Legal
Privacy Policy
How we collect, use, and protect your personal data when you use Atlas.
Last updated: October 2026
1. Introduction
ATLAS Cycling ("we", "our", or "us") is operated by SALTA PERFORMANCE LTD (Company No. 17050335), a company registered in England and Wales, trading as Atlas Cycling. We operate the ATLAS mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Any data you provide through ATLAS is submitted to and controlled by ATLAS Cycling, not by Garmin, Wahoo, Hammerhead, Apple, or any other connected service provider. These third-party services bear no responsibility or liability for data processed by ATLAS. By using ATLAS, you agree to the collection and use of information in accordance with this policy. ATLAS requires your active opt-in consent before collecting any location, fitness, or connected service data. Apple Health access is granted through Apple's iOS permission dialog and can be revoked at any time in iOS Settings. Each connected service can be disconnected in the App.
2. Information We Collect
2.1 Account Information When you create an account, we collect: email address, username and display name, profile photo (optional), bio (optional), and ATLAS ID (automatically generated unique identifier). 2.2 Location Data ATLAS is a location-based cycling application. We collect location data only when you actively initiate a ride recording or import a ride file. ATLAS does not collect location data in the background or by default. You must explicitly opt in to location tracking each time you begin a ride. When you record or import a ride, we collect GPS coordinates captured during ride recording, route polylines (the path of your rides), and territory intersections (which geographic zones you ride through). Location data is used for territory claims, battle participation, route matching, and map display within ATLAS. 2.3 Fitness & Performance Data When you record or import rides, we collect: distance travelled, elevation gain and loss, speed (average and maximum), duration and moving time, power output (if available from sensors), heart rate (if available from sensors), cadence (if available from sensors), and calculated metrics (suffer score, training load). 2.4 Connected Service Data If you choose to connect third-party services, we import activity data from those services. You must explicitly authorise each connection, and you can disconnect at any time. ATLAS only sends data to a connected service when you ask it to, such as sending a saved route to Garmin Connect or Wahoo. Data imported from Garmin, Wahoo, and Hammerhead may be displayed within ATLAS with appropriate attribution in accordance with each provider's brand guidelines. How we collect, use, store and share Garmin data is explained in full in How we handle Garmin data below. 2.5 Health & Wellness Data (optional) With your permission, ATLAS reads from Apple Health (HealthKit) and/or connected devices (Garmin, Wahoo, COROS, and Hammerhead): sleep duration and stages, heart-rate variability (HRV), resting heart rate, weight and body composition, VO2max, respiratory rate, blood oxygen, wrist temperature, steps, and active energy. This data is uploaded to our EU-hosted servers to compute readiness scores, personalise training plans, and power coaching features, and is used only for those health-and-fitness purposes. HealthKit data is never used for advertising or marketing, never sold, and never shared with advertising or analytics partners. It may be included in requests to Anthropic solely to generate your own coaching insights, as described in AI-Powered Features below. 2.6 Club & Social Data When using social features, we collect: club memberships and roles, event RSVPs and attendance, messages and posts within clubs, direct messages between users, and @mentions and interactions. 2.7 Competitive Data For territory and battle systems, we collect: territory claims and scores, battle history (wins, losses, defences), rivalry relationships, matchup league participation, taunts sent and received, and weekly digest preferences. 2.8 Technical Data We automatically collect: device type and operating system, app version, push notification tokens, crash reports and diagnostics, and usage analytics.
3. How We Use Your Information
3.1 Provide Core Services Record and store cycling activities, calculate performance scores, process battles and determine territory ownership, match rides to personal routes, and generate leaderboards and rankings. 3.2 Enable Social Features Facilitate club creation and membership, enable messaging and events, display profiles based on privacy settings, and power rivals and revenge systems. 3.3 Send Communications Push notifications for battles, territory attacks, and club activity; weekly digest summaries; and important account and service updates. 3.4 Improve the Service Analyse usage patterns, debug technical issues, and develop new features.
