Privacy Policy

Scope of this policy

This policy covers:

• the website atelier-n24.ch (presentation, shop, contact form, newsletter);
• the ‘Atelier N°24’ iOS mobile app (A24), used to control and configure A24 devices;
• the associated Atelier N°24 services, in particular the telephony service between A24 devices, available at tel.numero24.ch.

Data controller

Pixinside SA, operating the Atelier N°24 brand
Represented by Jean-Daniel Kneubuhler
Chemin du Curson 12b, 1197 Prangins — Switzerland
Commercial register number: CH-550.0.113.142-4
Contact for any questions regarding your data: info@atelier-n24.ch

No tracking, no advertising

The Atelier N°24 app contains no advertising, no analytics SDK and no tracking or ad-tracking tools. It does not use Apple’s advertising identifier (IDFA) and does not request iOS tracking permission. No data is sold or transferred to third parties for commercial or advertising purposes.

Data collected

• Contact form: name, email address, message.
• Orders: surname, first name, delivery and billing address, email address, telephone number. Payment is made exclusively by bank transfer or in cash on collection from the workshop; no bank details are collected or stored on the website.
• Newsletter: email address, only if you explicitly subscribe.
• Technical data: IP address, browser, pages visited (server logs and cookies).

Purposes

• Responding to your enquiries (contact, quotes, bespoke projects).
• Processing, shipping and invoicing your orders.
• Keeping you informed of our latest news if you subscribe to the newsletter.
• Ensuring the security and proper functioning of the website.
• Complying with our legal obligations (accounting, retention of invoices).

Legal basis

Depending on the case, processing is based on the performance of a contract (orders), your consent (newsletter, non-essential cookies), our legal obligations (accounting) or our legitimate interests (website security).

Recipients

• The carrier responsible for delivery (Swiss Post or another carrier).
• Infomaniak Network SA (Geneva, Switzerland), our hosting provider.
• Infomaniak, our newsletter service provider, if you are subscribed.

Retention periods

• Contact enquiries: up to 24 months after the last exchange.
• Orders and invoices: 10 years (Swiss statutory accounting obligation).
• Newsletter: until you unsubscribe.
• Website technical logs: 12 months maximum.

Cookies

The website uses cookies to ensure it functions properly (basket, session) and, subject to your consent, to measure audience. You can adjust your preferences at any time via the banner provided for this purpose at the bottom of the website.

The mobile app does not use any cookies, and the ‘Privacy Policy’ and ‘App Support’ pages can be viewed without an account and without prior acceptance of cookies.

What the app does

Among other things, the app allows you to:

• detect and control your A24 radios on your local network;
• configure an A24 device via Bluetooth by sending it your Wi-Fi network details;
• scan the QR code on an A24 device to make it easier to configure;
• register and control your A24 lamps via Bluetooth;
• display short notes, reduced-size photos, animated GIFs, maps and timers on a Lucarne;
• display today’s calendar and your iPhone’s Reminders on a Lucarne;
• configure a Lucarne’s weather, public transport, menu ideas and arrival announcement features;
• create scenes combining radios and lamps, then start them manually, at a chosen time or when you arrive;
• create or join a shared ‘space’, invite other people and manage the devices linked to it;
• make and receive calls between your iPhone and your A24 phones;
• receive incoming call notifications via Apple PushKit / APNs;
• use iOS widgets and Siri commands for compatible features;
• view technical information and trigger firmware updates.

Permissions requested by the app

• Bluetooth – to discover, configure and control compatible A24 devices and lamps.
• Local Network – to detect devices via Bonjour/mDNS and communicate with them on your network.
• Camera – to scan an A24 QR code or to deliberately take a photo intended for a Lucarne.
• Photo Library – to deliberately choose a photo or Live Photo intended for a Lucarne.
• Calendars – only if you enable a Lucarne’s calendar, to read events from the calendars you choose.
• Reminders – only if you enable a Lucarne’s Reminders, to read uncompleted reminders from the lists you choose.
• Microphone – only during a call with an A24 phone.
• Notifications / PushKit – only to alert you to an incoming call.
• Location ‘While Using the App’ – to define an arrival zone, choose your current location or calculate a journey time.
• Location ‘Always’ – only if you enable an arrival automation, in order to trigger the associated scene by geofencing even when the app is closed.

