Privacy notice

Who is responsible

Articious is run by (주)아티셔스. For anything about your data, write to support@articious.app.

(주)아티셔스 answers for how personal data is handled, and can be reached at the same address.

What is kept, and why

You can look at works, read about them and listen to guides without an account. With an account you can rate works, keep collections, ask questions and find a work from a photo. This is what is kept for that.

• What is kept

  Your email address. If you sign in with Google, also the name and the picture Google has for you.

  What for

  To sign you in and to know which account is yours.

• What is kept

  Your profile: the name you choose, how much you know about each field of art, how long you like guides to be, your language.

  What for

  So that a guide starts at your level and length.

• What is kept

  Your ratings: the works you rated and how, the reasons you ticked, whether you saw the work in person, the answers you gave before you changed one, and the works you passed over.

  What for

  To work out your taste and to suggest works.

• What is kept

  Your collections, with their names, descriptions and notes.

  What for

  They are yours to keep and arrange.

• What is kept

  Museum visits: which museum, when, and how it was confirmed. Your device's position is used once, to check that it is inside the museum, and is not stored.

  What for

  A rating given in front of a work counts for more in your taste.

• What is kept

  Photos you take to find a work. A photo is removed as soon as it has been looked at. What was recognised in it, and the work you chose, are kept.

  What for

  To find the work you are standing in front of.

• What is kept

  The questions you ask about a work, and the answers.

  What for

  So that you can read them again.

• What is kept

  How many guides, questions and photos you used each day, and what answering a question or reading a photo cost to make.

  What for

  There is a daily limit on what costs money to make, and a budget to keep within.

• What is kept

  How the app is used: which screens are opened and what is listened to and rated, with the language, the country and the kind of device. Never what you write, your photos or where you are.

  What for

  To see what works and what does not. You can switch it off: see “What you can do”.

• What is kept

  What staff did to your account, or looked up in it.

  What for

  So that staff can be held to account.

Where European data protection law applies: the above is kept in order to provide the service you asked for by making an account. The record of how the app is used, the limits on what one visitor can ask for and the technical logs are kept because we have a legitimate interest in running, improving and protecting the service. Your device's position and camera are used only with the permission you give in your browser.

If you are not signed in

Nothing is stored in your browser to recognise you, and there is no profile of you. Two things are still noted.

• To limit how many new guides one visitor can have made in a day, the service makes a name for your network address with a secret key. The name is different every day and cannot be turned back into the address, which is never stored. It is removed from the guide it asked for within two days.
• Where the use of the app is recorded, the same name is kept with what you open and listen to, your language, your country and the kind of device, so that a day's visitors can be counted. It is removed two to three days later.

The services that host Articious keep technical logs of requests (the time, the network address, the page asked for) for a short time, to keep the service running and safe.

What is not done

• No advertising. Nothing about you is sold, or shared for advertising.
• No trackers and no analytics from other companies.
• Your ratings, collections, questions and visits are not shown to other people.
• Articious does not use what you write or photograph to train AI models.

What is kept in your browser

• Cookies that keep you signed in, and short-lived ones used while you sign in. Scripts cannot read them, and they go when you sign out. There are no other cookies.
• On your device only: how far you have heard a guide, the level and length of guide you chose, whether you switched recording off, and, until you close the tab, the works you found from a photo.

Who else handles it

These companies work for Articious and handle data only to provide the service.

• Who

  Supabase

  What for

  Keeps the database (everything listed above), signs you in, and sends the sign-in code to your email address.

  Where

  United States

• Who

  Vercel

  What for

  Serves the website. Requests pass through it, with the network address they come from.

  Where

  United States, and its network around the world

• Who

  OpenRouter, and the company whose AI model answers (at present Anthropic and Google)

  What for

  Answers the questions you ask and looks at the photos you hand in. It is sent the text of the question, or the photo and the name of the museum you are visiting, but not your name, your email address or anything else from your account.

  Where

  United States

• Who

  Google

  What for

  Only if you choose to sign in with Google: it tells us your email address, your name and your picture.

  Where

  United States

This means your data is sent to, and kept in, the United States. It is sent over an encrypted connection at the moment you use a feature, and kept for the periods given below. If you do not want that, you can leave questions and photos unused, or delete your account.

Images from the Art Institute of Chicago are fetched and temporarily cached by Articious before being sent to your browser (see Sources and licences). The museum receives the Articious server’s network address, not your address, cookies or account details. Images from other museums may load directly from their servers, which then see your network address and the image requested.

What staff can see

The people who run Articious can look an account up in the back office: its email address, name and settings, how much it has used today, and its latest ratings. The back office does not show photos, the text of questions or the notes in collections. Staff sign in with a second step, and every time an account is opened or changed it is written down. That record is part of the file you can download.

The database itself can be read only by the operator and, as far as they need to in order to run it, the companies named above.

How long it is kept

• Your account and what belongs to it: until you delete the account. It is then removed at once, together with what the sign-in service wrote down about your sign-ins.
• Photos: until they have been looked at, normally within a minute and at most two hours.
• The record of how the app is used: thirteen months. If you delete your account before that, what was recorded stays as a count, without whose it was.
• What the answers and photo readings cost: kept as sums. What links a cost to your account goes when you delete the account.
• The sign-in service's log of sign-ins (the time and the network address): ninety days.
• What staff did: for as long as the service runs. It names an account by a number, which points at nobody once the account is deleted.
• Backup copies made by the company that keeps the database expire on its schedule, within thirty days at most.

What you can do

• See and take what is kept: More, then “My data” and “Download my data”, gives you everything in one file.
• Correct it: your name and settings on the profile screen, a rating by rating the work again, a collection by editing it.
• Delete it: More, then “My data” and “Delete my account”.
• Stop the recording of how you use the app: More, then “Privacy”. A browser that sends the Global Privacy Control signal is not recorded at all.
• Take back the permission to use your position or your camera in your browser's settings.
• Ask anything else, or object to something, at support@articious.app. We answer within ten days.

If you think your data is handled wrongly, you can also turn to the data protection authority where you live.

Age

Articious is for people aged 14 and over. We do not knowingly keep data about younger children. If you believe a child has made an account, write to support@articious.app and it will be removed.

How it is protected

• Everything travels over encrypted connections.
• The database lets each person read only their own data, and the website holds no key that could read anybody else's.
• Staff need a second step to sign in, and what they do is recorded.
• Keys and other secrets are kept in a vault, apart from the code.

Changes to this notice

When this notice changes, the date at the top changes with it. A change that matters to you is announced in the app at least seven days before it takes effect.