AI-Powered Features
ATLAS offers optional, user-initiated AI features: ride analysis and coaching, training plan generation, route summaries and route building, nutrition guidance, monthly recaps, and AI-styled share images. When you use these features, relevant data is sent to AI service providers acting as our processors: Anthropic (Claude API) for coaching, analysis, plans, and summaries; and OpenAI for AI-styled share images, which receives only the photo you explicitly upload plus ride statistics. Data sent to Anthropic may include ride statistics (distance, speed, elevation, heart rate, power, and GPS-derived summaries), fitness profile (FTP, weight, age, maximum and resting heart rate), wellness metrics you have chosen to sync (sleep, heart-rate variability, resting heart rate, and readiness scores), and your display name for personalised summaries. These providers process data solely to deliver the feature you request. Under our API agreements, the data is not used to train their models. We never use AI inputs or outputs for advertising. Nothing is sent unless you actively use an AI feature. Data we receive from Garmin is never sent to these AI providers. See How we handle Garmin data below.
How we handle Garmin data
This section explains how ATLAS collects, uses, processes and stores data we receive from Garmin through the Garmin Connect Developer Program. What we collect We receive Garmin data only after you connect your Garmin account in ATLAS and approve access on Garmin's own permission screen. Depending on what you allow, we receive the activities you record on a Garmin device (date and time, GPS track, distance, elevation, speed, heart rate, power, cadence and the device model) and daily health summaries (steps, heart rate and resting heart rate, sleep, heart-rate variability, stress, body composition, and fitness metrics such as VO2max). We also store the access tokens Garmin issues so we can collect new data when you sync. We never see your Garmin password. How we use it Garmin data is used only to show you your own rides, stats, maps, territory, readiness and health insights in ATLAS, and to show your rides, routes, leaderboard positions and territory to other ATLAS riders according to your privacy settings. We never sell Garmin data and never use it for advertising. How we store it Garmin data is stored on our EU-hosted servers (Supabase, Ireland), encrypted in transit and at rest, and protected by access controls so that only you, and other riders as your privacy settings allow, can see it. Garmin access tokens are kept in a restricted area that the app itself cannot read. Third parties Garmin data is not sold, rented or shared with any third party for its own purposes. It is handled only by the service providers that run ATLAS for us, under our instructions: Supabase (hosting and database), Mapbox (drawing your rides on maps, using their route coordinates), Apple (push notifications, which may mention a ride that has synced) and Resend (emails, which may include your ride stats). Garmin data is never shared with, sent to or processed by any third-party AI service, including Anthropic and OpenAI. This also applies to anything we calculate from it, such as training load or an estimated FTP. If an ATLAS AI feature would need Garmin data, it is not available for that data. Sending routes to Garmin If you choose to send a saved route to Garmin Connect, ATLAS first asks for your consent, then copies that route (its name, map line, distance and climbing) to your Garmin Connect account. Garmin handles it under its own privacy notice (garmin.com/privacy/connect). We send nothing else to Garmin. Keeping and deleting it If you disconnect Garmin in ATLAS, or remove ATLAS from your Garmin Connect account, we stop collecting Garmin data immediately and the access Garmin gave us ends. Rides and health data already imported stay in your account until you delete them. Deleting your ATLAS account permanently deletes all Garmin data we hold. You can also ask us to delete your Garmin data at any time by emailing hello@atlascycling.co.
4. Information Sharing & Disclosure
4.1 Public Information By default, the following may be visible to other users: username and display name, profile photo, territory ownership, leaderboard rankings, club memberships, and battle history. You can adjust visibility in Settings → Privacy. 4.2 Third-Party Service Providers We share data only with trusted processors who assist in operating ATLAS, as listed below. 4.3 Connected Services Data from connected services flows into ATLAS. ATLAS sends data out only when you choose to: sending a saved route to Garmin Connect or Wahoo, or saving rides you record in ATLAS to Apple Health (you can turn this off). Garmin data is never passed on to any other connected service. 4.4 Legal Requirements We may disclose information if required by law. 4.5 Business Transfers If SALTA PERFORMANCE LTD is acquired or merged, user information may be transferred. We will notify you beforehand. 4.6 No Sale of Personal Data We do not sell, rent, or trade personal information.
