Atlas

Privacy

What Atlas does with your data

Last updated 22 August 2026

Atlas is a personal project, not a company. It exists to keep coursework, deadlines and job applications in one place. It has no advertising, no analytics, and nothing to gain from collecting more about you than it needs to work.

What is stored

Everything below is tied to your account and visible only to you:

  • Your account. The email address you sign up with, and the identifier your sign-in provider gives us. Passwords are handled by our authentication provider and never reach Atlas.
  • Your coursework. Subjects, tasks, notes on those tasks, and due dates.
  • Your applications. Employers, roles, status, and the dated events you record against each one.
  • Assistant conversations. The messages you exchange with the built-in assistant, so a conversation survives a page reload.
  • Files you attach. Images and documents you attach to the assistant are kept in private per-user storage.
  • Study material you generate. The flashcards and short notes Atlas writes for you.

Where it is kept

Your data lives in a Postgres database and file store run by Supabase, and the application itself is hosted on Vercel. Every table enforces row-level security, so a request carrying your account can only ever read rows belonging to your account. Vercel keeps ordinary server request logs, as any web host does.

Google Drive

Connecting Google Drive is optional, and Atlas asks for the narrowest access Google offers.

  • Atlas requests the drive.file scope. This grants access only to files you yourself choose in Google’s own file picker. Atlas cannot browse, search, list or open anything else in your Drive — not even to see that it exists.
  • When you pick a PDF, its contents are downloaded to memory, read once to produce your flashcards or notes, and then discarded. The file is never copied into Atlas’s storage.
  • The access and refresh tokens Google issues are encrypted with AES-256-GCM before being written to the database, using a key held only in server configuration. The stored values are unreadable without it.
  • Atlas also reads your Google account’s email address, purely so Settings can show you which account is connected.
  • You can disconnect at any time from Settings. That deletes the stored tokens and asks Google to revoke the grant. You can also revoke it yourself at myaccount.google.com/permissions.

Atlas’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The assistant and AI features

The assistant, the document generator, image understanding and voice dictation are all powered by Mistral AI. To answer you, Atlas sends them the relevant material: your messages, the tasks and applications the assistant needs in order to reason about your question, any image you attach, any audio you dictate, and text extracted from documents you ask it to work on. Handling of that material is governed by Mistral’s terms. Atlas does not use your data to train any model.

What Atlas does not do

  • No advertising, and no advertising trackers.
  • No analytics or behavioural tracking of any kind.
  • Your data is never sold, rented, or shared for anyone’s marketing.
  • No third parties receive your data beyond the providers named above, each of which is used only to make a feature work.

Keeping and deleting

Your data is kept for as long as your account exists. Tasks and applications can be deleted individually inside the app, which also removes anything attached to them. Disconnecting Google Drive deletes the stored tokens immediately. If you want the account and everything in it removed, email the address below and it will be deleted.

Your rights

You can ask for a copy of what is stored about you, ask for it to be corrected, or ask for it to be erased. Write to the address below and say which.

Changes

If this policy changes in a way that affects what happens to your data, the date at the top will change and the change will be described here.

Contact

Questions, requests, or anything that looks wrong: tsung.akein@gmail.com.