Privacy Policy

Effective: May 11, 2026 · Last updated: September 11, 2026

This privacy policy describes how Atlas ("we," "us," or "the app") collects, uses, and protects your personal information.

Atlas is operated by Goldhaven LLC, a Utah limited liability company, which is the data controller for the information described here.

Read this in plain English first: Atlas treats your data like the private medical record it is. We don't sell anything. We don't run ads. We only use your data to power features you've explicitly enabled in the app.

If you have questions, email support@atlashealth.app.

What We Collect

Atlas collects only information you explicitly provide or generate within the app, or that you connect from Apple Health or Health Connect. We do NOT collect your contacts, browsing history, advertising identifiers, or any data from outside the app, and Atlas never tracks your location in the background. The one place location appears is described under Workout routes below.

Account Information. Your email address and password when you create an account. Passwords are never stored in plaintext — they're hashed and managed by our authentication provider (Supabase).

Profile Information. Your name, age, sex, height, weight, body fat percentage, goals (cut/maintain/bulk), training frequency, and unit preferences. You enter these during onboarding and can update or delete them at any time.

Health and Wellness Data. Bloodwork panels you import (markers, values, reference ranges, lab provider, date), supplements and protocol items you log, weight measurements, food log entries (calories, macros, foods consumed), workout history (exercises, sets, reps, durations, completion status), and AI chat conversations with Atlas.

Apple Health Data (optional). If you connect Apple Health, Atlas reads weight measurements and step counts from HealthKit, and writes your Atlas-logged weight entries back to Apple Health for two-way sync. This data stays on your device and is only synced to our servers when you explicitly take an action that records it. You can disconnect Atlas from Apple Health at any time in iOS Settings → Health → Sources → Atlas.

Health Connect Data (Android, optional). If you connect Health Connect, Atlas reads the health metrics you grant it — which may include steps, calories burned, distance, floors, sleep, heart rate, resting heart rate, heart-rate variability, VO2 max, oxygen saturation, respiratory rate, blood pressure, body temperature, blood glucose, weight, body fat, and exercise sessions — and writes back the weight, nutrition, and workout entries you log in Atlas. You grant each permission individually and can revoke any of them at any time in Android Settings → Health → Health Connect → App permissions → Atlas.

Workout routes (location). If a workout in Apple Health or Health Connect has a recorded GPS route, Atlas reads that route only when you open that specific workout, and only to draw the map on that screen. Route coordinates are held in memory for as long as the screen is open and are never sent to our servers, never stored, and never shared. Atlas does not request background location, does not track you between workouts, and has no location permission of its own — this data comes from the health platform you connected, at your request.

Subscription Information. When you purchase Atlas Pro or Atlas Premium, the payment is processed by Apple (App Store) or Google Play (Play Store), depending on where you installed Atlas, and your subscription is managed for us by RevenueCat. We receive only the subscription tier and renewal status — never your credit card, Apple ID, Google account, or billing address.

How We Store Your Data

All Atlas data is stored on Supabase, a managed PostgreSQL provider that complies with SOC 2 Type II. Your data is stored in a private row protected by Row Level Security (RLS) policies — your records can only be read or modified by your authenticated account.

Data in transit between your device and our servers is encrypted with TLS 1.2+. Data at rest in Supabase is encrypted with AES-256.

The raw image bytes you upload for vision scans (meal photos, lab panel images, supplement labels) are not stored on our servers after extraction. Only the structured data extracted from them is saved to your account.

Data Retention

While your account is open. We keep the data described above for as long as your Atlas account exists, because the app's whole purpose is to show you your own history over time — a weight trend or a bloodwork comparison is only useful if the earlier entries are still there. We do not impose an expiry on your records. You can delete any individual entry (a food log, a weigh-in, a lab result, a chat) at any time from within the app, and it is removed from our servers when you do.

When you delete your account. Deleting your account permanently erases your profile, bloodwork and biomarkers, food and nutrition logs, weight and body-composition history, workout and training history, your protocol and saved recipes, any data synced from Apple Health or Health Connect, and your AI chat history. This runs immediately and is irreversible — we cannot restore a deleted account, and we do not keep a "soft-deleted" copy for later recovery.

Encrypted backups. Our database provider keeps encrypted, access-controlled backups so the service can be restored after an outage or data-corruption incident. A deleted record may persist in those backups for up to 7 days, after which the backup containing it is destroyed on a rolling schedule. Uploaded files (profile and recipe images) are stored separately from the database, are not included in those backups, and are deleted outright when you delete your account. Backups are never mined, queried for analytics, or used to re-populate a deleted account.

What outlives account deletion, and why. Two narrow categories:

• Billing and purchase records. Subscription and transaction records held by our payment processors (Apple, Google Play, and RevenueCat) are retained by them as required for tax, accounting, and fraud-prevention purposes, under their own retention policies. We keep only the minimum needed to evidence a purchase; we never receive or store your card number.
• Security and legal logs. Server and security logs that may contain an IP address or timestamp are kept for up to 90 days for abuse prevention and troubleshooting, then deleted automatically. Where a specific law, subpoena, or open dispute requires us to preserve something for longer, we retain only what that obligation covers, for only as long as it lasts.

Neither category is used to re-identify you inside Atlas, to rebuild a profile, or for advertising, and neither is sold.

Support correspondence. If you email us, we keep that correspondence for up to 24 months so we have context if you write again, then delete it.

Vision scan images. As noted above, the raw photos you scan are discarded immediately after extraction and are never retained.

Artificial Intelligence Processing

Atlas uses Claude, an AI service operated by Anthropic, Inc., to power several features (Atlas Chat, meal photo scan, supplement label scan, lab panel scan, and lab AI insights). For each feature, only the data needed for that feature is sent.

Your consent

The first time you use any AI feature, Atlas displays an in-app consent screen identifying Anthropic and listing what data will be sent. You must explicitly tap "I agree, continue" before any data leaves your device. You can revoke consent at any time by deleting your Atlas account (Settings → Delete account).

How Anthropic uses your data

Anthropic processes the data Atlas sends solely to generate the response Atlas requested. Per Anthropic's commercial API terms, Anthropic does not use your data to train their AI models. Anthropic's privacy practices are published at anthropic.com/legal/privacy.

What Atlas does NOT send to Anthropic

Atlas never sends your password, payment information, account email, device identifiers, or any data unrelated to the specific AI feature you're invoking.

What We DON'T Do

• We do not sell your data, ever, to anyone.
• We do not run advertising. There are no ads in Atlas.
• We do not share your health data with insurers, employers, marketers, data brokers, or any third party.
• We do not track your behavior across other apps or websites.
• We do not collect device identifiers for tracking purposes (no IDFA, no cross-app fingerprinting).

Your Rights

Delete your account. Settings → Delete account. Deletion is immediate and irreversible — your profile, bloodwork, food log, weight history, workout history, protocol, recipes, and AI chat history are wiped from our servers within seconds.

Request a copy of what's stored. Email support@atlashealth.app from your account email and we'll send you everything within 30 days, free of charge.

Withdraw consent. Stop using Atlas at any time. Disconnect Apple Health in iOS Settings → Health → Sources → Atlas, or revoke Health Connect access in Android Settings → Health → Health Connect → App permissions. Cancel your subscription through the App Store or Google Play, whichever you subscribed with.