Trust and privacy
This page is maintained by Atlas to answer common security and privacy questions about the app. It reflects current practices and enabled controls.
Authentication & Access
- Atlas uses email and password sign-in, and Google, Microsoft or Apple sign-in where they are switched on, all through Atlas's own sign-in service (Supabase Auth).
- Your sign-in is a signed token (JWT) kept in your browser's local storage on your own device. Atlas sets no advertising or analytics cookies.
- Row-level security (RLS) policies restrict data access so users can only read and modify their own records.
- Family sharing connections require explicit invitation and acceptance.
Platform & Hosting
- During the trial, Atlas runs on Microsoft Azure servers in Denmark (European Union), served over HTTPS.
- Your data is stored in a Postgres database and file storage that run Supabase software, operated by us on those servers.
- The full list of services that receive your data is in the Privacy Policy.
Data Collection & Use
- Atlas collects only the data needed to operate your planner: tasks, calendar events, health logs, and preferences.
- Voice interactions are processed by our voice provider, ElevenLabs or Microsoft Azure Speech, only after you agree to the AI notice. Your microphone audio and Atlas's spoken replies are sent to that provider.
- We do not sell personal data or use it for advertising.
- Optional calendar sync (Google, Microsoft, iCloud) keeps its access tokens on Atlas's servers. Your browser cannot read them, and Atlas never shares them.
Cookies & Analytics
Atlas does not use advertising or analytics cookies. Your sign-in session is kept in your browser's local storage. A short-lived security cookie is set while you connect a wearable. Pages load fonts from Google, so Google sees your IP address.
Retention & Deletion
- Your data is retained while your account is active.
- You can delete individual tasks, events, and logs at any time.
- You can delete your account yourself: open Profile and choose Delete account. It removes your account and your data from Atlas straight away, including files and photos. What stays, and why, is set out in section 8 of the Privacy Policy. Steps are also on the account deletion page.
Privacy Requests
You can download your data in Settings, under Your data. To exercise any other privacy right (correction, deletion, restriction, objection), email privacy@atlaspa.app. We answer within one month.
Security & Incident Contact
For security concerns or to report an incident, email support@atlaspa.app. We take all reports seriously and will investigate promptly.
Vulnerability Reporting
If you discover a security vulnerability in Atlas, please report it responsibly. Do not publicly disclose the issue before we have had a chance to address it.
This page is app-owned editable content. It is not an independent certification or verification. Last updated November 2026.