1. Introduction
Atlas ("Atlas," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web platform (collectively, the "Service").
2. Information We Collect
Account Information
- Name and email address
- Authentication credentials (encrypted)
- Account preferences and settings
Financial Data
- Debt information (balances, interest rates, payment amounts) that you manually enter
- Expense logs and categories that you manually enter
- Budget allocations and income information that you manually enter
- Payment method names (we do not store card numbers or bank account details)
Usage Data
- App interaction data (screens visited, features used)
- Device information (device type, operating system)
- AI chat conversation history for personalized coaching
3. How We Use Your Information
- Provide debt tracking, budgeting, and expense management features
- Generate AI-powered financial insights and coaching
- Create personalized financial reports and projections
- Maintain activity streaks and progress tracking
- Send notifications you have opted into (payment reminders, reports)
- Improve our Service and develop new features
4. AI Data Processing
Our AI Financial Coach processes your financial data to provide personalized guidance. We take the following precautions:
- PII Sanitization: Personally identifiable information (names, account numbers) is stripped before being sent to AI models
- Zero Data Retention: AI providers do not retain your financial data after processing
- Scope Limitation: AI is restricted to debt elimination, budgeting, and expense analysis topics only
- Explicit Consent: AI features require your explicit opt-in before activation
5. Data Storage & Security
- All data is encrypted at rest (AES-256) and in transit (TLS 1.3)
- Database enforces Row-Level Security — your data is isolated from all other users
- Authentication tokens are stored securely using platform-native secure storage (iOS Keychain / Android Keystore)
- We do not store credit card numbers, bank account numbers, or social security numbers
6. Data Sharing & Third-Party Processors
We do not sell, rent, or share your personal or financial data with third parties for advertising, marketing, or data-broker purposes. We share data only with the following processors, each bound by a data processing agreement:
- Supabase — database hosting, authentication, and Edge Function runtime. Stores your account, financial data, and AI chat history under Row-Level Security.
- OpenRouter (routing to OpenAI GPT models) — processes AI chat messages to generate financial coaching responses. PII is stripped before transmission and a Zero Data Retention agreement is in place (requests are not logged or used for model training).
- PostHog — product analytics. Receives event metadata (screen views, feature interactions, categorical event properties such as debt type or category), your account email, and your user ID. Does not receive raw financial amounts, AI chat content, or other personally identifiable information. On the web version of Atlas, PostHog may additionally record anonymized session replays of interactions with the web interface for diagnostic and usability-analysis purposes; sensitive form fields are masked. Session replay is not enabled on the iOS or Android mobile apps.
- Firebase Crashlytics — crash and performance diagnostics. Receives crash stack traces and basic device metadata. Crashlytics data is not linked to your account identity.
- Firebase Cloud Messaging — push notification delivery. Receives your device push token and the notification payload you have opted into receiving.
- RevenueCat — subscription entitlement management for in-app purchases. Processes purchase receipts from the App Store and Google Play; we never receive or store payment card details.
- Law enforcement or government authorities — only when compelled by valid legal process.
None of these processors use your data to target you with advertising in other apps or websites. We do not integrate any advertising SDK, attribution SDK, or data-broker integration in Atlas.
7. Public Tools & Website Visitors
Atlas offers public web tools — including the debt snowball calculator, an embeddable version of the calculator, downloadable templates, and content pages — that do not require an account. If you use these tools without signing in, we still collect some information about your visit:
- Analytics (PostHog): pageviews, device and browser information, approximate location derived from your IP address, and the referring page — including, when the embeddable calculator widget is loaded on a third-party site, the hostname of that site. We also record interaction events such as calculator use, template downloads, and share-card creation or visits.
- Purpose: we use this information to understand how visitors find Atlas and to improve the site. We do not use it to build advertising profiles or sell it to third parties.
If you are subject to the CCPA, GDPR, or a similar privacy law and want to exercise your rights over this visitor-level data, contact us at privacy@atlas-budget.com.
Share Cards
If you choose to "Share my debt-free date," the figures you include (your debt amount, unless you choose to anonymize it, and your debt-free date) are stored and rendered into a public image reachable by anyone who has the generated link. These links are not listed publicly, but they are notaccess-controlled — anyone with the link can view the card. Contact support if you want a share card removed. To rate-limit this feature we store a one-way hashed version of your IP address, never the raw IP.
Aggregate Research
Atlas may publish de-identified, aggregated statistics derived from account data — for example, an "Atlas Debt Payoff Index." We only publish a figure when it covers at least 50 users, so no individual is identifiable.
8. Your Rights
You have the following rights regarding your data:
- Access: View all data we have stored about you via the app
- Correction: Edit or update your personal and financial information at any time
- Deletion: Request complete account deletion from Settings — all data is permanently removed within 30 days
- Export: Request a copy of your data by contacting support
- Withdrawal of Consent: Disable AI features or notifications at any time
9. Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data is permanently deleted within 30 days. During this period, you may restore your account and recover your data.
10. Children's Privacy
Atlas is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the app and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.