Privacy Policy

Effective November 2, 2026

This policy explains how Atlas Health Lab (“Atlas,” “we,” “us”) collects, uses, shares, and protects information when you use the Atlas Health Lab app and website.

The short version

What we collect

Account: your email address (to sign you in) or, with Sign in with Apple, the name and email Apple shares with us — which can be a private relay address.

Profile: your name, username, bio, photo, and whether your account is private.

Your log: foods and amounts, meals you save, favorite foods, water, workouts (exercises, sets, reps, weights, duration, calories), notes on meals, and photos or videos you add.

Body and goals: if you set a weight goal, your sex, age, height, weight, weigh-ins, activity level, and calorie and macro targets.

Location: only while you record an outdoor workout, to map your route and measure distance, pace, and elevation. Atlas doesn’t track your location at any other time.

Supplements (only if you turn on My Stack): what you take, dose, timing, notes, product links, and the days you check them off. When someone opens one of your product links, we count the click (not who clicked) and tag the link so the store can see it came from Atlas.

Social activity: who you follow and who follows you, likes, comments, challenges you create or join, people you block, and reports you file.

Apple Health

If you connect Apple Health, Atlas reads your workouts (type, time, duration, distance, elevation, calories, and route) so they appear in your log automatically, and your heart rate during those workouts (average, max, and how it changed) to show your effort and time in each heart rate zone. Atlas does not write to Apple Health.

Your heart rate is visible only to you. It is never shown to followers or on posts, challenges, or leaderboards. Atlas Coach can read it to answer your questions about your training.

Workouts from Apple Health become part of your log and are stored with it. We never use Health data for advertising or marketing, never sell it, and never share it with third parties except the service providers listed below that store and run Atlas for you.

You can disconnect at any time in Settings › Connected Apps, or revoke access in the iPhone Health app.

Connected services

Garmin Connect: if you connect your Garmin account, Atlas receives only the data you authorize Garmin to share — activities (type, time, duration, distance, pace, elevation, calories, route, and heart rate) and daily health summaries such as steps, sleep, resting heart rate, and weight — so they appear in your log.

We use Garmin data only to provide Atlas features to you. We never sell it, never use it for advertising or marketing, and never share it with third parties except the service providers listed below that store and run Atlas for you. Heart rate from Garmin is visible only to you, just like heart rate from Apple Health.

You can disconnect Garmin at any time in Settings › Connected Apps or from the Garmin Connect app. Atlas then stops receiving new data; you can delete imported workouts individually, and deleting your account deletes all of it.

Garmin and other watches can also reach Atlas through Apple Health, as described above.

Who sees what

Your log is private. When you share a day — automatically or by tapping Share — your followers can see that day’s post: totals, macros, meals, workouts, notes, and the photos you attached. Nobody else can.

You choose what your posts include: turn off meals & nutrition or workouts in Settings → Sharing, hide a single workout, or hide specific exercises. Whatever you turn off is left out of your posts and can’t be read by anyone else — the database enforces it.

Private accounts (the default for new accounts) approve each follower. Public accounts can be followed without approval, but either way only followers see your days.

Routes your followers see have the first and last 200 meters removed, so where you start and finish (often home) stays private. Your own phone keeps the full route.

Your name, username, bio, photo, and follower counts can be found by other Atlas users in search, unless you block them.

If you add a packaged food to the Atlas food library, its name, brand, barcode, and nutrition become searchable by everyone. Who added it is never shown.

In a challenge, members see each other’s totals for that challenge (for example, active minutes that week). Joining is how you agree to share them.

Your supplement stack is off unless you turn it on; when it’s on, your followers see it on your profile. Your daily check-offs stay private — others only see how many days you’ve logged each product.

Training programs you publish are visible to your followers, or to everyone if you choose. Drafts are only yours. Which programs you follow and your progress are private; a program’s creator only sees how many people are following it.

People you block can’t find your profile, see your posts or comments, or follow you.

AI features

Some features use an AI model (Claude, from Anthropic): Snap Your Plate sends the photo you take, Describe a Meal sends what you type, Scan a Nutrition Label sends the label photo, opening a weekly recap sends that week’s totals and averages (not your full log) for the “Atlas take,” Coach sends your questions along with the parts of your log it looks up to answer them, and Plan My Week sends your goals, recipes, saved meals, usual foods, and what you ask for. Anthropic processes them to return the result to us; we don’t send your name or account details with them.

We don’t keep plate photos for this. A photo is only stored if you choose to attach it to your meal.

Coach conversations are kept only on your phone; we don’t store them on our servers.

AI features never recommend products we earn money from.

Food lookups

Supplement searches go to Anthropic (to tidy the search), the NIH Dietary Supplement Label Database (label facts), and a Universal Commerce Protocol store catalog (Channel3, for where to buy). Only the search words are sent, not who you are.

Food searches and barcode scans are looked up in public food databases — the USDA FoodData Central and Open Food Facts — through our server. Only the search words or barcode are sent, not who you are.

Food searches also include the Atlas food library, the packaged foods members have added.

Service providers

Supabase stores your account and data and runs our database, sign-in, and file storage.

Expo (EAS) builds and hosts the app’s server functions.

Anthropic processes the photos, descriptions, weekly totals, and Coach questions (with the log details needed to answer them) you send to Atlas’s AI features.

Apple provides Sign in with Apple, Apple Health, and maps.

Garmin provides the activity and health data you choose to connect from your Garmin account.

These providers process data only to run Atlas for us. We don’t sell personal information or share it for advertising.

How we protect it

Data is encrypted in transit, and access to every row in our database is checked against who you are and who you’ve allowed to see it. Photos and videos are stored privately and shown only to you and the followers who can see that day.

No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it, as the law requires.

Keeping and deleting your data

We keep your data while you have an account.

Delete Account (Settings → Delete Account) permanently deletes your account, your log, posts, photos, comments, follows, and everything else tied to it, on every device. Copies may remain in routine backups for a short period before they’re overwritten.

You can also delete individual foods, workouts, photos, comments, and posts at any time.

If you use Atlas without an account, everything stays on your phone and is removed when you delete the app.

Your choices and rights

You can see and edit your information in the app, make your account private, remove followers, block people, turn off automatic sharing, and delete your account.

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to how it’s used. Contact us to make a request; we’ll respond within the time the law requires.

Children

Atlas isn’t intended for children under 13 (or the minimum age where you live), and we don’t knowingly collect their information. If you believe a child has an account, contact us and we’ll delete it.

Changes

If we change this policy, we’ll update the date above, and for significant changes we’ll let you know in the app before they take effect.

Questions or privacy requests: atlas.support@gmail.com