Auteur is built by a solo developer. This policy is written in plain language — no legalese walls. If something is unclear, write to hello@auteurxyz.com.
What Auteur is
Auteur is a cultural-learning companion for iOS. You choose a domain — art, music, wine, film, literature, and more — state a goal, and receive AI-generated reading threads with spaced-repetition review. It is not directed at children under 13.
What we collect and why
Account information
When you create an account you sign in with Apple or Google. Supabase Auth receives your name and email address from whichever provider you choose. We use this to identify your account and let you sign back in across devices. No password is stored by Auteur.
Learning content
Everything you create inside the app — your learning threads (“Issues”), journal captures, spaced-repetition card history, and saved events — is stored in a Supabase Postgres database tied to your account. This data exists so the app works: you can pick up where you left off, and the review queue knows what you have and haven’t studied.
AI-generated content
Auteur’s Issues are written by an AI model. When you ask Auteur to create an Issue or generate a chapter, we send Anthropic (the company behind the Claude models) the topic you chose and — so your Issues build on what you have already read — the titles of chapters you have completed and how your recent quizzes went. If you commission an Issue in your own words, capture a note while reading, or add an upcoming event, that text is included too, since it is what the writing is based on. We never send your name, email address, or anything you post in the social feed.
Anthropic processes this data solely to generate your content and does not use API data to train its models, per Anthropic’s commercial API terms. If you delete your account, the learning data we hold about you is deleted with it.
Purchases and subscriptions
Subscriptions are processed entirely by Apple. RevenueCat manages entitlement state using an anonymized app user ID — no payment card data or billing details are transmitted to or stored by Auteur.
Artwork images
Artwork images are fetched at runtime from Wikipedia/Wikimedia, the Metropolitan Museum of Art Open Access API, and Unsplash. These are read-only requests; no personal data is sent to those services.
Crash diagnostics
The app uses Sentry to report crashes and errors so problems can be found and fixed. Sentry is configured not to collect personally identifying information (no names, emails, or message content). Crash reports include technical context such as device model, OS version, and the screens visited before the crash.
Product analytics
The app uses PostHog, a first-party product-analytics service, to understand how features are used — which screens are opened, which actions are taken (for example, starting an Issue or completing a review), and basic device context. These events are associated with your account ID so we can see how the product works for real users over time. PostHog, Inc. processes this data on our behalf on servers hosted in the United States (us.posthog.com). This data is used only to improve Auteur — it is not used for advertising and is not shared for cross-app tracking.
Service telemetry
To monitor generation quality and reliability, our servers log technical events when AI content is generated — timing, token counts, model used, and the outcome. These logs identify you only by a truncated cryptographic hash of your account ID; your identity and the text of your requests are not readable from them.
What we do not collect
- We do not run ads or collect data for advertising.
- We do not sell, rent, or trade your personal data.
- We do not use Apple’s App Tracking Transparency framework — there is no cross-app tracking.
- We do not collect location data.
Where your data lives
Your account data and learning content are stored on Supabase infrastructure (Postgres database and Edge Functions). Supabase operates cloud infrastructure in the United States and European Union. AI generation requests are processed on Anthropic’s servers. Product analytics are processed by PostHog on servers in the United States.
Each third party named in this policy — Supabase, Anthropic, RevenueCat, Sentry, and PostHog — processes your data only to provide its service to Auteur, under contractual terms that require it to protect your data to a standard at least equal to this policy. We do not authorize any of them to use your data for their own purposes.
How long we keep your data
Your data is retained for as long as your account is active. If you delete your account (Profile → Delete account in the app, or by emailing hello@auteurxyz.com), all your data — learning threads, captures, review history, events, and the auth record — is permanently deleted from our servers. This is irreversible.
Your rights
You can:
- Access or export your data by emailing hello@auteurxyz.com.
- Delete your account and all data in-app (Profile → Delete account) or by email.
- Correct your display name or email through your Apple or Google account settings.
If you are in the European Economic Area or the United Kingdom, you also have the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.
Children
Auteur is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact hello@auteurxyz.com and we will delete it promptly.
Changes to this policy
If we make material changes, we will update the effective date at the top of this page. Continued use of the app after a change constitutes acceptance of the revised policy.