1. Introduction
Atlas ("Atlas," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").
2. Information We Collect
Account Information
- Name and email address
- Authentication credentials (encrypted)
- Account preferences and settings
Financial Data
- Debt information (balances, interest rates, payment amounts) that you manually enter
- Expense logs and categories that you manually enter
- Budget allocations and income information that you manually enter
- Payment method names (we do not store card numbers or bank account details)
Usage Data
- App interaction data (screens visited, features used)
- Device information (device type, operating system)
- AI chat conversation history for personalized coaching
3. How We Use Your Information
- Provide debt tracking, budgeting, and expense management features
- Generate AI-powered financial insights and coaching
- Create personalized financial reports and projections
- Maintain activity streaks and progress tracking
- Send notifications you have opted into (payment reminders, reports)
- Improve our Service and develop new features
4. AI Data Processing
Our AI Financial Coach processes your financial data to provide personalized guidance. We take the following precautions:
- PII Sanitization: Personally identifiable information (names, account numbers) is stripped before being sent to AI models
- Zero Data Retention: AI providers do not retain your financial data after processing
- Scope Limitation: AI is restricted to debt elimination, budgeting, and expense analysis topics only
- Explicit Consent: AI features require your explicit opt-in before activation
5. Data Storage & Security
- All data is encrypted at rest (AES-256) and in transit (TLS 1.3)
- Database enforces Row-Level Security. Your data is isolated from all other users
- Authentication tokens are stored securely using platform-native secure storage (iOS Keychain / Android Keystore)
- We do not store credit card numbers, bank account numbers, or social security numbers
6. Data Sharing & Third-Party Processors
We do not sell, rent, or share your personal or financial data with third parties for advertising, marketing, or data-broker purposes. We share data only with the following processors, each bound by a data processing agreement:
- Supabase: database hosting, authentication, and Edge Function runtime. Stores your account, financial data, and AI chat history under Row-Level Security.
- OpenRouter (routing to OpenAI GPT models): processes AI chat messages to generate financial coaching responses. To answer you, each request includes your message, your currency and timezone, and a summary of your debts, budget and recent spending. Your name, email address and payment details are never sent. Every request is flagged to deny data collection, so OpenRouter routes only to providers that do not log prompts or use them for model training.
- PostHog: product analytics. Receives event metadata (screen views, feature interactions, categorical event properties such as debt type or category), your account email, your name, and your user ID so we can support you and understand product usage. Does not receive raw financial amounts or AI chat content. On the web version of Atlas, PostHog records session replays for roughly 10% of visits, with every input field masked, for diagnostic and usability-analysis purposes. On the iOS and Android apps, session replay runs only while you are in the onboarding flow, with all text inputs masked, and is switched off everywhere else in the app.
- Firebase Crashlytics: crash and performance diagnostics. Receives crash stack traces and basic device metadata. Crashlytics data is not linked to your account identity.
- Firebase Cloud Messaging: push notification delivery. Receives your device push token and the notification payload you have opted into receiving.
- RevenueCat: subscription entitlement management for in-app purchases. Processes purchase receipts from the App Store and Google Play; we never receive or store payment card details.
- Google (Sign in with Google) and Apple (Sign in with Apple): if you choose one of these sign-in options, the provider shares your email address and basic profile with us to create and authenticate your account, subject to its own privacy policy.
- Law enforcement or government authorities: only when compelled by valid legal process.
None of these processors use your data to target you with advertising in other apps or websites. We do not integrate any advertising SDK, attribution SDK, or data-broker integration in Atlas.
7. Public Tools & Website Visitors
Atlas offers public web tools (including the debt snowball calculator, an embeddable version of the calculator, downloadable templates, and content pages) that do not require an account. If you use these tools without signing in, we still collect some information about your visit:
- Analytics (PostHog): pageviews, device and browser information, approximate location derived from your IP address, and the referring page, including, when the embeddable calculator widget is loaded on a third-party site, the hostname of that site. We also record interaction events such as calculator use, template downloads, and share-card creation or visits.
- Purpose: we use this information to understand how visitors find Atlas and to improve the site. We do not use it to build advertising profiles or sell it to third parties.
If you are subject to the CCPA, GDPR, or a similar privacy law and want to exercise your rights over this visitor-level data, contact us at privacy@atlas-budget.com.
Share Cards
If you choose to "Share my debt-free date," the figures you include (your debt amount, unless you choose to anonymize it, and your debt-free date) are stored and rendered into a public image reachable by anyone who has the generated link. These links are not listed publicly, but they are notaccess-controlled. Anyone with the link can view the card. Contact support if you want a share card removed. To rate-limit this feature we store a one-way hashed version of your IP address, never the raw IP.
Aggregate Research
Atlas may publish de-identified, aggregated statistics derived from account data, for example, an "Atlas Debt Payoff Index." We only publish a figure when it covers at least 50 users, so no individual is identifiable.
8. Your Rights
You have the following rights regarding your data:
- Access: View all data we have stored about you via the app
- Correction: Edit or update your personal and financial information at any time
- Deletion: Request complete account deletion from Settings. All data is permanently removed within 30 days
- Export: Request a copy of your data by contacting support
- Withdrawal of Consent: Disable AI features or notifications at any time
9. Data Retention
We retain your data for as long as your account is active. When you delete your account, it is deactivated immediately and all associated data, including your financial records and AI chat history, is permanently deleted from our systems within 30 days. During this period you may restore your account and recover your data. On deletion we also sign your device out of RevenueCat and request deletion of your PostHog analytics profile. Store purchase records held by Apple or Google are governed by their policies.
10. Children's Privacy
Atlas is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.