Legal

Privacy Policy

Last updated: August 15, 2026 · See also: Terms of Service

Atlas is built on data minimization. Chat transcripts are never written to disk — there is no database table for them, by design. What we do keep is small, listed completely below, and yours to download or delete at any time from your profile page.

1. What we collect — the complete list

Data	Who	Why
Parent account: first/last name, email, US state + ZIP	Parents	Account, one-time sign-in codes, safety alerts, knowing which state's rules apply
Teen account: first name, age band (13–15 / 16–17), optional email	Teens	Account + age-appropriate experience; email only if a parent links it for sign-in. Never date of birth.
Consent record: when the Terms box was checked; product-updates opt-in	Parents	Proof of agreement; optional news emails
Family links + invite codes	Both	Connecting teens to their parent; codes are single-use and expire in 24h
Wellbeing signals: per-session risk state, intensity number, timestamps — no text	Teens	The parent dashboard's trends. The database schema has no message column — this is auditable.
Usage counts: sign-ins, chat-turn counts, token estimates	Both	Capacity and cost planning — counts only
Crisis-alert record: risk state + delivery status of alert emails	Both	Audit trail that a parent was notified — never what was said
Character definitions your family creates	Teens (parent-approved)	The characters themselves — these are creative writing, not conversations

2. What we never collect or store

Chat transcripts — never. Conversations exist only in server memory during an active session and are erased after 30 minutes of inactivity (or any restart). Parents see trends; nobody, including Atlas staff, can read past conversations, because they do not exist.
No passwords (one-time codes only), no date of birth, no phone numbers, no geolocation, no photos or uploads, no ad identifiers, no third-party trackers or analytics, no payment data during the free alpha.
We do not sell, rent, or share personal information with data brokers or advertisers. There are no ads on Atlas.

3. Where data goes — our service providers

Provider	What they process
AI/ML API (LLM provider, api.aimlapi.com)	The current conversation is transmitted in-flight to generate each character reply, then Atlas keeps none of it. Crisis-flow replies never leave our server at all. We are reviewing this provider's own retention terms and will update this section with the outcome; until then, know that your teen's words transit this provider during a chat.
Resend (email delivery)	Recipient address + contents of the emails we send: sign-in codes, safety alerts, and (if opted in) product updates
Linode/Akamai (hosting)	Runs our servers (US)
Guardian (our own safety service)	Receives risk scores only — never message text

4. How parents see their teens

This is the product, so we say it plainly: the linked parent can see their teen's wellbeing trends (risk states over time), which characters they talk to, how much they chat, and receives an email if a conversation shows signs of crisis. The parent cannot see what the teen actually said — Atlas is deliberately built so that is impossible, not just against policy.

5. Your rights — self-serve, built in

Download everything: the account-holding parent can download a complete copy of all data Atlas holds about the family — one click on the profile page, no email required.
Correct, delete, or ask anything: file an access, correction, or deletion request from the same page and track its status there. Deletion removes the parent account, linked teen accounts, and their data; the request log itself is retained as legal proof we handled it.
Every request and every export is recorded in a privacy audit log our team reviews.
Teens' requests run through their parent or guardian, matching the family-account model. If you are in the EU/UK, these are your GDPR rights; California residents have equivalent rights under the CCPA/CPRA — the buttons are the same for everyone.

6. Retention and security

Account data is kept while the account is active and deleted on request (above). Wellbeing signals and audit rows are kept while the account is active so the parent dashboard can show trends; we are finalizing a formal published retention schedule and will update this page with it.
Transport is encrypted (HTTPS); sign-in codes are stored only as hashes and expire in 10 minutes; there are no passwords to breach; access to production systems is restricted to the small Atlas team.
No system is perfectly secure. If a breach affects your data we will notify the account-holding parent and regulators as the law requires.

7. Children under 13

Atlas is for teens 13–17 inside a parent-held account. We do not knowingly collect data from children under 13; if we learn we have, we will delete it. Parents: if you believe a child under 13 has used Atlas, contact us and we will remove the data.

8. Changes and contact

If this policy changes in a way that matters, we will email account-holding parents and update the date at the top. Questions or privacy requests you'd rather not file through the profile page: privacy@corvionsystems.com.