When searching for devices on the local network, the app uses Bonjour/mDNS discovery. This search may temporarily reveal, in the intermediate results, other devices on your network that advertise themselves over HTTP; only A24 devices are kept and displayed, and this information is not passed on to anyone.

What stays on your iPhone

The following data is stored locally on your device:

• the IP addresses and host names discovered on the local network, as well as the list of devices you have chosen to ignore;
• the Bluetooth identifiers used to find your A24 lamps. The Bluetooth identifier is the one provided by iOS and is specific to your installation of the app; it is not a permanent hardware address;
• your app preferences, including whether demo mode is enabled;
• your geofencing regions and personal automations. The app does not build up any continuous history of your movements;
• the Wi-Fi SSID and password that you choose to save (see below);
• the content of the QR code read during setup: it is processed in memory for the duration of the operation and is not stored.

Certain names, settings and devices are also stored in your space on tel.numero24.ch when you use shared or remote features. Likewise, a location chosen for a shared Lucarne feature may be sent to the server or to a third-party service as described below.

iOS call history. Calls made and received with your A24 phones use CallKit, Apple’s calling system. As such, they appear in your iPhone’s call history (Phone app, ‘Recents’ tab), just like an ordinary call. This history is managed by iOS, stays on your device and may be synced with iCloud depending on your Apple settings. Atelier N°24 has no access to it and does not pass it on to anyone. You can delete it from the iOS Phone app.

In demo mode, the app simulates a fictitious radio, phone and lamp so that you can try out the interface without any hardware. Demo data is entirely local and generates no network communication.

Your Wi-Fi credentials

If you ask the app to remember a Wi-Fi network password, it is stored in the secure iOS Keychain with the following protections: accessible only when your iPhone is unlocked, not synced with iCloud and excluded from backups, and therefore cannot be restored to another device. Saving is optional: if you do not request it, the password is not kept.

Your Wi-Fi credentials are never sent to Atelier N°24’s servers. They are sent directly to the A24 device over an encrypted Bluetooth connection, secured by the proof-of-possession code shown on the device’s QR code.

You can delete a saved Wi-Fi password from within the app. We do not document here how the iOS Keychain behaves when the app is uninstalled: if you want to be certain that no credentials remain, delete them from within the app before uninstalling it.

What is sent to our servers (tel.numero24.ch)

Shared spaces, telephony and remote control require a server. As soon as you create or join a space or use a compatible remote feature, the following data may be sent to tel.numero24.ch and stored there:

• a random identifier generated by the app when it is first used. It identifies your installation and is not linked to your identity, your Apple Account or any hardware identifier of the iPhone;
• the technical name of the device within the space;
• the space identifier, its name and the enrolment code used to join it;
• a device secret used to authenticate your requests. It is generated randomly and kept in your iPhone’s Keychain; the server stores only a cryptographic hash of it, never the secret itself;
• your administrator status within the space and the internal number assigned to you;
• the list of devices in the space and their settings (names, volumes, ringtone, role, firmware version, linked devices), as well as the invitations and information needed to manage them;
• short notes intended for a Lucarne, with any signature, their appearance, their duration, the target Lucarne and the display or rotation time;
• photos that you choose to send remotely, reduced on the iPhone to a 64 × 64 pixel image before transmission, together with the target Lucarne and the display or rotation time;
• today’s calendar and Reminders, if you enable these features: shortened titles and times, over a 48-hour window. Reminders are always end-to-end encrypted on your iPhone with the key of the target Lucarne: the server only relays an unreadable block, and a Lucarne that cannot open it receives nothing. The calendar is encrypted in the same way as soon as the Lucarne supports it; an older Lucarne receives it unencrypted. This data is deleted from the server no later than 72 hours after it is sent;
• the settings of shared Lucarne features. These may include the precise coordinates of a destination location chosen by a member of the space;
• the feature or plugin installations needed to configure the Lucarne;
• your Apple PushKit token and the corresponding APNs environment, needed to notify you of an incoming call;
• the call metadata needed to establish the connection (call identifier, caller, recipient, timestamp);
• technical logs sent by A24 phones for diagnostic purposes. They are kept in RAM only, limited to the most recent entries, and erased each time the server restarts;
• session information (connection and disconnection times, duration), recorded in the server’s operational and security logs. Your full IP address is not stored in them: it is truncated before being written (the last block is masked for IPv4, and only the network prefix is kept for IPv6), and events relating to a device are linked to a random, ephemeral connection identifier rather than to an IP address.

