Privacy Policy

This explains what ATLAS collects, why, and who it's shared with — written to match what the app actually does, not a generic template.

01Who we are

ATLAS is a strength training app — workout logging, recovery tracking, and optional AI-assisted planning and coaching. It's built and operated by an independent developer, not a company with a dedicated privacy team, and this policy is written to be exactly as accurate as that reality: no data broker relationships, no ad network, no data sold to anyone, ever.

Any question about this policy, or a request about your own data, goes to hugoksheehan@gmail.com.

02Information we collect

ATLAS is local-first: everything you log lives on your device whether or not you ever create an account. An account only adds cloud backup and a couple of optional social features. Here's exactly what exists, and when:

Category	What it includes	When it's collected
Account information	Email address and password (or, if you use Sign in with Apple, the name and email Apple chooses to share — Apple lets you hide your real email behind a relay address), plus a username and display name you pick.	Only if you create an account. ATLAS works fully without one.
Training data	Workouts, sets, reps, weights, RPE, routines, custom exercises, and bodyweight entries you log.	Always, stored on-device. Backed up to our servers only if you're signed in.
Purchase & subscription status	Whether you're subscribed, which plan, and renewal status — not your card number, which ATLAS never sees.	When you subscribe, via Apple/Google and RevenueCat.
AI feature content	Whatever you type to the AI Coach, and any text or photo you submit to Import Workouts or the AI Planner, so it can generate a plan or a response.	Only when you actively use those specific features.
Device & diagnostic data	A random, anonymous per-install identifier (not tied to your name or email) used to rate-limit AI features fairly; crash reports and performance data if the app errors.	Automatically, for app stability and abuse prevention.

What ATLAS does not collect: your location, HealthKit or wearable data, contacts, browsing history, or anything for advertising purposes. There are no ads and no ad SDKs in this app.

Health-related notes: the injuries / things-to-avoid field, and anything you tell the AI Coach about pain or soreness, can reveal information about your health. It's optional, it's only sent to the AI provider when you choose to generate a plan or message the AI Coach, and you can clear or edit it at any time. By entering it and using those features, you're explicitly consenting to it being processed for that purpose. ATLAS doesn't use it for anything else.

03How we use it

To run the app: your training data drives the recovery map, insights, and progress charts — all computed either on your device or from your own backed-up data.
To sync across devices: if you're signed in, your logs, routines, and bodyweight history back up so switching phones doesn't lose your history.
To power AI features: the AI Planner, AI Coach, and Import Workouts send the relevant text/photo and a summary of your recent training to our servers, which use a third-party AI provider to generate the plan, answer, or parsed workout — see Section 4.
To manage your subscription: so Premium features unlock correctly and stay unlocked across devices.
To fix bugs: crash and error reports help us find and fix problems — they're not used for anything else.
Legal basis (EU/UK): running the app and your subscription is necessary to provide the service you asked for; crash reporting and abuse prevention rest on our legitimate interest in a stable, fair service; and the health-related notes above are processed on your explicit consent, which you can withdraw by clearing the field or deleting your account.
To prevent abuse: the anonymous device identifier stops one install from burning through the free AI quota in a way that would make it unsustainable to offer for free.

04Who we share it with

ATLAS relies on a small number of infrastructure providers to function. None of them are permitted to use your data for their own purposes — they process it only to provide the service ATLAS uses them for.

Supabase — hosts the database and handles account sign-in for anyone who creates an account.
RevenueCat — manages subscription status across Apple and Google's stores.
Apple & Google — process all payments directly; ATLAS never sees or stores your payment details.
Sentry — receives crash and error diagnostics so bugs can be found and fixed.
Anthropic — the AI provider (Claude models) behind the AI Planner, AI Coach and Import Workouts. It receives the specific content of your request, a summary of your recent training, and any injury notes, solely to generate the response you asked for.
Render — hosts ATLAS's backend, which relays those AI requests to Anthropic.
GitHub (Pages) — hosts this website (atlasfitness.xyz); like any web host it may log visitors' IP addresses. This website sets no cookies, runs no analytics or advertising trackers, and loads no third-party fonts or scripts, so it needs no cookie banner.

We don't sell your data, and we don't share it with anyone for their marketing or advertising purposes.

05Storage & retention

Your training data lives locally on your device by default. If you sign in, a copy is also kept on our servers for as long as your account exists, so a lost or replaced phone doesn't mean losing your history. If you never create an account, nothing you log ever leaves your device except what a specific AI feature needs to process your request in the moment.

06Your rights & choices

Export: Premium includes a full CSV export of your training history at any time, from Progress → Your Data.
Access or correction: email us and we'll confirm exactly what's on file for your account.
Deletion: in the app, go to Profile → Friends & Groups → Delete Account to permanently delete your account and all associated cloud data, immediately, with no email needed. You can also email hugoksheehan@gmail.com from your account's email address. Data that only ever existed on your device is deleted the moment you delete the app.
Portability: the CSV export above is a complete, usable copy of your own data.

If you're in the EU or UK, these are your rights under GDPR/UK GDPR; if you're a California resident, similar rights apply under the CCPA. We honor requests from anyone, regardless of where you live.

07Children's privacy

ATLAS isn't directed at children, and we don't knowingly collect personal information from anyone under 13 (or the minimum age set by local law where higher). If you believe a child has created an account, contact us and we'll remove it.

08International transfers

Our infrastructure providers may process data outside your own country, including in the United States. Where that applies to EU/UK data, we rely on the standard contractual safeguards those providers offer for exactly this purpose.

09Security

Data in transit is encrypted, and account passwords are never stored in plain text. No method of transmission or storage is perfectly secure, but there's no known incident affecting ATLAS user data, and we'll tell you directly if that ever changes.

10Changes to this policy

If this policy changes in a way that matters — a new category of data, a new third party — we'll update the date at the top of this page and, for anything significant, say so inside the app.

11Contact us

Questions, requests, or concerns about any of the above: hugoksheehan@gmail.com