Atrium developer agreement

This agreement, effective from 8th October 2026, applies when you register as a developer on Atrium, the COHO app store, and publish apps there. It’s between you (“you”, “the developer”) and Company For Life Ltd, trading as COHO (“we”, “us”). Company number 12078021, registered office COHO @ The Kiln, 2 Copenhagen St, Worcester, WR1 2HB..

You accept this agreement when you create your developer account. If you’re accepting on behalf of a company, you confirm you have authority to do so.

How this agreement fits together

This is the core agreement for every Atrium developer. Depending on your app, other documents also apply:

If they conflict, they apply in this order: your Commercial Schedule, then the addenda, then this agreement, then the guidelines.

Who can be an Atrium developer

You must be a business: a company, partnership or sole trader acting in the course of your business.

You must:

  • give us accurate information about yourself and your business, and keep it up to date;
  • tell us within 14 days about any change of ownership, directors, bank details or VAT status;
  • keep your developer account credentials and API keys secure, and tell us straight away if you think they’ve been compromised.

Developer fee

To publish apps in Atrium, you pay an annual developer fee of £99 plus VAT. It covers your developer account and our review of your apps for 12 months.

  • You pay it when you register, and then every year on the anniversary of your registration, by card through Stripe. It renews automatically until you close your developer account.
  • If we reject your first app, or you close your account before publishing any app, we’ll refund the fee for that year. Otherwise it isn’t refundable.
  • If you don’t pay it, we may stop you publishing new apps or updates, and remove your apps from sale, until you do.
  • We may change the fee by giving you at least 30 days’ notice before your next renewal.
  • We may waive or reduce the fee by agreement. If we do, it’ll be set out in your Commercial Schedule.

The developer fee is separate from any revenue share or hosting charges under the addenda.

Checks we carry out

We check developers before they publish apps and from time to time afterwards. We may ask you, at any time, for any information we reasonably need to verify who you are, who owns or controls your business, your bank details, your VAT status and your insurance.

You confirm that neither you, nor anyone who owns or controls your business, nor any of your directors, is subject to UK, UN, EU or US sanctions.

We may hold back payments to you, or delay publishing or updating your apps, until our checks are complete. We may end this agreement immediately if we have a sanctions concern.

Publishing your app

Every app, and every update that changes what data it can access, must pass our review before it’s published. Our review follows the App review & listing guidelines.

Your app’s listing must be accurate and complete. It must include:

  • what the app does;
  • the permissions it needs, and why it needs each one;
  • where it processes data;
  • links to your privacy policy and your licence terms, if you use your own;
  • the price and billing basis, if it’s paid;
  • a support contact.

Ask only for the permissions your app genuinely needs.

We may reject an app or an update. If we do, we’ll tell you why.

What you allow us to do

You give us a non-exclusive, worldwide, royalty-free right, for as long as this agreement lasts, to:

  • list, display, market and promote your app, using your name, logo and screenshots;
  • sell your app, and anything bought inside it, to customers, if it’s paid for through Atrium;
  • host and run your app, if we host it;
  • make copies needed to do these things.

You keep ownership of your app and all intellectual property in it.

Your terms with customers

Customers use your app under licence terms between you and them. You can use your own licence terms, as long as they meet the minimum requirements in the App review & listing guidelines and don’t conflict with the Atrium terms. If you don’t provide your own, the Atrium standard app licence applies.

You agree to be bound, with every customer who installs your app, by:

You agree that:

  • customers accept these documents when they install your app, without anything more being needed from you;
  • we may enforce them against you on customers’ behalf;
  • we may update them. We’ll give you at least 30 days’ notice of any change, unless it’s needed to comply with the law.

Selling your app

Paid apps, and anything bought inside an app, are sold through Atrium under the Distribution & billing addendum. We sell to customers in our own name, and we pay you your share. You don’t sell to Atrium customers, and we don’t act as your agent.

Unless we agree otherwise in writing:

  • every paid tier, upgrade, add-on or credit in your app must be bought through Atrium, using our billing and entitlements API;
  • your app and its listing must not direct Atrium customers to pay you or anyone else in another way, through links, buttons, messages or emails.

You’re free to sell your app outside Atrium, at any price you choose. Customers who already pay you directly when they first install your app from Atrium can stay on their existing arrangement with you.

Using customer data

You may use customer data only to provide your app to the customer who installed it.

You must not:

  • sell customer data, or share it with anyone except as the Atrium Standard App Data Processing Agreement allows;
  • use it for your own purposes, or to build profiles, datasets or products for anyone else;
  • use it to train artificial intelligence models without the customer’s written agreement;
  • try to access data, or parts of COHO, that your app’s approved permissions don’t cover.

If we host your app, you won’t have access to customer data, logs or backups in our environment. The Hosting addendum explains what you get instead.

Using our API

When you use our API:

  • keep your API keys secret, and never put them in code that runs in a browser or on a customer’s device;
  • stay within our rate limits and fair use limits;
  • don’t scrape, overload, reverse engineer or try to get around any limit or security measure;
  • follow our API documentation, and keep your app working when we update the API. We’ll give you at least 30 days’ notice before we change or remove anything your app relies on, unless we need to act sooner for security or legal reasons.

Security and incidents

You must keep your app, and any systems it runs on, secure. As a minimum, you must meet the security standards in the Atrium standard app data processing agreement and, if relevant, the Self-hosted data protection addendum.

If you become aware of a security incident or personal data breach affecting your app or COHO customers, you must:

  • tell us, and the affected customers, without undue delay and in any case within 48 hours;
  • give us the information we reasonably ask for;
  • work with us to contain and fix it.

