Legal
Privacy Policy
How we collect, use, and protect your personal data when you use Atlas.
Last updated: August 2026
1. Introduction
ATLAS Cycling ("we", "our", or "us") is operated by SALTA PERFORMANCE LTD (Company No. 17050335), a company registered in England and Wales, trading as Atlas Cycling. We operate the ATLAS mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Any data you provide through ATLAS is submitted to and controlled by ATLAS Cycling, not by Garmin, Wahoo, Hammerhead, Apple, or any other connected service provider. These third-party services bear no responsibility or liability for data processed by ATLAS. By using ATLAS, you agree to the collection and use of information in accordance with this policy. ATLAS requires your active opt-in consent before collecting any location, fitness, or connected service data. Apple Health access is granted through Apple's iOS permission dialog and can be revoked at any time in iOS Settings. Each connected service can be disconnected in the App.
2. Information We Collect
2.1 Account Information When you create an account, we collect: email address, username and display name, profile photo (optional), bio (optional), and ATLAS ID (automatically generated unique identifier). 2.2 Location Data ATLAS is a location-based cycling application. We collect location data only when you actively initiate a ride recording or import a ride file. ATLAS does not collect location data in the background or by default. You must explicitly opt in to location tracking each time you begin a ride. When you record or import a ride, we collect GPS coordinates captured during ride recording, route polylines (the path of your rides), and territory intersections (which geographic zones you ride through). Location data is used for territory claims, battle participation, route matching, and map display within ATLAS. 2.3 Fitness & Performance Data When you record or import rides, we collect: distance travelled, elevation gain and loss, speed (average and maximum), duration and moving time, power output (if available from sensors), heart rate (if available from sensors), cadence (if available from sensors), and calculated metrics (suffer score, training load). 2.4 Connected Service Data If you choose to connect third-party services, we import activity data from those services. All integrations are read-only — ATLAS imports data but never writes data back. You must explicitly authorise each connection, and you can disconnect at any time. Data imported from Garmin, Wahoo, and Hammerhead may be displayed within ATLAS with appropriate attribution in accordance with each provider's brand guidelines. 2.5 Health & Wellness Data (optional) With your permission, ATLAS reads from Apple Health (HealthKit) and/or connected devices (Garmin via Terra, Wahoo, COROS, and Hammerhead): sleep duration and stages, heart-rate variability (HRV), resting heart rate, weight and body composition, VO2max, respiratory rate, blood oxygen, wrist temperature, steps, and active energy. This data is uploaded to our EU-hosted servers to compute readiness scores, personalise training plans, and power coaching features, and is used only for those health-and-fitness purposes. HealthKit data is never used for advertising or marketing, never sold, and never shared with advertising or analytics partners. It may be included in requests to Anthropic solely to generate your own coaching insights, as described in AI-Powered Features below. 2.6 Club & Social Data When using social features, we collect: club memberships and roles, event RSVPs and attendance, messages and posts within clubs, direct messages between users, and @mentions and interactions. 2.7 Competitive Data For territory and battle systems, we collect: territory claims and scores, battle history (wins, losses, defences), rivalry relationships, matchup league participation, taunts sent and received, and weekly digest preferences. 2.8 Technical Data We automatically collect: device type and operating system, app version, push notification tokens, crash reports and diagnostics, and usage analytics.
3. How We Use Your Information
3.1 Provide Core Services Record and store cycling activities, calculate performance scores, process battles and determine territory ownership, match rides to personal routes, and generate leaderboards and rankings. 3.2 Enable Social Features Facilitate club creation and membership, enable messaging and events, display profiles based on privacy settings, and power rivals and revenge systems. 3.3 Send Communications Push notifications for battles, territory attacks, and club activity; weekly digest summaries; and important account and service updates. 3.4 Improve the Service Analyse usage patterns, debug technical issues, and develop new features.
AI-Powered Features
ATLAS offers optional, user-initiated AI features: ride analysis and coaching, training plan generation, route summaries and route building, nutrition guidance, monthly recaps, and AI-styled share images. When you use these features, relevant data is sent to AI service providers acting as our processors: Anthropic (Claude API) for coaching, analysis, plans, and summaries; and OpenAI for AI-styled share images, which receives only the photo you explicitly upload plus ride statistics. Data sent to Anthropic may include ride statistics (distance, speed, elevation, heart rate, power, and GPS-derived summaries), fitness profile (FTP, weight, age, maximum and resting heart rate), wellness metrics you have chosen to sync (sleep, heart-rate variability, resting heart rate, and readiness scores), and your display name for personalised summaries. These providers process data solely to deliver the feature you request. Under our API agreements, the data is not used to train their models. We never use AI inputs or outputs for advertising. Nothing is sent unless you actively use an AI feature.
