Privacy Policy
Effective 12 October 2026
Atlas is a travel-planning app operated by Stellitron Technologies Private Limited (“we”, “us”). Registered office: 83/1, 2nd Main Road, Seshadripuram, Bengaluru 560020, Karnataka, India (CIN U62099KA2025PTC211368). This policy covers the Atlas iOS app and the atlas.stellitron.com website. It explains what we collect, why, who receives it, how long we keep it and the rights you have. Your trips belong to you; we hold them to run the service for you.
- We do not sell, rent or trade your personal data.
- No ads, no advertising or tracking SDKs, no cross-app tracking.
- Location is used only while the app is open, and is shared with trip companions only if you switch sharing on for a trip.
- AI features send the relevant trip details to an AI provider (via OpenRouter) that we ask not to retain or train on your data.
- You can delete your account and all your data in the app: Settings → Delete account.
Information we collect
- Account details: email address, display name and avatar. If you sign in with Apple or Google, that provider shares your email address and basic profile with us. We never receive your Apple or Google password.
- Trips and plans: destinations, dates, itineraries and day plans, stops, notes, companions you invite (their email address), and saved places and inspirations.
- Bookings and documents: flight, train, hotel and ticket details you add, and files you upload or import such as PDFs, confirmations and tickets, including boarding-pass and ticket barcodes or QR codes you scan.
- Photos: a profile picture you choose from your photo library, and media you attach to a trip.
- Location (while the app is in use): used on your device to follow the day’s route and live walking. If you turn on “share my location” for a trip, your latest position is stored and visible to that trip’s members until you stop sharing. Sharing is off by default and chosen per trip. We do not track location in the background.
- Microphone: only when you use voice translation. Short audio clips are sent for transcription and are not kept as recordings by us.
- AI conversations: messages you send to the Atlas copilot and its replies, saved per trip so you can see your history.
- Subscription and credits: if you buy Atlas Plus, your plan status, renewal date and store product (verified through RevenueCat; Apple handles payment and we never see your card). We also keep a per-request record of AI credits used, which holds no prompts or answers.
- Usage records: for each AI or maps request, the feature used, model, token counts and estimated cost. These records hold no prompts or answers and are anonymised if you delete your account.
- Technical data: sign-in events, request logs and, in release builds, crash reports (see Sentry below), which may include device type, OS and app version.
- Website waitlist: if you join the waitlist on atlas.stellitron.com we store your email address and when you signed up, and use it only to tell you when Atlas launches.
- On your device: the app keeps a cached copy of trips, tickets and phrasebooks so it works offline, plus preferences and scheduled reminders.
Device permissions
Each is optional and asked only when you use the related feature. You can change them in iOS Settings.
- Location (when in use): route following, live walk, optional sharing with trip companions.
- Camera: scanning boarding-pass barcodes and ticket QR codes into your wallet.
- Microphone: voice translation.
- Calendar: adding itinerary times to your calendar when you choose to.
- Photo library: choosing a profile picture; saving recaps and map snapshots when you export.
- Notifications: departure reminders you schedule. These are local notifications created on your device.
How we use your data
- To provide Atlas: sign-in, sync, itinerary planning, maps and routes, tickets, translation, reminders, trip sharing and export.
- To run AI features you use, as described below.
- To keep the service secure, prevent abuse, manage costs and fix faults.
- To meet legal obligations and respond to lawful requests.
We do not use your data for advertising, and we do not use it to train AI models.
AI features
When you ask the copilot, generate or edit an itinerary, import a document, or look up a place, the relevant request is sent from our servers to OpenRouter, which passes it to a model provider (such as Google) to produce the answer. That can include your question, the relevant parts of your trip, text extracted from a document you import, and place names. Some requests may use web search to look up current information; search terms go to the search provider OpenRouter uses. We ask OpenRouter to route only to providers with zero data retention that do not train on your data; we do not control those providers’ own security logs. Voice translation sends the audio clip through OpenRouter to a speech-to-text model (OpenAI Whisper) with zero data retention; Atlas does not store the clip. AI output can be wrong; check it before relying on it.
Who receives your data
| Provider | Purpose and data |
|---|---|
| Supabase | Database, authentication and file storage. Our project is hosted in Tokyo, Japan (ap-northeast-1). |
| OpenRouter and its model providers (e.g. Google) | AI planning, chat, document understanding and voice-clip transcription, as above. |
| Google Maps Platform | Place search, geocoding, place photos, routes and 3D maps. Place names, addresses and coordinates for the trip are sent; your device location is used only with your permission and is not stored by Google through us. |
| Apple (MapKit, Sign in with Apple, App Store) | Maps and Look Around, sign-in, app distribution. |
| RevenueCat | Processes and verifies Atlas Plus subscription purchases. It receives your purchase history for Atlas and your Atlas app user ID (a random identifier, not your name or email). We delete your RevenueCat record when you delete your account. |
| Google (Sign in with Google) | Sign-in, if you choose it. |
| Resend | Sends trip invitation emails to people you invite (their email address and your name). |
| Sentry | Crash and error reports from release builds. We configure it not to collect IP address, request bodies or personal data by default. |
| Open data services (Photon/Komoot, OpenStreetMap Nominatim and Overpass, Open-Meteo, Wikipedia and Wikimedia, Transitous) | Place lookup, weather, transit and place information. These receive place names or coordinates and your device’s IP address, never your name or account. |
| Vercel | Hosts atlas.stellitron.com. |
| Trip companions | People you invite see the trip as you configure it, and your location only if you share it. |
| Authorities | Where the law requires or to protect users and the service. |
Social publishing is switched off in this version of Atlas; nothing you create is posted publicly. If we are involved in a merger or sale, your data would move only under this policy and we would tell you beforehand.
Where your data is stored
Our providers may store and process data in Japan, India, the United States, Europe and other countries where they operate. When data leaves your country we rely on the protections the law requires, such as contractual safeguards.
Security
Data is encrypted in transit, and each user’s records are isolated at the database level so other users cannot read them. No system is completely secure. If a breach affects your personal data we will notify you and the authorities as the law requires.
Retention and deletion
We keep your data until you delete it or delete your account. Settings → Delete account permanently removes your profile, trips, bookings, documents, photos, chat history and shared locations from our live systems and clears what the app stored on your phone. Copies in provider backups expire on their backup cycle. Usage records are kept in anonymised form. We may keep security logs and records the law requires us to keep. Waitlist emails can be removed on request. Files you exported or shared with others are outside our control.
Your rights
Under India’s Information Technology Act and its rules, the Digital Personal Data Protection Act, 2023 as it comes into force, and the GDPR or similar laws where they apply, you can access, correct and delete your data, withdraw consent, object to or ask us to restrict processing, nominate someone to exercise your rights if you die or become unable to, and complain to us or to the relevant authority such as the Data Protection Board of India. Most of this can be done in the app. For anything else email contact@stellitron.com from your registered address; we reply within 30 days and may ask you to confirm your identity.
Children
Atlas is intended for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe we hold such data, contact us and we will delete it, subject to the law.
Changes to this policy
We will post changes here and update the date above. For a material change we will tell you in the app or by email before it takes effect, and ask again where the law requires fresh consent.
Contact and grievances
Questions and requests: contact@stellitron.com.
Grievance Officer: Manish Kumar S, Stellitron Technologies Private Limited, 83/1, 2nd Main Road, Seshadripuram, Bengaluru 560020, Karnataka, India, manish@stellitron.com. We acknowledge complaints within 48 hours and resolve them within one month, or any shorter period the law requires.