Atelier Rohan

Atelier Rohan · L'Étude de Conservation

Privacy Notice.

Version 1.3 · revised June 16, 2026 · applies to the iPhone and Android editions

The atelier is built for one. Your cabinet, your inventory, your collection — kept in private custody. Below is a complete accounting of how Atelier Rohan treats your data, on every platform we ship.

I. What We Store

Everything stays on your device. Each formulation you log — its Maison, name, opened date, Period After Opening (PAO), category, valuation, and ingredient text — is written to your device's local database. No account is required to use the atelier. No password. No email. You are anonymous to us.

iOS

Stored locally with SwiftData, Apple's on-device persistence framework.

Android

Stored locally with Room, the Android Jetpack persistence library.

II. Cabinet Synchronization (Optional)

Cabinet Sync is off by default. When you enable it, your formulations are mirrored to cloud storage tied to your own account — Atelier Rohan operates no server of its own and never sees your cabinet in transit. You can disable sync at any time from Settings → Cabinet Sync, returning the catalog to local-only custody.

iOS · iCloud

Your cabinet mirrors across the Apple devices signed into your iCloud account, passing through Apple's CloudKit infrastructure under your Apple ID. Changes to this preference take effect on next launch.

Android · Google Drive

Your cabinet is backed up to the hidden, app-private appDataFolder in your own Google Drive — a folder visible only to Atelier Rohan, not in your Drive file list. Access uses Google Sign-In limited to the drive.appdata scope. The transfer is between your device and your Google account; you can revoke access at any time in your Google Account settings.

III. La Registre (Open Beauty Facts)

When you search for a product in the Add sheet, the query you type is sent to the Open Beauty Facts API — a public, community-built database of roughly 150,000 cosmetic products. No user identifier accompanies the request; the API receives only the search text and a generic User-Agent string. Open Beauty Facts is operated independently of Atelier Rohan; see openbeautyfacts.org for their terms.

IV. L'Analyseur (Optical Scanner)

When you use the ingredient scanner, your camera feed is processed entirely on-device. No images are saved. No frames are transmitted. The recognized text is written to your local cabinet alongside the formulation you create. The scanner requires camera permission, which you grant at first use and can revoke at any time in system settings.

iOS

Optical character recognition runs through Apple's Vision framework, on-device.

Android

Optical character recognition runs through Google's ML Kit text recognition, on-device.

V. On-Device Intelligence

When you generate perfume notes for a fragrance or a summary for a skincare formulation, the request is processed on your device. Your brand and product name, or ingredient list, are sent to the local model only — never to our servers, never to a third party. Generated text is cached on your device alongside the formulation. Generated content should be verified — language models can occasionally err — and we mark every AI note accordingly.

iOS

Runs locally via Apple Intelligence (Apple's on-device foundation model), on supported hardware. Where unavailable, the feature is disabled with a neutral notice.

Android

Runs locally via Gemini Nano through AICore on supported devices. On devices without it, notes are composed from a built-in on-device reference — still no data leaves your phone — or the feature shows an “AI unavailable” state.

VI. Oxidation Advisories

Notifications are scheduled as local advisories by your device's operating system, fired thirty days before each formulation crosses its Period After Opening expiry. Nothing is sent to a remote server. You can disable them at any time in Settings → Formula Correspondence. On Android 13 and later, the system asks for notification permission before any advisory is scheduled.

VII. Atelier Patron Purchase

The optional Atelier Patron unlock is a one-time purchase. Atelier Rohan never sees your payment method, billing address, or store account — we receive only an entitlement confirming the purchase. No subscription. No auto-renewal. Restorations are handled by the platform store using your account's purchase history.

iOS

Processed entirely by Apple through StoreKit.

Android

Processed entirely by Google through Google Play Billing.

VIII. Permissions We Request

Every permission is requested in context, used only for the stated purpose, and revocable in system settings. Declining any of them leaves the atelier fully usable.

