Privacy Policy

Effective date: September 23, 2026

Atlas is made by Adriano Fiuza, an independent solo developer. This policy explains, in plain language, what data Atlas handles and why. If anything is unclear, email support@atlasapp.so.

The short version

• Atlas collects only what it needs to work: your account email, an optional profile name and picture, your device’s notification token (so an invite can reach you), and the content you create (tasks, projects, focus statistics, attachments, any voice memos you recorded, and whatever else you write or save in Atlas).
• There are no ads, no third-party analytics or trackers, and your data is never sold or shared for marketing.
• If you choose to share an item with someone, its content becomes visible to the people you invite. Sharing is opt-in, per item, and you control who has access.
• Atlas keeps basic usage statistics (like days active) in its own database to understand how the app is doing. No third party receives them.
• Your content syncs through Supabase (hosted infrastructure) so it appears on all your devices.
• Your content is not end-to-end encrypted. Requiring Face ID for a shared item restricts access on that device only; on the server, everything is stored like any other content.
• You can export your data and delete your account (and everything with it) from inside the app at any time.

What data Atlas collects

Account email. Used to create and sign in to your Atlas account and to identify which synced data belongs to you.

Profile name and picture. If you set a display name or a profile photo in Settings, they are stored with your account so they appear on all your devices. Both are optional, and clearing them in Settings removes them from the account.

Milestones. When you reach a milestone for finished tasks (25, 50, 100, 250, 500, 1,000, 2,500, 5,000, or 10,000), Atlas stores the milestone, the date you reached it, and the ID of the task that reached it with your account, never the task’s title or content. This syncs across your devices, so each milestone is celebrated only once. A copy is kept on your device and removed when you sign out. Milestones are included in your data export and deleted with your account.

Your content. Tasks, projects, focus session statistics, any attachments (such as photos) you add, any voice memos you recorded, and whatever else you write or save in Atlas. This is the substance of the app, so Atlas stores it to show it back to you and sync it across your devices.

Shared items (optional). Atlas lets you share an item with other Atlas users by invite. If you share an item, its content, and any edits made by people you’ve invited, becomes visible to everyone with access, not just you. You choose who to invite (by email), what they can do (view or edit), and can remove their access or stop sharing the item at any time. Anything you have not chosen to share stays private to you.

Usage statistics (first-party). Atlas records basic activity, such as days you opened the app, time in the foreground, app version, language, and whether your account has an active subscription, in Atlas’s own database, tied to your account. This powers aggregate numbers (like how many people use Atlas daily) and is never shared with third parties.

Beyond that, Atlas does not collect your location, contacts, browsing history, device fingerprints, or advertising identifiers.

What Atlas does not do

• No ads. Atlas shows no advertising of any kind.
• No voice sent anywhere. Speech captured for voice tasks is processed only on your device. It is never uploaded to Atlas, never sent to any third-party service, and is not used to train anything.
• No third-party analytics. Atlas contains no third-party analytics SDKs or trackers; the basic usage statistics above live only in Atlas’s own database.
• No tracking. Atlas does not track you across other apps or websites, and uses no advertising identifiers.
• No sale of data. Your data is never sold, rented, or shared with third parties for their own purposes.

Where your data lives (sync)

When you sign in, your content is stored on servers operated through Supabase, a hosted infrastructure provider, so it can sync between your devices. Data is encrypted in transit (HTTPS/TLS) and protected by access controls so that only your account can read your data through the app.

Important honesty note: your content is not end-to-end encrypted. This means the server stores your content in a form that is technically readable by the infrastructure, as is the case for most sync services. The developer does not browse user content, but you should not store anything in Atlas that you would not entrust to a standard cloud service.

Face ID. Anything you wrote with features Atlas has since retired is still here and still syncs, but it is now read-only and shown plainly, so the Face ID lock of earlier versions no longer hides it on your device. If you use shared items, you can still choose to require Face ID to open a particular shared item on a particular device; that choice is stored on that device only and never affects anyone else’s copy. Neither the old lock nor that setting adds server-side encryption: these items are stored on the server the same way as everything else.

Device permissions, explained

Atlas asks for permissions only when a feature needs them. Each one is optional:

• Notifications: to deliver task reminders and focus-session alerts you set, plus the morning summary and the Sunday planning reminder, which are on by default and can be turned off in Settings. All of these are scheduled locally on each of your devices. Atlas also uses notifications to let you know when someone invites you to a shared item. That invite arrives as a push sent from Atlas’s server, so your device’s notification token is stored with your account; Atlas deletes it when you sign out, and unused tokens are pruned on the server.
• Calendar: only if you choose to connect calendar features; used to display or create events you ask for. Calendar data is read on-device and is not uploaded to Atlas servers. Events shown inside Atlas are read live from your device each time you view a day, and are never stored, synced, or turned into tasks.
• Microphone: when you capture tasks by voice. Voice capture is transcribed and interpreted entirely on your device, using Apple’s on-device speech and language models. The audio is never recorded to a file, never uploaded, and never sent to any third party; it is discarded the moment you finish. Only the tasks you confirm are saved. Atlas no longer records voice memos; any you recorded with an earlier version are still yours, still stored with what you wrote, and still sync.
• Face ID / Touch ID: to protect a shared item on this device, and to unlock it again. That choice is stored only on your device and never changes anyone else’s copy. Biometric data is handled entirely by Apple’s operating system; Atlas never sees, stores, or transmits your biometric information.
• Photos: only when you pick an image yourself: attaching one to a task, or setting your profile picture. Atlas uses the system photo picker and sees only the photos you choose, never the rest of your library. Attached images and your profile picture are stored with your account and sync across your devices. Images attached to anything you wrote with features Atlas has since retired stay part of your content too. If you save a picture of a finished focus session, Atlas asks for permission only to add photos: it can add that picture to your library but cannot see or read anything in it. The picture is made on your device and is not uploaded.

Data retention and deletion

• Export: Settings includes a data export so you can take a copy of your content at any time.
• Delete Account: the in-app Delete Account option permanently removes your account, your email, and all synced content from the servers. This is irreversible. Residual copies in routine infrastructure backups expire on the provider’s standard backup cycle.
• Uninstalling the app removes local data from that device but does not delete your synced account; use Delete Account for that.

Your rights (GDPR, CCPA, and similar laws)

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to lodge a complaint with a supervisory authority. Atlas is built so you can exercise the main ones yourself: export from Settings, deletion via Delete Account. For anything else, or if you just want help, email support@atlasapp.so and you’ll get a reply from the actual developer.

For GDPR purposes, the legal basis for processing your account and content is performance of a contract (providing the app and sync you signed up for); first-party usage statistics are processed under legitimate interest (operating and improving the app). For CCPA purposes: Atlas does not sell or share personal information.

Children

Atlas is not directed at children under 13 (or the minimum age in your region), and no data is knowingly collected from them.

Changes to this policy

If this policy changes in a meaningful way, the updated version will be published with a new effective date, and significant changes will be highlighted in the app or release notes.

Contact

Adriano Fiuza, support@atlasapp.so