AtelierNote Privacy Policy

App: AtelierNote Developer: MokaIO Last updated: October 21, 2026 Official page: https://mokaio.store/privacy/ateliernote

1. Overview

MokaIO develops AtelierNote, an Android-first application for managing tailoring and workshop operations. AtelierNote includes local tools for workshop setup, customers, measurements, garments, orders, appointments, tasks, inventory, quotations, invoices, payment records, reports, and exports. Some account, subscription, collaboration, online backup, and cloud-sync capabilities may be optional, restricted, or unavailable until separately activated.

This Privacy Policy explains what information AtelierNote handles, why it is handled, when information may leave your device, who may process it, and the choices available to you. The term “you” may refer to the workshop owner, an authorized workshop member, or an app account holder. A workshop may also enter personal information relating to its own customers and staff.

The core workspace is designed to work offline. Creating or using an offline workshop does not itself require sending its records to a MokaIO server. However, voluntarily using account, cloud, support, public-sharing, or purchase features, when available, can involve external services as described below. Do not assume that a planned online feature is available merely because it appears in an app screen.

2. Information handled by AtelierNote

Workshop and business records

Depending on the features you use, you may enter workshop identity and preferences, customer names and contact information, tailoring measurements, garments and designs, photos and reference images, orders and status histories, appointments, fittings, employee or task-assignment information, inventory and suppliers, quotations, invoices, balances, payment and refund records, internal notes, and document branding. These are user-provided business records, and some may be sensitive personal information about your customers or staff.

Device and security information

The app maintains local installation and workspace identifiers, local database revisions, device-related security state, app-lock preferences, PIN verification information, biometric-enablement state, permission decisions, session or synchronization state, and security-related operation records as necessary to protect and operate the workspace. Biometric matching is performed by Android and supported device security mechanisms; AtelierNote is not designed to collect a raw fingerprint or face template.

Optional account information

If account features are configured and you voluntarily register or sign in, account-related information may include an email address, authentication-provider identity, user or session identifiers, verification and recovery state, and information needed to enforce authorized access. Authentication may use Supabase and, when configured, Google Sign-In. A local workshop is not automatically uploaded or merged merely because an account was created.

Optional cloud and collaboration information

If an eligible user explicitly enables verified cloud services, authorized workshop records, synchronization metadata, encrypted or otherwise protected media and backups, workspace membership, access-control decisions, and service-operation records may be processed by the cloud backend. Availability, data scope, and account permissions depend on the released feature and its verified configuration. A local installation-owner role does not automatically grant cloud access.

Subscription information

If paid plans become available, Google Play and RevenueCat may process purchase and subscription identifiers, entitlement or plan status, purchase history relevant to a subscription change, and billing-event metadata. MokaIO does not require you to provide a payment-card number inside AtelierNote for Google Play subscriptions. Paid billing is not assumed to be active before its separate launch.

Support requests and website interactions

When a functioning support channel is made available and you choose to use it, we may process the email address, support topic, message content, technical details you elect to provide, request timestamps, anti-abuse information, and delivery records needed to respond and prevent duplicate submissions or abuse. The website may process standard request and security metadata through its hosting and protection services. Do not include PINs, passwords, recovery phrases, tokens, or unnecessary customer information in a support message.

3. How we use information

We use or process the information described above only as applicable to the services you choose to use: to display and save your workshop records; calculate and present business workflows; produce documents and reports; enable local backups and restores; maintain app stability and security; verify identity and role permissions; provide explicitly enabled synchronization or collaboration; process purchase entitlements; deliver opted-in reminders or customer-status links; respond to support or deletion requests; prevent fraud, abuse, and unauthorized access; and comply with applicable law.

We do not use workshop customer records for third-party behavioral advertising or sell them as a data product. We do not treat optional features as permission to access unrelated information on your phone.

4. Offline storage, encryption, and backups

AtelierNote is built around a local SQLite database with native database encryption and Android-protected key storage. The app provides local privacy controls, including optional PIN or device-supported biometrics, auto-lock choices, screenshot restrictions, and clipboard behavior. These controls reduce risk but do not make any device immune from compromise.

An exported backup may be stored in a user-selected location or passed to another app through Android's share interface. A portable backup is intended to be encrypted with a password that you control. Keep both the exported backup and its password safe. Sharing, exporting, printing, saving a PDF, or moving files to a third-party provider is a deliberate action that may place a copy outside AtelierNote's private storage and under the recipient's or destination provider's own policies. MokaIO cannot retrieve a lost locally held backup password or guarantee recovery of data that was never backed up.

Uninstalling AtelierNote, resetting Android app data, or replacing a device can remove local-only data. A web account-deletion request cannot, by itself, reach into an offline phone and erase files stored solely on that device.