4. Information Sharing & Disclosure
4.1 Public Information By default, the following may be visible to other users: username and display name, profile photo, territory ownership, leaderboard rankings, club memberships, and battle history. You can adjust visibility in Settings → Privacy. 4.2 Third-Party Service Providers We share data only with trusted processors who assist in operating ATLAS, as listed below. 4.3 Connected Services When connected, data flows one way — from the connected service into ATLAS. We do not send data back to Garmin Connect, Wahoo Cloud, Hammerhead, COROS, or Apple HealthKit. 4.4 Legal Requirements We may disclose information if required by law. 4.5 Business Transfers If SALTA PERFORMANCE LTD is acquired or merged, user information may be transferred. We will notify you beforehand. 4.6 No Sale of Personal Data We do not sell, rent, or trade personal information.
| Processor | Service and data received |
|---|---|
| Supabase | EU-hosted database and backend (all app data). |
| Stripe | Payment processing for shop purchases. Payment details never touch our servers. |
| Apple | App Store subscriptions, push notifications, and Sign in with Apple. |
| Mapbox | Map rendering and route imagery (route coordinates). |
| Anthropic / OpenAI | AI features as described in AI-Powered Features above. |
| Terra | Connects Garmin accounts and relays activity and wellness data you authorise. |
| Resend | Transactional email delivery (email address and email content). |
| Meta and TikTok | App-install and ad attribution only: anonymous or limited events such as app install, signup completed, and subscription started. No ride, location, or health data is ever shared with them. |
| ClickSight | Our own first-party analytics and crash reporting (usage events and crash logs; no health metric values). |
5. Data Retention
We retain personal data only as long as necessary to operate ATLAS. If you disconnect a connected service, no further data will be imported.
6. Your Rights & Choices
6.1 Access & Portability You can view your data in the App, export ride data (GPX), or request a full export via hello@atlascycling.co. 6.2 Correction Update profile information in Settings → Profile. 6.3 Deletion You can delete rides, leave clubs, disconnect services, or delete your account. Account deletion permanently removes all data, including all server-side health data. 6.4 Privacy Controls In Settings → Privacy, you can set profile to private, hide from leaderboards, control messages, and disable taunts. 6.5 Notification Preferences Control push notifications and emails in Settings → Notifications. 6.6 Disconnect Services Disconnect Garmin, Wahoo, COROS, Hammerhead, or HealthKit anytime. Previously imported rides remain unless manually deleted. Apple Health access can also be revoked at any time in iOS Settings. 6.7 AI Processing You can stop AI processing at any time by simply not using AI features.
7. Data Security
We use appropriate safeguards, including: TLS/HTTPS encryption, encryption at rest, row-level security policies, secure OAuth token storage, EU-hosted database (Ireland), and regular security audits. No system is 100% secure. We will notify you of breaches as required by law.
8. Children's Privacy
ATLAS is not intended for users under 16. If we discover data from a child under 16, we will delete it. Contact: hello@atlascycling.co
9. International Data Transfers
ATLAS uses Supabase infrastructure hosted in the EU. Some services (e.g. Mapbox or Apple Push Notifications) may process limited data outside the EU. We ensure appropriate safeguards are in place.
10. Third-Party Links
ATLAS may link to services like Garmin Connect or Wahoo. We are not responsible for their privacy practices.
11. Changes to This Policy
We may update this policy by posting updates in the App, sending notifications, or showing in-app notices. Continued use means acceptance.
12. Contact Us
Email: hello@atlascycling.co Website: atlascycling.co Operating Entity: SALTA PERFORMANCE LTD Company Number: 17050335 Trading As: Atlas Cycling Registered Address: South View, Frolesworth Lane Claybrooke Magna Leicestershire LE17 5AS United Kingdom
13. Region-Specific Rights
13.1 EEA (GDPR) You have rights to: access, rectification, erasure, restriction, portability, object, and withdraw consent. Legal basis includes contract, legitimate interests, and consent. Data Controller: SALTA PERFORMANCE LTD. 13.2 California (CCPA) California residents may know what data we collect, request deletion, and opt out of sale (we do not sell data). 13.3 United Kingdom UK residents have similar rights under UK GDPR. Contact hello@atlascycling.co to exercise rights. By using ATLAS, you confirm you have read and understood this Privacy Policy. © 2026 SALTA PERFORMANCE LTD. All rights reserved.
Privacy questions?
Reach out to our team if you have any questions about how your data is handled.