AtlasPrivacy Policy
Last updated: 30 September 2026
This policy explains what data the Atlas Travel app (“Atlas”, “we”, “us”) collects, why, where it is stored, who can see it, and how you can get it or delete it. Atlas is built to be a personal travel log: we only store what you enter yourself, and we never sell your data.
1. Who is responsible for your data
The data controller is Hugo Kruus, the developer of Atlas, based in Sweden. For any privacy question or request, email support@getatlastravel.app.
2. What we collect
| Data | Details |
|---|---|
| Account | Your email address and password (stored only as a secure hash by our authentication provider). |
| Profile | Your display name (by default the part of your email before the “@”, which you can change), an optional profile photo, and an 8-digit friend code generated for you. |
| Travel data | The countries, states/regions, cities, attractions and collection items you mark as visited, lived or want to go; and the trips you create (name, emoji, dates, places). |
| Flights | Flights you log: flight number, airline, departure and arrival airports, date and times, aircraft type, seat, seat type, travel class and trip purpose. |
| Photos | Photos you choose to add to your trips (“memories”) and your profile photo. Atlas only accesses the photos you pick. |
| Friends | Your friend requests and friendships (who you are connected with and whether a request is pending or accepted). |
| Sign-in records | When you sign in or request a password reset, our authentication provider records technical details such as the time and your IP address, to secure your account and prevent abuse. |
| Home country | The home country you choose is stored only on your device, not on our servers. |
We do not collect your location — Atlas never reads GPS; everything on your map is something you entered yourself. Atlas contains no advertising, no analytics or tracking SDKs, and we do not track you across other apps or websites.
The camera is used only to scan a friend’s QR code inside the app; no images from the scanner are stored or sent anywhere.
3. Why we use it (legal basis)
- To provide the app (performance of our agreement with you, GDPR art. 6(1)(b)): storing your travel log, flights, trips and photos, syncing them to your account and showing your statistics.
- To run the friends features you choose to use (art. 6(1)(b)): showing your name, photo and travel statistics to the people you connect with.
- To keep your account secure (legitimate interest, art. 6(1)(f)): sign-in, password reset emails and preventing abuse.
4. Where your data is stored
Your account and all data listed above (except your home country) are stored with Supabase, our database, authentication and file-storage provider, in its EU region in Ireland (eu-west-1). Access is protected by per-user security rules, so other users can only read what section 5 describes.
Emails from Atlas — such as password reset codes — are sent through Resend, which receives your email address and the content of that email only in order to deliver it.
Photos you upload (trip memories and your profile photo) are stored as files with long, unguessable web addresses. The app only shows them to you and, for your profile photo, to your friends — but anyone who obtains a photo’s exact address could open it, so avoid uploading anything highly sensitive.
Our providers process data only on our instructions under data processing agreements. Where a provider processes data outside the EU/EEA (for example, to deliver an email), it is protected by the EU Standard Contractual Clauses or an equivalent safeguard.
Content loaded from other services
To show pictures and reference information, the app loads some public content directly from other services: destination photos from Wikipedia/Wikimedia, flag images from flagcdn.com, airline logos from Kiwi.com and currency exchange rates from frankfurter.dev. These services receive your device’s IP address when the content is requested, as with any web request, but no account or travel data.
5. What other users can see
- Anyone who enters your exact email address or friend code in the app can see your display name, so they can send you a friend request.
- People you have a pending or accepted friend request with can see your display name and profile photo.
- Accepted friends can also see the places you’ve marked and the flights you’ve logged, which power the friends leaderboards.
Your trips, trip photos and collections are never shown to other users. You can remove a friend at any time to stop sharing with them.
6. How long we keep it
We keep your data for as long as you have an account. When you delete your account, your data is deleted as described below. Copies may remain in our database provider’s routine, encrypted backups for a short period until those backups are overwritten; they are not used for anything else.
7. Deleting your account
In the app, go to Other → Settings → Delete Account and type DELETE to confirm. This permanently deletes your account and everything in it right away: your profile, marked places, trips, flights, collections, friendships, profile photo and all trip photos. This cannot be undone.
If you can no longer sign in, email support@getatlastravel.app from the address you signed up with and we will delete the account for you.
8. Your rights (GDPR)
If you are in the EU/EEA or the UK, you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — correct inaccurate data (most of it you can edit directly in the app).
- Erasure — have your data deleted (see section 7).
- Data portability — receive your data in a structured, machine-readable format.
- Restriction and objection — ask us to limit or stop certain processing.
- Withdraw consent at any time, where processing is based on consent.
To exercise any of these, email support@getatlastravel.app. We reply within one month. You also have the right to lodge a complaint with a data protection authority — in Sweden, the Swedish Authority for Privacy Protection (IMY, imy.se), or the authority where you live.
9. Children
Atlas is not intended for children under 13 (or the higher age required in some EU countries, up to 16). We do not knowingly collect data from children below that age; if you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy as Atlas changes. The date at the top shows the latest version; significant changes will also be announced in the app.
11. Contact
Questions about privacy: support@getatlastravel.app.