Privacy policy
This policy covers the Atelier Wren studio app on the web (atelierwren.app) and on iPhone. It was last updated on 23 October 2026.
Who we are
Atelier Wren Ltd, a company registered in England and Wales (number 13270219), at 465c Unit 2 Hornsey Road, London N19 4DR, is the controller of the personal information described here. Contact us about privacy at ali@atelierwren.com.
What the app is for
The app is how the studio runs its projects: projects and their stages, tasks, time records, leave, expenses, files, and a portal where invited clients follow their project. It is used by studio staff and by the clients and consultants the studio invites. It is not open to the public.
What we collect
- Your account: your name and work email address, your role, and which projects you can see.
- Sign-in: when you sign in, a one-time code is emailed to you; the sign-in service records that you signed in and when.
- Your work in the app: what you add or change, such as tasks, notes, comments, time records, leave, expenses and the files and photos you upload. The app records who made each change and when.
- Clients' project information: the details the studio keeps to run a client's project, including contact details the client gives us.
- On iPhone: the app keeps you signed in on the device. Face ID, Touch ID and passcode checks are made by iOS on the phone; we never receive your face or fingerprint data. If notifications are turned on, the phone's notification address is stored so we can send them, and it is deleted when you sign out.
We do not use advertising, analytics or tracking, and we do not sell personal information.
Why we use it
We use this information to run the studio's projects, record time and costs, and keep clients informed. Our legal basis is our legitimate interest in managing our projects and business, and, for clients, the performance of our agreement with them.
Artificial intelligence
One feature of our studio management system uses an external artificial intelligence service to help our staff draft tasks from notes they paste in. When a staff member uses it, only the text they choose is sent to the service, which processes it on our behalf to return a suggestion. Bank and card numbers are removed before anything is sent, and a member of staff checks every suggestion before it is saved. The provider does not use this information to train its models, and deletes it after 30 days. We keep our own record of what was sent and the suggestion returned for 30 days, so that we can check a suggestion that looks wrong, and then delete it; our backups may hold it for up to 30 days more. Nothing from our client portal is sent. We do this on the basis of our legitimate interest in managing projects efficiently. The provider may process this information outside the UK under the safeguards in its data processing terms.
Who processes it for us
- Cloudflare hosts the app, its database and stored files, and runs the sign-in.
- Apple delivers notifications to iPhones, when they are turned on.
- An artificial intelligence service, as described above.
- An email delivery service sends sign-in codes and studio notices.
These providers process information only on our instructions. Some of them may process it outside the UK, under safeguards such as the UK's international data transfer agreement.
How long we keep it
Project records, including who changed what, are kept for as long as the studio needs them for the project and its legal and accounting obligations. Large files shared through the app expire after a set period unless the studio extends them. Records of the artificial intelligence feature are deleted after 30 days. When someone leaves the studio or a client's access ends, their sign-in is removed.
Your rights
You can ask us for a copy of your personal information, and ask us to correct it, delete it, or limit or stop how we use it. Contact ali@atelierwren.com. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office (ico.org.uk).
Changes
We will update this page when the app's handling of personal information changes, and change the date at the top.