If you use neither a shared space, nor telephony, nor remote control, these features do not need to send their data to tel.numero24.ch.

Short notes are not encrypted

A short note intended for a Lucarne travels like a postcard: its text, its signature and the Lucarne to which it is addressed are transmitted and stored unencrypted on tel.numero24.ch. The connection is encrypted in transit (TLS), but the content is not end-to-end encrypted: technically, Atelier N°24 and its hosting provider are able to read it.

We do not do so, and the text of a short note appears neither in the server logs nor in those of the Lucarne (provided it is up to date), and it is masked in our administration console. But we would rather tell you this than imply a guarantee that the app does not offer today. The app reminds you of this when you write a note.

The audio of your calls

During a call, the sound picked up by your iPhone’s microphone is transmitted in real time to tel.numero24.ch over an encrypted connection, so that it can be relayed to the A24 phone of the person you are talking to.

This audio is not recorded, not written to disk and not kept after the call: the server merely relays it in memory to the participants in the conversation, and audio data that cannot be delivered immediately is discarded rather than queued. The audio is not passed on to any third party.

To be precise about the level of protection, there are two scenarios:

• Between two A24 phones paired on the same local network, the audio does not pass through our servers: the devices discover each other on your network and communicate directly, using AES-256-GCM end-to-end encryption (authenticated encryption). The server only provides the key to the two paired devices and receives no audio.
• When the call involves your iPhone, the audio passes through tel.numero24.ch. The connection is encrypted in transit (TLS), but it is not end-to-end encrypted: technically, the server relays an unencrypted audio stream. We do not listen to it and do not keep it, but we would rather tell you this than imply a guarantee that the app does not offer today.

Third-party services actually used by the app

The app or the associated Atelier N°24 services contact the following services:

• Apple — APNs / PushKit (Apple Inc., United States): to notify you of an incoming call. Apple receives the target PushKit token and a notification containing the call identifier, the identifier of the calling device and the caller’s display name. It contains no audio content.
• Apple — MapKit: to look up a route and calculate a journey time. Apple may receive the chosen starting location or the iPhone’s current location, as well as the destination and the parameters needed for the calculation.
• Infomaniak Network SA (Geneva, Switzerland): hosting of the atelier-n24.ch website and the tel.numero24.ch server. Infomaniak therefore hosts the website and space data described on this page and processes the technical data needed for connections, including the IP address.
• GitHub (GitHub Inc., United States): to check the list of available firmware versions and download updates, as well as the list of football teams (openfootball open data). No personal data is sent; GitHub sees the IP address from which the request originates.
• GIPHY (GIPHY, Inc., United States): when you search for a GIF to display on a Lucarne, your search terms are sent directly from your iPhone to GIPHY, which returns the results; without a search, the app displays trending GIFs without sending anything. No account or device identifier is transmitted; GIPHY sees your iPhone’s IP address. Atelier N°24 neither receives nor stores these searches. The chosen GIF is reduced in size on your iPhone before being sent to the Lucarne. See GIPHY’s privacy policy.
• National League (Swiss ice hockey league): to download the list and logos of the clubs displayed on the Lucarne. No personal data is sent; the service sees the IP address from which the request originates.
• Radio Browser (community radio directory, server located in Germany): when you search for a station, the text you enter is sent to this service to obtain the results.
• iTunes Search API (Apple Inc., United States): to retrieve the cover art of the album currently playing. The name of the artist, track or album broadcast by your radio station is sent to this service.
• Open-Meteo: to search for a place by name and display the weather. The search text is sent when you search for a place; the coordinates of the chosen place are sent to obtain the corresponding forecast.
• transport.opendata.ch: to search for stops and display upcoming departures. Depending on the action requested, the name of the stop searched for or its location, and then the identifier of the chosen stop, are sent.

If you choose to open a track in Apple Music or Spotify from the app, your iPhone opens the corresponding app or website; the processing is then governed by the privacy policy of those services.

Transfers outside Switzerland

Data relating to your space and to telephony is hosted in Switzerland, by Infomaniak Network SA.