5. Permissions and optional device features

AtelierNote requests or accesses device capabilities only when necessary for the relevant feature and subject to Android permissions or app privacy choices as applicable:

• Camera: for explicitly initiated scanning tasks, such as supported work-ticket/QR scanning.
• Photos and files: for user-selected reference photos, documents, logo images, exports, and backup imports or shares. Modern Android pickers may grant access to selected files without granting broad storage access.
• Notifications: for optional local reminders, subject to notification permission and settings.
• Biometrics: for optional device-mediated unlocking, when the device supports it and you enable it.

Business contact information may also be manually entered within workshop records. AtelierNote does not require broad access to your entire phone address book as a prerequisite for offline operation. Revoking an optional permission may limit the associated feature, but should not by itself delete your business records.

6. When information may be shared

We may disclose or transfer the minimum information necessary to providers or recipients involved in a feature you choose to use, including:

• Supabase, for optional authentication, authorized cloud records, storage, and backend processing when configured.
• Google, for optional Google sign-in and Google Play purchase management when configured.
• RevenueCat, for subscription entitlement processing if paid subscriptions are activated.
• Website hosting and security providers, for delivering and protecting MokaIO website pages and request endpoints.
• Support delivery and anti-bot services, potentially including Resend and Cloudflare Turnstile when a verified support channel is activated.
• Recipients or apps you select, when you explicitly export, print, share, or deliver a document, backup, message, or customer-status link.
• Authorities or other recipients when legally required, limited to the applicable legal obligation.

These providers may process information under their own terms and privacy policies. Feature availability and particular processors must be checked against the actual deployed app and site before release.

7. Customer status links and communication

If optional public order tracking becomes operational, a workshop user may deliberately issue a time-limited link for a customer. Such a link should reveal only the approved, limited order status—not private measurements, contact details, financial records, or internal notes. Anyone who obtains a valid link may be able to view the limited information until the link expires or is revoked. No public tracking endpoint should be described as live until it has been separately deployed and verified.

The app may open the device's share sheet for texts, documents, or reminders. Opening that sheet does not mean a message has been delivered; the user chooses and confirms the recipient and channel.

8. Data retention

Local workspace data remains on the device until you modify or erase it, reset app storage, or remove the app, subject to any copies you exported elsewhere. Optional cloud data, if activated, may be retained while needed to provide your account or workspace, process valid instructions, complete authorized deletion, maintain required transaction and security records, or satisfy a legitimate legal obligation. Backups and technical logs may follow separate limited retention schedules determined by the deployed service and applicable law. We will not claim a specific automatic-deletion timeframe that has not been implemented and verified.

When data deletion is requested, some limited records may need to be temporarily retained where required for legal compliance, disputes, fraud prevention, or security. Such exceptions should be restricted and not used to continue offering the deleted account as an active service.

9. Your controls and privacy rights

You can use core offline features without signing into a cloud account. Depending on the feature and service availability, you may be able to review and correct records, manage app permissions and privacy settings, export an encrypted local backup, request access to or deletion of account-associated data, and request correction of information that we control. Laws in your jurisdiction may provide additional access, portability, objection, or restriction rights.

For privacy questions use https://mokaio.store/support/ateliernote. For information on deleting an AtelierNote account and related data, see https://mokaio.store/delete-account/ateliernote. Actual completion of server-side deletion requires identity and authorization verification; an unsubmitted or locally queued request is not confirmation of cloud deletion.

If you are a customer of a workshop rather than an AtelierNote account holder, the workshop controls most customer records that it entered. Please contact that workshop first for corrections or deletion of those records. MokaIO cannot independently verify or alter records stored only on a workshop owner's offline device.

10. Children's privacy

AtelierNote is a business-management application, not a service directed to children. Workshop users should not enter minors' personal information unless they have a lawful basis and appropriate authorization. If you believe data about a child was processed improperly through a service MokaIO operates, contact support so the issue can be assessed.

11. International processing and security limits

Optional cloud, identity, purchase, hosting, and support processors may operate in countries other than your own. Where applicable, relevant legal protections and processor safeguards govern those transfers. No online transmission or security measure guarantees absolute safety. Keep your device updated, restrict employee access, protect backup passwords, and use the app's privacy controls.

12. Changes to this policy

We may update this policy when the app, providers, laws, or operational practices change. The updated version will be posted at this exact URL with a revised “Last updated” date. Material changes may require additional notice or consent under applicable law.

13. Contact and related documents

Developer: MokaIO — AtelierNote Privacy and support inquiries: https://mokaio.store/support/ateliernote Account deletion: https://mokaio.store/delete-account/ateliernote Terms of Service: https://mokaio.store/terms/ateliernote