If you find a security vulnerability in COHO, tell us privately at team@coho.life and don’t disclose it publicly until we’ve fixed it.

Support and maintenance

You must:

  • support your app, through the support contact on its listing, and respond to customers within a reasonable time;
  • keep your app working, secure and up to date;
  • tell us at least 90 days before you stop supporting your app.

If you stop supporting your app, or this agreement ends, you must keep supporting customers who already have your app for 90 days afterwards, unless we agree otherwise. During that time, we may remove the app from sale.

Insurance

You must hold professional indemnity insurance with a reputable insurer, at the level that matches your app’s risk, while your app is available in Atrium and for at least 12 months afterwards:

  • Free, hosted by you, and with read-only access to data that doesn’t identify people – Not required
  • Paid, or with any access to personal data – £250,000
  • Hosted by us, or able to change tenant, financial or payment data – £500,000

If your app falls into more than one row, the highest applies. We’ll tell you which level applies when we review your app. We may agree a different level with you in writing, in your Commercial schedule.

You must give us a copy of your certificate before your app is published, and whenever we ask. Tell us straight away if your cover lapses or is reduced. If it does, we may suspend your app and hold back payments until it’s restored.

Your promises

You promise that:

  • you have all the rights needed to grant the licences in this agreement and to license your app to customers;
  • your app, and its use as described on its listing, won’t infringe anyone’s intellectual property or other rights;
  • your app doesn’t contain viruses, malware, hidden features or anything designed to harm customers, their data or COHO;
  • your app, your listing and your business comply with the law, including data protection, consumer and advertising law;
  • the information you give us, and your listing, are accurate.

Protecting us from claims

You’ll protect us, and pay our losses, if any claim is made against us, or any loss is caused to us, because of:

  • your app, including any claim by a customer about it;
  • your app, or its use as described on its listing, infringing someone’s intellectual property or other rights;
  • you breaching the Atrium Standard App Data Processing Agreement, data protection law or the security requirements in this agreement;
  • you breaching this agreement or the law;
  • any fine or penalty imposed on us because of something you did, to the extent the law allows.

This includes reasonable legal costs. These obligations aren’t limited by the liability limits below.

We’ll tell you promptly about any claim, let you take part in its defence at your cost, and not settle it without talking to you first. We stay in control of any claim made against us.

Our responsibility to you

We provide Atrium, our API and our developer tools “as is”. We don’t promise that they’ll be uninterrupted or error free, or that your app will sell.

We’re not responsible for:

  • indirect or consequential loss;
  • loss of profit, revenue, business or goodwill.

Our total liability to you under this agreement and its addenda, in any 12-month period, is limited to the total amount we paid you in the 12 months before the event that caused the claim, or £1,000, whichever is higher.

Nothing in this agreement limits liability for death or personal injury caused by negligence, for fraud, or for anything else the law doesn’t allow to be limited.

Suspending or removing your app

  • We may suspend your app, remove it from Atrium, or cut off its access to our API or to customer data, at any time if:
  • we believe it’s a risk to the security of COHO, customers or their data;
  • you breach this agreement, any addendum or the guidelines;
  • you stop supporting the app, or it uses software that’s no longer supported;
  • your insurance lapses, or our checks on you fail;
  • we receive a credible complaint, or a claim, about the app;
  • the law, a regulator or a court requires it.

Where we can, we’ll tell you first, explain why, and give you a reasonable chance to put things right. In urgent cases, we’ll act first and explain afterwards.

Ending this agreement

You can end this agreement at any time by giving us 30 days’ written notice.

We can end it:

  • at any time, by giving you 30 days’ written notice;
  • immediately, if you seriously breach it, if we have a sanctions concern, if you become insolvent, or if your app is a serious risk to customers or their data.

When this agreement ends:

  • we’ll remove your apps from Atrium;
  • your support obligation for existing customers continues for 90 days, as set out above;
  • we’ll pay you any amounts due, after deducting refunds, chargebacks and anything else you owe us, under the Distribution & Billing Addendum;
  • your obligations to delete customer data, under the Atrium Standard App Data Processing Agreement, still apply.

Anything that by its nature should continue after this agreement ends will continue, including the sections on customer data, confidentiality, protecting us from claims and responsibility.

Confidentiality

Each of us must keep the other’s confidential information confidential, and use it only for this agreement. This includes unreleased features, our API documentation, pricing, and your Commercial schedule. This doesn’t apply to information that’s already public, or that the law requires to be disclosed.

Changes to this agreement

We may update this agreement from time to time. We’ll give you at least 30 days’ notice of any change, unless it’s needed to comply with the law or to deal with a security risk. If you don’t agree to a change, you can end this agreement before it takes effect. If you keep using Atrium after that, you accept the change.

Other important terms

  • Our relationship. We buy and resell paid apps. We’re not your agent, partner or employer, and neither of us can bind the other.
  • Your subcontractors. You’re responsible for anyone you use to build, run or support your app, as if they were you.
  • Transfers. You can’t transfer this agreement without our written agreement. We may transfer it to another company that takes over COHO or Atrium.
  • Notices. We’ll send notices to the email address on your developer account. Send notices to us at team@coho.life.
  • Third parties. Customers can’t enforce this agreement, but they can rely on the Atrium standard app licence and the Atrium standard app data processing agreement directly.
  • Whole agreement. This agreement, its addenda, your Commercial schedule and the documents it refers to are the whole agreement between us about Atrium.

Law

This agreement is governed by the law of England and Wales. The courts of England and Wales deal with any dispute.