ATLAS Privacy Policy
ATLAS is a personal training and body composition coaching application. This policy explains what information ATLAS uses when you connect supported services and how that information is handled.
Information ATLAS may use
- Oura: sleep, readiness, heart rate, HRV, respiratory rate, blood oxygen and related recovery information that you authorize through Oura.
- Hevy: workouts, exercises, sets, repetitions, loads, RPE and routine information.
- Withings: weight, body composition, activity and supported sleep or health summary information.
- FatSecret: food diary entries and daily nutrition totals including calories, protein, carbohydrate and fat that you authorize through your FatSecret account.
- Information you enter: training settings, goals, body composition calibration values and other coaching preferences entered directly into ATLAS.
How information is used
ATLAS uses connected data only to display your information, calculate trends, prepare training and recovery recommendations, and provide personalized coaching inside ATLAS.
Authentication and credentials
OAuth access and refresh tokens for connected services are not exposed in the ATLAS page. Withings credentials and the latest synced Withings payload are encrypted and stored server-side for the signed-in ATLAS account so authorized devices can share the same connection. Legacy browser Withings cookies are migrated and cleared. Other supported services may use secure HTTP only cookies. API client secrets are stored as private server environment variables and are not placed in browser code.
AI coaching
When you request AI coaching, relevant training or body metric context may be sent to the configured AI service so it can generate the requested coaching response. ATLAS is designed to send the context needed for that feature rather than account passwords or third party client secrets.
Sharing and sale of data
ATLAS does not sell your personal information. Data is shared with connected providers and service processors only as needed to operate the features you choose to use.
Disconnecting services
You can disconnect supported connected services from ATLAS. Disconnecting removes the active ATLAS connection token for that service. You may also revoke ATLAS access from the provider's own account or authorization settings.
Data retention
ATLAS may keep local browser data and cached coaching information to make the app useful between sessions. Connected service tokens are maintained only for the active connection and can be cleared by disconnecting. Your provider remains the source of truth for data stored in that provider account.
Security
ATLAS uses HTTPS, server side secrets, secure cookies and encrypted token storage mechanisms. No internet connected service can guarantee absolute security, so access should be limited to devices and accounts you control.
Health and fitness information
ATLAS provides fitness and wellness coaching information. It is not a medical service and is not intended to diagnose, treat or prevent a medical condition.
Changes
This policy may be updated as ATLAS adds or changes connected services. The effective date above will be updated when material changes are made.
Contact
Questions about this policy can be directed to the contact email registered for the ATLAS Oura application.