Privacy Policy

Last Updated: May 3, 2026

OneAtlas LLC ("we," "us," or "our") operates the Atlas mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

1. Information We Collect

Information You Provide

• Account Information: First name, last name, email address (via Google or Apple Sign-In), date of birth, username, and avatar selection.
• Profile Information (optional): City, state, gender, income bracket, education level, employment status, relationship status, living situation, and parenting status.
• Check-In Data: Emotion (from 30 primary emotions including Hungry and Hurt), sub-emotion, intensity level, activity, optional journal text, photos, videos (up to 60 seconds), and song attachments.
• Posts and Comments: Text content, images, GIFs, and emoji reactions you create on feed posts and Circle posts.
• Messages: Direct messages between friends, including text, photos, voice messages, and emoji reactions. Messages auto-delete based on your chosen expiration setting (1 minute to 30 days).
• Circles: Posts, comments, replies, and photos shared within public and private Circles.
• Voice Messages: Audio recordings sent in direct messages. Stored in encrypted cloud storage and subject to the same expiration settings as text messages.
• Friend Tags: When you tag friends in a post, the tagged users' names appear on the post visible to the post's audience. Tagged users receive notifications and can remove their own tags at any time.
• Tag Seen Status: When you are tagged in a post, the post creator can see when you have viewed it. This seen indicator is visible only to the post creator.
• Circle Events: Events created within private Circles include a title, date/time, location, and description. Event data is visible to Circle members only.
• Dismissal Preferences: When you dismiss Circle or people recommendations, your dismissals are stored to personalize future recommendations.
• Tooltip Dismissals: When you dismiss in-app tooltips and guidance prompts, your dismissals are persisted to your account so they remain dismissed across devices.
• Post View Tracking: When you view another user's post, we record a unique view count. View counts are visible to the post author. Individual viewer identities are not disclosed.
• Accent Color and Font Preferences: If you are an Atlas+ subscriber, your selected accent color and post font preferences are stored with your profile.
• Conversation Backgrounds: Atlas+ subscribers can upload custom chat background images, which are stored in cloud storage and associated with their account.
• Post Visibility: Each post has a visibility setting (Friends, Community, or Only Me) that you control. Only Me posts function as a private journal visible only to you.
• Parent/Guardian Email: When parental consent is enabled, we may collect a parent or guardian's email address for users under 16 for consent verification. This feature is supported but not required by default at signup.

Information Collected Automatically

• Location Data (with consent): GPS coordinates are converted to a metropolitan area name on your device. Your exact location never leaves your device. Metro area is used for weather, the emotional map, and check-in context.
• Weather Data: Current weather conditions at your approximate metro area, attached to check-ins with your consent.
• Device Information: Push notification tokens only. No device IDs, advertising identifiers, or hardware identifiers are collected.
• Screenshot Detection (Messages): On iOS, we detect when a screenshot is taken during a conversation and notify the other participant. No screenshot content is captured or stored.

Information We Do NOT Collect

• We do not store search queries. The Discover and Search features let you search posts, people, and activities, but queries are processed in real time and not retained. Results are filtered by age pool and blocked users.
• We do not access your contacts, photos (unless you explicitly attach one), or browsing history.
• We do not use advertising identifiers, cookies, or behavioral tracking.
• We do not sell or share personal data with third parties for advertising purposes.
• We do not perform behavioral profiling or algorithmic engagement optimization.
• Sponsored content is matched by activity category only, never by emotional state, identity, or personal data.

2. How We Use Your Information

• Core Features: Power check-ins, feed ranking (by emotional relevance, not engagement), Circles, direct messages, the emotional map (anonymized, aggregated), friend connections, and notifications.
• Content Moderation: All user-generated content (text, images, and video including 60-second video check-ins) is reviewed by automated AI moderation before being visible to others. Video moderation samples frames at one per second for review. For users under 18, moderation failures are fail-closed (content is blocked if moderation is unavailable).
• Profile Views: To show you how many people viewed your profile in the last 7 days. Atlas+ subscribers can see the names of viewers. Views are deduped to once per viewer per day and automatically deleted after 30 days.
• Personalization: Emotion and activity sorting based on your usage patterns. Friend and Circle recommendations based on shared interests, location, and mutual connections. Dismissal preferences to improve future recommendations.
• Safety: Age-pooled communities, block enforcement, and abuse prevention.
• Post Audience Changes: You can change the visibility of your posts after creation. Private journal entries cannot be made public.
• Deep Link Sharing: When you share a post link, the link contains the post ID. The web landing page does not display post content and redirects to the app.
• In-App Review: The app may prompt you for an App Store or Play Store review at milestone moments. No personal data is shared with Apple or Google beyond what they already collect through their platforms.

