privacy policy.

atlas.core was built for people who take their bodies seriously, and we take your privacy seriously in return. This policy explains what data we collect, why we collect it, how we use it, and the rights you have over it.

We do not sell your personal data. We do not share it with advertisers. We do not use it to train AI models for third parties.

We collect information you provide directly and information generated by your use of the Service:

• Account information: email address, name, and authentication credentials.
• Profile information: height, weight, date of birth, fitness goals, and training preferences.
• Activity data: workout logs, food entries, body measurements, progress photos, and lab results.
• Coach conversations: messages you exchange with the AI coach.
• Device information: device type, operating system, and app version for debugging and compatibility.
• Usage analytics: page views, feature usage patterns, and crash reports (anonymized where possible).

• To provide and operate the Service, including the AI coach, nutrition tracking, and workout logging.
• To personalize your experience: macro targets, training recommendations, and coach insights.
• To process payments and manage your subscription.
• To send transactional communications (password resets, billing receipts, critical security notices).
• To improve the Service through aggregated, anonymized analytics.
• To comply with legal obligations.

atlas.core handles health-adjacent data (body weight, body composition, food intake, lab results, progress photos). We treat all such data with elevated care:

• Health data is encrypted in transit (TLS 1.3) and at rest (AES-256).
• Health data is never shared with third parties for advertising or marketing.
• Health data is never used to train AI models for third parties.
• You may export or delete your health data at any time from Settings.

When you use the AI coach, your messages and relevant context (recent workouts, nutrition data, body metrics) are sent to third-party AI providers to generate responses. We use providers that do not retain or train on user data. Conversations are stored on our servers to provide chat history and continuity.

We share your data only in these limited circumstances:

• Service providers: hosting (Supabase, Vercel), payment processing (Stripe, RevenueCat / App Store), analytics (Vercel Analytics), and AI inference providers — all under data processing agreements.
• Legal requirements: when required by law, subpoena, or court order.
• Business transfers: in connection with a merger, acquisition, or sale of assets (you will be notified).
• With your consent: social features (crew, shared workouts) share only what you explicitly choose to share.

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated data may be retained indefinitely for analytics. Backup copies are purged within 90 days of account deletion.

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of all personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion of your account and personal data.
• Portability: export your data in machine-readable formats (CSV, JSON).
• Restriction: limit how we process your data in certain circumstances.
• Objection: object to processing based on legitimate interests.

To exercise any of these rights, go to Settings or email privacy@useatlascore.com. We respond to all requests within 30 days.

The atlas.core website uses minimal analytics (Vercel Analytics) and does not use third-party advertising cookies. The mobile app does not use cookies. We do not participate in cross-site tracking or retargeting networks.

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

Your data may be processed in countries other than your own (including the United States and Brazil). We ensure appropriate safeguards are in place, including standard contractual clauses where required by GDPR or LGPD.

We may update this policy from time to time. Material changes will be communicated through the Service or via email. Your continued use after a change becomes effective constitutes acceptance.

Questions about this policy? Email us at privacy@useatlascore.com.