Privacy Policy
Effective August 20, 2026
ATLAS Life: Personal OS ("ATLAS," "the app") is built and operated by Jack Ullmann, a sole proprietor based in Virginia, USA, doing business as ATLAS Life ("we," "us"). This policy explains what the app collects, why it collects it, and what happens to it. If anything here is unclear, email jackullmannn@gmail.com and you will get an answer from the person who built the app.
The short version
ATLAS exists to help you understand your own days — your sleep, training, food, and state. Your data is used to run the app for you, and for nothing else. We do not run ads, we do not use third-party analytics brokers, and we never sell your data. Health data gets additional protections, described below.
What the app collects
Account information
When you create an account we collect your email address and name. Sign-in is handled by Supabase Auth, including Sign in with Apple and Google OAuth if you choose those options — in that case Apple or Google shares your basic account identifiers (such as your name and email) with us to create your account.
Health and fitness data
This data comes from two places, and only at your direction:
- Apple HealthKit — only the categories you explicitly grant in iOS, which may include sleep, heart-rate variability, workouts, steps, activity, and body metrics. You can revoke this access at any time in the iOS Health app.
- Things you log yourself — food, water, caffeine, workouts, journal entries, and sleep that you enter manually in the app.
Photos
The app never browses your photo library. It only receives photos you deliberately choose to attach — for example a photo of a meal or a progress photo.
Voice
The microphone is used only when you explicitly tap the microphone button. Transcription happens on your device where your device supports it; the resulting text is then processed on our servers to generate the assistant's reply. The app does not listen in the background.
App state
Your settings, logs, and app state are synced to your account so the app restores across devices. This data is stored with Supabase in the United States.
Diagnostics
We collect minimal diagnostic information needed to keep the app working reliably.
How your data is used
Everything the app collects is used to provide the service you signed up for: syncing your data across devices, computing your state scores, generating coaching and briefings from what you have logged, and answering when you talk to the assistant. That is the whole list. We do not use your data for advertising, and we do not sell it to anyone.
Apple HealthKit data
Health data is the most sensitive thing ATLAS touches, so it carries the strictest rules in this policy:
- HealthKit data is never used for advertising or marketing of any kind.
- HealthKit data is never sold to data brokers — or to anyone else.
- HealthKit data is never shared with third parties, except as required to provide the services you have specifically requested (for example, generating a coaching reply you asked for).
- HealthKit data is never used for eligibility decisions — not for insurance, employment, credit, or any similar purpose.
These commitments apply for as long as we hold your data, and they cannot be changed retroactively by an update to this policy.
Text messaging (SMS)
ATLAS text messaging is an optional feature, launching soon. When you opt in to ATLAS text messaging, the following terms apply:
- Consent is explicit and per-feature. You will only receive text messages for a feature you specifically opted in to. Creating an account does not opt you in to anything.
- Message frequency varies depending on the features you enable and how you use them.
- Message and data rates may apply, depending on your carrier plan.
- Reply STOP to cancel at any time, and HELP for help. You can also email jackullmannn@gmail.com.
- Carriers are not liable for delayed or undelivered messages.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.
Text messaging originator opt-in data and consent are not shared with any third parties.
Text messages are delivered through Twilio, which acts purely as a message carrier on our behalf.
Service providers
ATLAS is a small operation, and a handful of infrastructure providers process data strictly on our behalf, each for a single purpose:
- Supabase — authentication, database, and storage (US-hosted). This is where your account and synced app data live.
- Render — hosts the ATLAS API.
- OpenAI — generates assistant replies and coaching text from the content you provide.
- ElevenLabs — converts briefings and assistant replies to speech when you use voice features.
- Twilio — delivers SMS and voice for the opt-in messaging feature.
- Apple — in-app purchases and push notifications.
- Expo / EAS — app builds and over-the-air updates.
Each provider receives only the data needed for its job and may not use your data for its own purposes beyond providing the service to us. There are no ad networks in the app, no analytics brokers, and no sale of data — to anyone, ever.
Data retention and deletion
Your data is kept for as long as your account is active, so the app can keep doing its job.
You can delete your account directly inside the app. Account deletion removes your server-side data from our systems (Supabase), and deletion completes within 30 days of your request. You can also request deletion by email at jackullmannn@gmail.com.
Your privacy rights
Virginia residents (VCDPA)
Under the Virginia Consumer Data Protection Act you have the right to access your personal data, correct inaccuracies, delete your data, obtain a portable copy, and opt out of the sale of personal data or targeted advertising. ATLAS does not sell personal data and does not do targeted advertising, so there is nothing to opt out of — the remaining rights you can exercise in-app (deletion) or by email.
California residents (CCPA / CPRA)
California residents have the right to know what personal information we collect (it is all listed above), to access it, to correct it, to delete it, to receive a portable copy, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined in the CCPA/CPRA. We will never discriminate against you for exercising any privacy right. To exercise a right, use in-app account deletion or email jackullmannn@gmail.com; we will verify requests using the email associated with your account.
Everyone else, including EU/EEA visitors
ATLAS is a US-focused app and is not currently marketed in the EU. That said, if you are in a jurisdiction with GDPR-style rights — access, rectification, erasure, restriction, portability, objection — we will honor equivalent requests on the same terms as above. Email us and we will sort it out.
Children
ATLAS is not directed at children under 13, and we do not knowingly collect data from anyone under 13. You must be at least 13 years old to use the app (16 where local law requires a higher minimum). The app's App Store age rating is 9+, but the rating does not change the age requirement for creating an account. If you believe a child under 13 has created an account, email us and we will delete it.
Security
Data is encrypted in transit, access to production systems is limited to what is needed to operate the service, and each provider listed above holds only the slice of data its job requires. No system is perfectly secure, but the surface area here is deliberately small: no ad tech, no trackers, few moving parts.
Changes to this policy
If this policy changes, the updated version will be posted at this address with a new effective date. If a change meaningfully affects how your data is handled, we will tell you in the app before it takes effect. We will never weaken the HealthKit commitments above.
Contact
Jack Ullmann, sole proprietor, doing business as ATLAS Life
Virginia, USA
jackullmannn@gmail.com