| Processor | Service and data received |
|---|---|
| Supabase | EU-hosted database and backend (all app data). |
| Stripe | Payment processing for shop purchases. Payment details never touch our servers. |
| Apple | App Store subscriptions, push notifications, and Sign in with Apple. |
| Mapbox | Map rendering and route imagery (route coordinates). |
| Anthropic / OpenAI | AI features as described in AI-Powered Features above. |
| Terra | Connects COROS and other supported device accounts and relays the activity and wellness data you authorise. Garmin connects to ATLAS directly, not through Terra. |
| Resend | Transactional email delivery (email address and email content). |
| Meta and TikTok | App-install and ad attribution only: anonymous or limited events such as app install, signup completed, and subscription started. No ride, location, or health data is ever shared with them. |
| ClickSight | Our own first-party analytics and crash reporting (usage events and crash logs; no health metric values). |
5. Data Retention
We retain personal data only as long as necessary to operate ATLAS. If you disconnect a connected service, no further data will be imported.
6. Your Rights & Choices
6.1 Access & Portability You can view your data in the App, export ride data (GPX), or request a full export via hello@atlascycling.co. 6.2 Correction Update profile information in Settings → Profile. 6.3 Deletion You can delete rides, leave clubs, disconnect services, or delete your account. Account deletion permanently removes all data, including all server-side health data. 6.4 Privacy Controls In Settings → Privacy, you can set profile to private, hide from leaderboards, control messages, and disable taunts. 6.5 Notification Preferences Control push notifications and emails in Settings → Notifications. 6.6 Disconnect Services Disconnect Garmin, Wahoo, COROS, Hammerhead, or HealthKit anytime. Previously imported rides remain unless manually deleted. Apple Health access can also be revoked at any time in iOS Settings. 6.7 AI Processing You can stop AI processing at any time by simply not using AI features.
7. Data Security
We use appropriate safeguards, including: TLS/HTTPS encryption, encryption at rest, row-level security policies, secure OAuth token storage, EU-hosted database (Ireland), and regular security audits. No system is 100% secure. We will notify you of breaches as required by law.
8. Children's Privacy
ATLAS is not intended for users under 16. If we discover data from a child under 16, we will delete it. Contact: hello@atlascycling.co
9. International Data Transfers
ATLAS uses Supabase infrastructure hosted in the EU. Some services (e.g. Mapbox or Apple Push Notifications) may process limited data outside the EU. We ensure appropriate safeguards are in place.
10. Third-Party Links
ATLAS may link to services like Garmin Connect or Wahoo. We are not responsible for their privacy practices.
11. Changes to This Policy
We may update this policy by posting updates in the App, sending notifications, or showing in-app notices. Continued use means acceptance.
12. Contact Us
Email: hello@atlascycling.co Website: atlascycling.co Operating Entity: SALTA PERFORMANCE LTD Company Number: 17050335 Trading As: Atlas Cycling Registered Address: South View, Frolesworth Lane Claybrooke Magna Leicestershire LE17 5AS United Kingdom
13. Region-Specific Rights
13.1 EEA (GDPR) You have rights to: access, rectification, erasure, restriction, portability, object, and withdraw consent. Legal basis includes contract, legitimate interests, and consent. Data Controller: SALTA PERFORMANCE LTD. 13.2 California (CCPA) California residents may know what data we collect, request deletion, and opt out of sale (we do not sell data). 13.3 United Kingdom UK residents have similar rights under UK GDPR. Contact hello@atlascycling.co to exercise rights. By using ATLAS, you confirm you have read and understood this Privacy Policy. © 2026 SALTA PERFORMANCE LTD. All rights reserved.
Privacy questions?
Reach out to our team if you have any questions about how your data is handled.