Privacy Policy

Effective Date: August 19, 2026 Version: 2026-08-19 This Privacy Policy explains how Atlas Labs (“we,” “us”) collects, uses, and shares information when you use Atlas Method (the “Service”). 1. WHO WE ARE Controller/operator: Atlas Labs. Contact: [email protected]. 2. INFORMATION WE COLLECT We may collect: • Account data: name, email, password or OAuth identifiers, profile details. • Onboarding and preference data: goals, sex, date of birth, height, weight, activity, diet preferences, allergies, exclusions, cooking ability, budget, training experience, equipment, schedule, motivation, and similar inputs you provide. • Health-adjacent self-reported data: check-ins (sleep, energy, stress, water, steps, adherence), body measurements, progress photos you upload, injury/medical flags you choose to disclose. • Usage and device data: IP address, browser/app type, pages viewed, approximate location from IP, cookies or similar technologies, diagnostics and error logs. • Payment data: processed by Stripe or similar providers; we receive subscription status, plan codes, and limited billing metadata — not full card numbers. • Communications: support messages and AI coach chat content you send. 3. HOW WE USE INFORMATION We use information to: provide and personalize the Service; compute nutrition/training plans and weekly adjustments; operate AI coaching features; process payments; prevent fraud and abuse; improve product quality and safety; communicate service updates; comply with law; and enforce our Terms. 4. ARTIFICIAL INTELLIGENCE AND THIRD-PARTY AI PROCESSING Atlas Method uses third-party artificial intelligence to power optional features such as AI Coach chat, Coach Intelligence insights, progress photo analysis, check-in narratives, AtlasTime suggestion wording, and community text translation when you request it. • Who receives data: We currently send processing requests to OpenAI, a third-party AI service. Our software also supports Anthropic as an optional fallback provider if configured; if that fallback is enabled, the same categories of data may be sent to Anthropic. • What may be sent (only with your explicit in-app consent, and only as needed for the feature you use): fitness goals and physique goals; sex, age, height, and weight; training information (experience, equipment, preferred days/duration, recent workouts); nutrition information (targets, diet tags, allergens, recent food logs); progress information (recent check-in metrics such as sleep/energy/stress, weekly coach summaries, challenge progress); health flags and truncated notes you choose to share; messages or content you send to Atlas Coach; progress photos or image URLs when you request photo analysis; Community post or comment text when you ask Atlas to translate it; and, for Atlas administrators only, aggregated operational metrics used in internal analytics tools. • What is not sent: We do not send your email address, full legal name, billing details, internal user identifiers, wearable/WHOOP readiness data, Screen Time information, Community post bodies in Coach chat (unless you request translation of a specific post), or check-in free-text notes. • Purpose: This information is shared with OpenAI only to provide the AI-powered functionality you request. We do not send this data to AI providers for advertising. • Consent: We obtain your explicit permission in-app before transmitting personal data to these AI providers. You may grant or withdraw consent in Settings → Privacy → AI data sharing. When we update the AI disclosure, we may ask you to Allow again (consent version). If consent is off, declined, revoked, or outdated, those features use non-AI (deterministic) behavior or remain unavailable; we do not quietly send personal data to AI providers. • Retention by providers: AI providers process requests under their terms and our account configuration. Do not assume providers never retain data. Review OpenAI’s (and, if used, Anthropic’s) privacy terms for their practices. Atlas retains related logs and chat history as described in Retention below. • Outputs: AI outputs are informational and are not medical advice. • How we collect: Account and profile data you enter; onboarding answers; plans and logs generated in the Service; Community content you create; and messages you send to Coach. • Why: To operate the Service, personalize plans, provide optional AI features you request, moderate Community, process payments, and meet legal obligations. Do not submit information you do not want processed for AI purposes. 5. SHARING We do not sell your personal information. We share information with: • Service providers (hosting, databases, analytics, email, AI APIs such as OpenAI, customer support) under confidentiality and processing terms; • Payment processors (e.g., Stripe); • Professional advisors when needed; • Authorities when required by law or to protect rights, safety, and security; • A successor entity in a merger, acquisition, or asset sale, subject to this Policy or equivalent protection. 6. RETENTION We retain information as long as your account is active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal obligations. Community moderation reports and related evidence are retained as needed to review objectionable-content reports (target: within 24 hours) and to enforce Community standards. You may request deletion; some records may remain in backups or where retention is required. Account deletion (where offered in Settings) removes or anonymizes personal data we control, subject to legal retention. AI providers may retain processing records under their own policies. 7. SECURITY We use administrative, technical, and organizational measures appropriate to the risk (e.g., encrypted transport, access controls). No method of transmission or storage is 100% secure. 8. YOUR CHOICES AND RIGHTS Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to/restrict certain processing. Contact [email protected]. In Settings you can withdraw AI data-sharing consent. You may opt out of non-essential marketing emails via unsubscribe links. Account deletion is available in Settings where offered. 9. COOKIES AND SIMILAR TECHNOLOGIES We use strictly necessary technologies for authentication, security, checkout continuity, language preference, and storing your privacy choices. With your permission, we may also use analytics (including Google Analytics when configured), optional functional preferences, and marketing or campaign-attribution technologies. Optional categories default to off until you choose (global opt-in). You can Accept All, Reject Non-Essential, or Customize via Cookie Preferences, available in the footer, Settings, this Privacy Policy, and our Cookie Policy. Closing a banner without choosing is not consent. See our Cookie Policy (/cookie-policy) for the current technology inventory, retention notes, third-party providers, browser controls, and Global Privacy Control (GPC) handling. When GPC is detected, marketing technologies used for cross-context advertising measurement are disabled. We do not sell personal information for money. If marketing technologies are enabled with your consent, they may involve disclosures that some privacy laws treat as a “sale” or “share” for cross-context behavioral advertising. You may use “Do Not Sell or Share My Personal Information” in the footer, or turn Marketing off in Cookie Preferences, to disable those marketing technologies. 10. CHILDREN The Service is not for individuals under 18. We do not knowingly collect data from children under 18. If you believe we have, contact us to delete it. 11. INTERNATIONAL TRANSFERS We may process data in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers. International visitors see the same Cookie Preferences controls; optional technologies remain off until consent under our global opt-in approach. 12. CHANGES We may update this Policy by posting a new version with an updated effective date. Material changes may be notified by email or in-product notice. Material cookie-policy version changes may re-prompt privacy preferences. 13. CONTACT Privacy questions or requests: [email protected]. Controller / operator: Atlas Labs.