  • Camera — only for L'Analyseur, to read an ingredient label on-device. Optional; the app is fully usable without it via manual entry.
  • Notifications — only to deliver local oxidation advisories. Optional (Android 13+ prompts; can be revoked anytime).
  • Internet / Network — used only for the Maison Registry search and, if you enable it, Cabinet Sync. No background network activity otherwise.

IX. Analytics & Tracking

There are none. Atelier Rohan does not embed third-party analytics SDKs, advertising identifiers, or tracking pixels. The atelier does not know how many times you have opened the app or which screens you have visited. We do not sell or share personal information, and we do not engage in cross-context behavioural advertising.

X. Data Retention

Your cabinet is retained on your device for as long as the app is installed, until you delete the data yourself. If Cabinet Sync is enabled, the backup is retained in your own cloud account until you disconnect sync and/or delete it. Uninstalling the app removes the local data from the device. Because we hold no copy on any server of ours, there is nothing for us to retain or delete on your behalf.

XI. Security

Network requests (Maison Registry search and Cabinet Sync) are made over encrypted HTTPS/TLS connections. Data at rest lives on your device under the operating system's app sandbox and, if you enable sync, in your own cloud account secured by your Apple ID or Google account credentials. As Atelier Rohan operates no server and stores no personal data centrally, there is no central database to breach.

XII. Third Parties & Sub-processors

We rely on a small number of independent services, each governed by its own privacy policy:

  • Apple Inc. — iCloud sync and StoreKit purchases (iOS).
  • Google LLC — Google Drive sync, Google Play Billing, ML Kit model delivery, and AICore / Gemini Nano (Android).
  • Open Beauty Facts — the product database queried by the Maison Registry search.

We do not transfer personal data to any other recipients, and we receive no personal data from them.

XIII. International Data Transfers

Where you use Cabinet Sync, the Maison Registry, or platform purchases, the relevant provider (Apple, Google, or Open Beauty Facts) may process data on servers located outside Australia, including in the United States and the European Union, subject to that provider's own safeguards. Atelier Rohan itself transfers no personal data internationally because it holds none centrally.

XIV. Your Privacy Rights

Because Atelier Rohan keeps your data on your own device and in your own cloud account, you exercise most rights directly: you can access, correct, export, and delete your cabinet from within the app at any time.

  • Australia (Privacy Act 1988 / APPs) — you may request access to and correction of any personal information, and complain to us first; unresolved concerns can be raised with the Office of the Australian Information Commissioner (oaic.gov.au).
  • European Economic Area / UK (GDPR) — you have rights of access, rectification, erasure, restriction, portability, and objection.
  • California (CCPA/CPRA) — you have the right to know, delete, correct, and to opt out of sale/sharing; note that we neither sell nor share personal information.

To make any request, contact us as described in Section XVIII.

XV. Data Deletion

To clear your cabinet, go to Settings → Inventory Storage → Delete All Formulations. This permanently removes every formulation from local storage and, if Cabinet Sync was enabled, from your cloud backup. The deletion is immediate and irreversible. To delete a single formulation, long-press the card and choose Delete.

XVI. App Store & Google Play Data Safety

This notice reflects the disclosures we make in Apple's App Privacy and Google Play's Data Safety sections: Atelier Rohan collects no data on our own servers, performs no tracking, and serves no advertising. All personal content stays on your device or within your own cloud account. Where these store labels and this notice ever appear to differ, this notice is the fuller account.

XVII. Children

Atelier Rohan is not designed for users under the age of 13 (or under 16 where required by local law) and does not knowingly collect data from minors.

XVIII. Revisions & Correspondence

Any material revision to this notice will be published here and shipped with an app update, dated at the top of this document. By continuing to use Atelier Rohan after a revision, you accept the updated notice.

This notice is issued by Retriever Labs, the entity responsible for Atelier Rohan. For any privacy question or request, please write to us through the Atelier Rohan support page.