Privacy notice
DRAFT for discussion. Must be reviewed by a privacy lawyer (PIPEDA and Quebec Law 25, GDPR, UK GDPR, CCPA/CPRA and app-store rules) before launch.
What we collect, and why
- Your account: Atlas creates one automatically when you start, with no name or email needed. It keeps your dog's progress safe if you lose your phone.
- Training data (your dog's name, birthday or age range, breed, look, answers, sessions, check-ins, potty and care logs): to coach your dog and keep the plan in step with family members you invite. It is stored on our servers and a copy stays on your phone, so Atlas also works offline.
- Family sharing: adults you invite see your dog's plan, check-ins, logs and progress, and the first names of family members. Inviting is your choice; you can remove people at any time, and they can leave.
- Health information (medicine names you choose to add): only with your separate permission, to shape sessions and create a Vet Report. Never used for advertising.
- Photos (DNA test screenshots): only with your permission, read once to fill in your dog's breed mix, and not stored.
- Email (optional): to sign you in on a new phone and restore purchases. If you subscribe, the email you give at checkout is linked to your account for the same reason.
- Payment: handled by Stripe (and later Apple or Google). We never see card numbers. We keep the subscription status, its dates and a Stripe customer number.
- Consent records: what you agreed to, and when, so we can show it.
- Optional: anonymous training results to improve Atlas for every dog, and app analytics. Both are off unless you turn them on.
Who processes data for us
- Cloudflare: hosting and database (servers in North America and other regions).
- Stripe: payments.
- Resend: sign-in code emails, when you use email sign-in.
- Anthropic: AI-written explanations, only if switched on.
Your information may be processed outside your province or country; these providers protect it under their own agreements with us.
AI
Some explanations may be written with Anthropic's Claude. We send only the facts needed (for example, your dog's first name, age group and the reasons Atlas chose a skill), never your email or payment details. Safety decisions are never made by AI.
How long we keep it
Until you delete your account. Billing records are kept as long as tax law requires (in Canada, generally six years). Sign-in codes expire after 10 minutes and invites after 7 days.
Your choices
Change permissions any time in Settings. Export or delete your data in the app (Settings → Account) or on the account page. Deleting an account that runs a family also removes the family's shared dogs; invited members keep their own accounts.
Security
Encrypted connections, signed sessions, strict input checks, limited access and automated checks for leaked keys. No method is perfectly secure, but we work to reduce risk.
Contact
[Your legal name or company, address and privacy contact email, to be added before launch.]