Privacy Policy

We collect information you provide directly, information generated by your use of the Service, and limited technical information.

• Generate and deliver personalized workout programs using AI.
• Remember your training history and adapt future programming to your progress.
• Operate and improve the Service, including debugging, performance monitoring, and feature development.
• Send transactional communications (account confirmations, policy updates). We do not send marketing emails without your explicit opt-in.
• Enforce our Terms of Service and protect the security of the platform.

This section is important. Atlas Prime platform administrators have the technical ability to temporarily access your account in a read/support mode for quality assurance and customer support purposes.

Every impersonation session is subject to the following safeguards:

• Full audit log: every session records the administrator's identity, the time the session started and ended, the stated reason for access, and every data write made during the session.
• Time-limited: sessions expire automatically (maximum 2 hours) and cannot be silently extended.
• Write logging: any data created or deleted during a session is logged and reversible for 30 days.
• No credential access: administrators cannot view or change your password or any payment credentials through this feature.
• Password and payment data are never accessible through impersonation.

We will only use impersonation to diagnose bugs you report, verify data integrity, or respond to a support request. We will not use it to read your data for advertising, profiling, or any purpose unrelated to operating the Service.

We do not sell your personal data. We share it only with the following service providers who help us operate the platform:

• Supabase — database hosting, authentication, and file storage. Data is stored in secure cloud infrastructure.
• Anthropic — the AI that generates your workout programs. Your fitness profile and relevant training context are sent to Anthropic's API to produce personalized content. Anthropic's privacy policy governs their handling of API data.
• OpenAI — provides spoken (text-to-speech) narration of exercise instructions and generates the text embeddings used to retrieve relevant coaching knowledge. Limited exercise and coaching text is sent to OpenAI's API. OpenAI's privacy policy governs their handling of API data.
• Google — if you sign in with Google, your Google account information is shared with Google per their privacy policy.
• Vercel — the platform that hosts and serves the Atlas Prime web application.

We may disclose data if required by law, court order, or to protect the safety of our users or the public.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Workout logs and training history are retained for the life of your account so the AI can build progressively on your history. You can delete individual log entries at any time from the History page.

Admin impersonation audit logs are retained for a minimum of 90 days for security and accountability purposes.

Depending on your location, you may have rights including:

• Access: request a copy of the personal data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request that your account and associated data be deleted.
• Portability: request your data in a machine-readable format.
• Objection: object to certain processing activities.

To exercise any of these rights, contact us at the address in Section 9. We will respond within 30 days.

We implement industry-standard security measures including encrypted data storage (Supabase), row-level security policies that enforce strict access controls, and the admin safeguards described in Section 3. No system is perfectly secure; we encourage you to use a strong, unique password and enable two-factor authentication on your email account.

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have done so, we will delete it promptly.

We may update this policy as the Service evolves. Significant changes will be communicated via email or an in-app notice before they take effect. Your continued use after the effective date constitutes acceptance.

For privacy questions, data requests, or to report a concern, use the feedback option in the Account page inside the app or the support channel listed there.