Privacy Policy

Atlas is a language-learning app operated by Kate Saville ("Atlas", "we", "us"), based in the United Kingdom. This policy explains what information we collect when you use the Atlas iOS app and our website, why we collect it, and the rights you have over it.

The short version: we collect the minimum needed to run your account and remember your learning progress. We use no advertising, no third-party analytics, no crash-reporting SDKs, and no tracking, and we never sell your data.

1. Who is responsible for your data

Kate Saville is the data controller for the personal data described in this policy.

Contact: hello@atlaslearn.app

2. Data we collect

Account information. When you create an account we collect your email address and a password. Your password is hashed by our authentication provider; we never see or store it in readable form. If you set a display name, we store that too.

Learning activity. To make the app work — progress, streaks, and spaced-repetition review scheduling — we store your learning records: the course(s) you enrol in, your self-assessment and placement results, lessons completed and scores, the vocabulary you have learned, your review history (including when you reviewed each item, whether you answered correctly, and response times), experience points, streaks, and daily activity dates. We also store your device's time zone so streaks follow your day, not the server's.

Website waitlist. If you joined the waitlist on our website, we store the email address you submitted, solely to contact you about Atlas.

What we do not collect. We do not collect your location, contacts, photos, advertising identifiers, or any data from other apps. We do not use third-party analytics or crash-reporting services. Pronunciation audio is generated on your device by Apple's built-in speech synthesis; nothing you hear or say is sent to us.

3. Data stored only on your device

Some data never leaves your device: your appearance and reminder preferences, mid-lesson resume state, one-time onboarding flags (such as having seen the keyboard setup screens), and a cache of course content. Deleting the app removes this local data.

4. How we use your data and our legal bases (UK GDPR)

• To provide the service — operating your account, saving progress, scheduling reviews, showing streaks and XP. Legal basis: performance of a contract (our Terms of Service).
• To secure the service — authentication, preventing abuse, maintaining accurate records. Legal basis: legitimate interests.
• To communicate essential account messages — for example password-reset emails. Legal basis: performance of a contract.
• To contact waitlist subscribers about Atlas. Legal basis: consent, withdrawable at any time.

We do not use your data for advertising or profiling, and we do not make automated decisions with legal or similar effects about you.

5. Who we share data with

We share data only with the service providers that run Atlas:

• Supabase — our database, authentication, and hosting provider. Your account and learning data are stored on Supabase's managed infrastructure in London (UK).
• Apple — standard iOS services on your device. Apple may collect diagnostics under its own policies and your device settings; we do not receive or use Apple's diagnostic data through any SDK.

We never sell personal data and never share it with advertisers or data brokers. We may disclose data if the law requires it.

Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum, or an adequacy decision.

6. Cookies and similar technologies

The Atlas app does not use cookies. It stores a secure session token on your device so you stay signed in; this is essential to the service. Our website's waitlist form works without advertising or analytics cookies.

7. User-generated content

Atlas does not currently offer public profiles, comments, messaging, or any way to share content with other users. Your learning answers are private to your account and are used only to schedule your reviews.

8. Children

Atlas is not directed at children under 13, and you must be at least 13 to create an account. We do not knowingly collect personal data from children under 13; if you believe a child has created an account, contact us and we will delete it.

9. Data retention

We keep your account and learning data for as long as your account exists — that history is the product's memory of your progress.

You can delete your account at any time from Account → Delete Account in the app. Deletion is immediate and permanent: your authentication account, all learning records, and any waitlist entry under the same email address are erased from our live systems in a single operation, and residual copies clear from routine backups within 30 days. You can also email us and we'll do it for you.

10. Your rights

Under UK GDPR you have the right to: access the data we hold about you; correct inaccurate data; delete your data ("right to erasure"); restrict or object to certain processing; port your data to another service; and withdraw consent where processing is based on consent.

Erasure is available immediately in the app (Account → Delete Account). To exercise any other right, email hello@atlaslearn.app. We will respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

11. Security

Data is encrypted in transit (TLS) and at rest by our hosting provider. Access to user data is restricted by row-level security: your records are readable only by your own authenticated account, and all writes flow through controlled server-side functions.

12. Changes to this policy

If we change this policy, we will update the effective date above and, for material changes, tell you in the app or by email before they take effect. Continued use of Atlas after a change means the updated policy applies.