Atlas — Privacy Policy

Atlas ("Atlas", "the app", "we", "us") is operated by Bonneytech Limited, a company registered in England and Wales (company number 16503776). This policy explains what information Atlas collects, how we use and protect it, and the choices you have. If you have any questions, contact us at development@bonneytech.com.

1. Information we collect

• Account information. When you create an account, we collect your email address, used to sign you in and secure your account.
• Content you create. Atlas stores the information you put into it — your areas, to-dos, reminders, habits, calendar entries, finance entries, and business and ownership details. This is your data; we store it so the app can show it back to you across your devices.
• Calendar data (only if you connect a calendar). If you connect a Google account (and, in future, other calendar providers), Atlas accesses your calendar events — their titles, dates, times, and descriptions — through that provider's API, so it can display them in Atlas and keep them in sync with the entries you create. We also store the secure access tokens needed to maintain the connection.
• Technical information. We process basic technical data needed to run the service securely, such as session and authentication information and standard server logs.

We do not use third-party advertising or tracking.

2. How we use your information

We use your information only to provide and operate Atlas: to authenticate you, store and display the content you create, and — where you have connected a calendar — to show your events and synchronise the entries you choose to sync. We also use it to maintain security and to comply with our legal obligations.

3. Google user data — Limited Use

Atlas's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google Calendar data solely to provide and improve the calendar features you can see in Atlas (displaying your events and two-way syncing the entries you create).
• We do not sell this data, and we do not use it for advertising.
• We do not transfer this data to others except as necessary to provide the service, with your consent, or where required by law.
• We do not allow humans to read your Google data, except where you give specific consent, where necessary for security or to comply with applicable law, or where the data has been aggregated and anonymised.

4. How we store and protect your data

Your data is stored in our database hosted by Supabase, protected so that each account can access only its own data. Calendar access tokens are stored encrypted in a dedicated secrets vault. The app is hosted on Vercel. We take reasonable technical and organisational measures to protect your information, though no online service can be guaranteed completely secure.

5. Who we share data with

We do not sell your personal data. We share data only with the service providers that help us run Atlas, acting on our instructions: Supabase (database, authentication, and secure token storage); Vercel (application hosting); and calendar providers such as Google (only the data involved in a connection you have chosen to make). We may also disclose information if required by law.

6. Keeping and deleting your data

We keep your data for as long as your account is active. You can delete individual items at any time, and disconnecting a calendar removes the stored tokens for that connection. If you ask us to delete your account, we will remove your associated data, except where we must retain it to meet a legal obligation.

7. Your rights

If you are in the UK or EU, you have rights over your personal data, including the right to access it, correct it, delete it, restrict or object to its processing, and request a copy in a portable form. To exercise any of these, contact development@bonneytech.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local data protection authority.

8. Revoking calendar access

You can disconnect a connected calendar at any time on the Connections page in Atlas. You can also review and remove Atlas's access to your Google account at https://myaccount.google.com/permissions.

9. Children

Atlas is not intended for children under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, where appropriate, notify you in the app.

11. Contact

Bonneytech Limited (company number 16503776) — development@bonneytech.com