Third-Party Services

• OpenAI: Content moderation (text, image, and video frame review). Your content is sent for safety screening only and is not used to train AI models.
• OpenWeatherMap: Weather data for check-ins. Receives your approximate metro area, not your exact location.
• Apple/Google: Authentication (Sign in with Apple, Google Sign-In) and in-app purchase processing (Atlas+ subscription, streak restores).
• RevenueCat: Subscription management and purchase validation. Receives your anonymous user ID and purchase receipts. Does not receive personal information, emotional data, or content. See RevenueCat Privacy Policy.
• Apple Music: Song search and preview for check-in attachments. No listening history or library data is accessed.
• Klipy: GIF search in comments. Search queries are sent to retrieve results.
• Google Books: Book search for check-in attachments. Search queries are sent to retrieve results.
• Sentry (sentry.io): Crash reporting and error tracking. Receives error messages, stack traces, device info (OS, app version), and performance metrics. Does not receive personal data, emotional content, message content, or location. Data is processed in the United States. See Sentry Privacy Policy.

3. Age-Pooled Communities

• Minimum age to use Atlas: 13 years old.
• Atlas supports a parental consent flow for users under 16, verified via email. This feature can be enabled server-side when required by applicable regulations. When disabled, users aged 13-17 can sign up without parental consent.
• Anonymous support circles and community feeds are age-segregated. Minors (13-17) never see adult circles or strangers' posts, and vice versa. Anonymous spaces are fully segregated by age pool. This separation is enforced at the database level.
• Users of all ages can find each other, send waves, become friends, and exchange direct messages. All cross-age direct messages are subject to AI-powered content moderation before delivery.
• Messaging for minors is controlled by a server-side feature flag and may be restricted or disabled entirely.
• When a minor turns 18, their friendships and message history are preserved. Only minor-pool circle memberships are removed.
• Enhanced content filtering is applied to all minor user content.
• Location sharing and emotion map contributions are disabled by default for minors.

4. Data Retention

• Messages: Auto-delete based on your chosen setting (1 minute, 5 minutes, 30 minutes, 1 hour, 12 hours, 1 day, 7 days, or 30 days). Deletion is enforced server-side.
• Check-ins and Posts: Retained until you delete them or delete your account.
• Voice Messages: Subject to the same expiration as text messages in the conversation.
• Video Check-Ins: Video uploads are stored in cloud storage and retained until you delete the post or delete your account.
• Post View Data: Unique view counts are maintained for the lifetime of the post. View records are deleted when the post is deleted.
• Tooltip Dismissals: Persisted for the lifetime of your account.
• Conversation Backgrounds: Custom background images are stored until you remove them or delete your account.
• Account Data: Retained until you request deletion. Account deletion has a 30-day grace period during which you can restore your account.
• Moderation Logs: Reports and moderation actions are retained for safety purposes even after content deletion.

5. Data Export and Deletion

You can export all your data (JSON or CSV format) or permanently delete your account at any time from Settings in the app. Data export includes check-ins, posts, comments, messages, profile data, and Circle activity. Account deletion removes all personal data after the 30-day grace period.

6. Data Security

• All data is transmitted over HTTPS/TLS encryption.
• Authentication tokens are stored in secure device storage (iOS Keychain / Android Keystore).
• Row-level security (RLS) is enforced at the database level, ensuring users can only access their own data and data shared with them.
• Screenshots are blocked in message conversations on Android. Screenshot detection notifies both parties on iOS.

7. Your Rights

• Access: Export your data at any time.
• Deletion: Delete your account and all associated data.
• Correction: Update your profile information at any time.
• Consent: Control location, emotion map, and demographic data sharing through granular consent toggles in Settings.
• Blocking: Block any user to prevent them from seeing your content, messaging you, or appearing in your feed.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Your continued use of Atlas after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy questions or data requests:

Email: privacy@oneatlas.app

OneAtlas LLC
Ohio, United States