transmission system can be guaranteed completely secure.

international processing

a service provider may process information outside your country. where a transfer from the european economic area requires safeguards, these must be provided through an applicable adequacy decision or another lawful mechanism, such as standard contractual clauses. the relevant app notice provides details of its providers and transfers; you can contact us for information about applicable safeguards.

your choices and rights

depending on your location and the processing involved, you may have rights to access, correct, erase or receive a portable copy of your personal data; restrict or object to processing; and withdraw consent. write to contact@atollstudio.xyz, identifying the relevant app and your request. we may request proportionate information to verify your identity. we respond within applicable legal deadlines, normally one month under the gdpr, and explain any permitted extension.

you may complain to your local data protection authority, including the cnil in france. you do not need to contact us first. deleting an app or account does not automatically cancel an app store subscription; manage subscriptions through your apple account.

children

each app’s age rating and eligibility rules apply. an app intended for children requires its own appropriate privacy information and safeguards. if you believe a child has provided personal information in circumstances requiring parental consent without that consent, contact us so we can investigate and take appropriate action.

updates

we may update this policy to reflect changes to the services or legal requirements. the date above identifies the current version. material changes are communicated as required by law, and consent is requested again where necessary. an update does not retroactively authorise an incompatible use of information.