Legal

Privacy Policy

Last updated: July 13, 2026

This Privacy Policy explains how Atlas ("Atlas", "we", "us") collects, uses, and shares information about you when you use the Atlas mobile app, website, and related services (the "Service"). By using the Service you agree to the practices described here.

1. Who we are

Atlas is the data controller for personal information processed through the Service. You can reach us at privacy@atlasandco.app.

2. Information we collect

Account data: name, email, password hash, and profile preferences you provide when signing up or joining the waitlist.
Travel content: passport stamps, photos, videos, notes, and tickets you upload to your journal.
Location & flight data: approximate location, device location when you opt in, and airport/flight metadata used to auto-stamp landings.
Device & usage data: device type, OS version, app version, crash reports, and interaction events.
Payment data: handled by our payment processor; we store only the subscription status and last four digits of your card.

3. How we use your information

Provide, operate, and personalize the Service.
Verify destination stamps via photo metadata.
Send transactional emails (receipts, account, security).
Send product updates you have opted into.
Detect fraud, abuse, and violations of our Terms.
Comply with legal obligations.

4. Legal bases (EEA / UK users)

We process personal data on the following bases: performance of a contract, your consent (which you can withdraw at any time), legitimate interests (such as securing the Service), and compliance with legal obligations.

5. Sharing

We do not sell your personal information. We share it only with:

Service providers: hosting, analytics, email, and payment processing, all bound by contract.
Other users: only content you explicitly share (e.g., a public trip or an exported reel).
Authorities: where required by law or to protect rights and safety.

6. International transfers

Data may be processed in countries other than your own. Where required, we use Standard Contractual Clauses or equivalent safeguards.

7. Retention

We keep account data for as long as your account is active, and for a limited period afterward for backups and legal compliance. You can delete your account at any time from Settings.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. Contact privacy@atlasandco.app to exercise these rights. We will not discriminate against you for exercising them.

8a. United States (California, Virginia, Colorado, Connecticut, Utah, Texas and others)

If you are a US resident covered by a state privacy law (including the CCPA/CPRA in California), you have the right to know what personal information we collect, to request access or deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information as that term is commonly understood, and we do not knowingly sell or share the personal information of minors under 16. To exercise your rights or submit an authorized-agent request, email privacy@atlasandco.app. California residents may also request the categories of personal information disclosed in the last 12 months (a "Shine the Light" request).

8b. Canada (PIPEDA and provincial laws)

If you are in Canada, you may access and correct your personal information and withdraw consent (subject to legal or contractual restrictions) by contacting us. You may also file a complaint with the Office of the Privacy Commissioner of Canada or your provincial regulator (e.g., Québec's CAI).

8c. Brazil, Mexico and Latin America

If you are in Brazil, the LGPD gives you rights of access, correction, anonymization, portability, deletion, and information about sharing. Our data-protection contact is privacy@atlasandco.app. If you are in Mexico or another Latin American country with a comparable law (e.g., Argentina, Chile, Colombia, Peru), you can exercise equivalent ARCO-style rights via the same address.

8d. Australia, New Zealand and the Pacific

If you are in Australia, we handle personal information in line with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). You can request access to or correction of your personal information, and complain to us first; if unresolved, you can escalate to the Office of the Australian Information Commissioner (OAIC). If you are in New Zealand, the Privacy Act 2020 gives you similar access and correction rights, enforceable via the Office of the Privacy Commissioner.

9. Children

Atlas is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect data from them.

10. Security

We use encryption in transit and at rest, access controls, and regular reviews. No system is 100% secure, but we work hard to protect your journal.

11. Changes

We may update this Policy from time to time. Material changes will be notified in-app or by email.

12. Contact

Questions? Email privacy@atlasandco.app.