Transfers outside Switzerland may take place in connection with the third-party services listed above, in particular Apple (notifications, routes and cover art search), GitHub, GIPHY, Radio Browser and Open-Meteo. These transfers are limited to the necessary data described above.

Retention periods (app and telephony service)

• Space and device data (installation identifier, name, internal number, status, settings, PushKit token): kept for as long as the device is registered in a space. It is deleted when you delete your identity yourself from within the app, when an administrator removes the device, when the space is deleted, or at your request by email. There is no automatic deletion after a fixed period.
• Apple PushKit token: deleted at the same time as the device, or automatically as soon as Apple informs us that it is no longer valid.
• A24 phone technical logs: kept in RAM only and erased when the server restarts.
• Call metadata: the call state is kept in memory for the duration of the call and deleted when it ends. No detailed call records are compiled; traces of calls may remain temporarily in the server’s operational logs.
• Server operational and security logs: kept for a maximum of 90 days, then deleted automatically. They may be kept for longer only in the context of an ongoing security investigation. IP addresses appear in them only in truncated form, reduced to the network prefix, and are never associated with your device identifier.
• Local app data: kept on your iPhone until you delete it or uninstall the app.

Security measures

We implement appropriate technical and organisational measures to protect your data against loss and against unauthorised access or disclosure: encryption of communications between the app, the website and our servers (HTTPS/TLS), authentication of each device by a random secret of which only a hash is stored on the server side, separation of spaces (a device can only access the data of its own space), AES-256-GCM end-to-end encryption of direct calls between paired A24 phones and of the Reminders and calendar sent to a compatible Lucarne, encryption of the Bluetooth connection during setup, storage of Wi-Fi credentials in the secure iOS Keychain, restricted access to servers and backups.

As no system is infallible, we cannot guarantee absolute security.

Your rights

You have the following rights at any time:

• To access your data and obtain a copy of it.
• To request the rectification of inaccurate data.
• To request the erasure of your data (subject to legal obligations).
• To object to processing or to request its restriction.
• To withdraw your consent at any time.

To exercise these rights, please write to us at info@atelier-n24.ch. We respond to all requests within 30 days. We may ask you for information enabling us to verify your identity or to identify your installation before taking action.

Withdrawing your consent

• Newsletter: via the unsubscribe link included in every mailing.
• Website cookies: via the cookie management banner at the bottom of the page.
• App permissions: you can revoke access to Bluetooth, Local Network, Camera, Photos, Microphone, Notifications, Location, Calendars and Reminders at any time in Settings → N°24 on your iPhone. Some features will then stop working.
• Telephony: by requesting the deletion of your device or your space (see below).

Deleting a space and its data

You can delete your data directly from within the app, without writing to us.

Deleting your identity and leaving a space. Open App Settings → Space, invitations and devices → Data and space, then tap ‘Delete my identity and leave’. This permanently deletes your device’s record, its settings, its authentication secret and its notification token from the server, and removes your iPhone from the space.

Deleting an entire space. If you are the manager (administrator) of the space, the same section offers ‘Delete the entire space’. As a safety measure, the app asks you to enter the exact name of the space to confirm. This deletes all members, settings, secrets and notification tokens associated with the space. It cannot be undone.

Removing another device. An administrator can also remove an individual device from the space via the list of members.

By email, if you no longer have access to the app (lost iPhone, app uninstalled, space of which you are not an administrator): write to us at info@atelier-n24.ch, stating:

• the name of the space concerned;
• the internal number assigned to your device, or its name as shown in the app.

These two pieces of information are sufficient to identify your installation. We process deletion requests within a maximum of 30 days. Do not send us your device secret, your enrolment code or your Wi-Fi credentials: we do not need them.

Detailed instructions can be found on our app support page.

Complaints

You may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, or with your national supervisory authority if you reside in the European Union.

Contact us

Questions about your data: info@atelier-n24.ch
App technical support: atelier@numero24.ch
Post: Pixinside SA — Atelier N°24, Chemin du Curson 12b, 1197 Prangins, Switzerland

Changes to this policy

This policy may be amended to reflect changes to the app, our services or the law. The date of the last update is shown below and is authoritative. In the event of a significant change concerning the processing of your data, we will inform you by means of a visible notice on this page and, where necessary, directly in the app or by email.