AtlasPass
Legal

Privacy Policy

Last updated: 2026-07-12

AtlasPass helps you plan personal trips. We only collect the data we need to make the app work for you.

Who is responsible

AtlasPass — contact@atlaspass.app. If you have any questions about your data, email us and we'll respond.

What we store

Your account (email), your trips and itinerary items, your safety card, checklist items, traveler profile (diet, mobility, languages, emergency contact), collaborators you invite (their email, until they accept), any cover photo you upload, and the documents you attach to a trip or store in your personal vault.

Why we store it

To render your trips, sync them across your devices, and share read-only links or invite collaborators when you ask us to.

Legal basis (GDPR / LGPD)

Performance of the service you request (art. 6.1.b GDPR / art. 7, V LGPD) and your consent for optional features (cover uploads, invites).

Who we share with

Only the platform providers needed to run AtlasPass (hosting, authentication, database, storage). We never sell your data and there are no advertising trackers. When you use AI features (like the destination briefing), we send only the minimal trip context needed for that request — never your wallet documents, safety card details or contact info.

How long we keep it

For as long as your account exists. Deleting a trip also removes its documents and timeline attachments. Deleting your account from Settings removes your trips, itinerary, safety cards, profile, cover images and personal vault items.

Your rights

You can export or delete all your data from Settings → Your data at any time. You can also contact us to correct information. Signing out clears the offline copy of your trips stored on that device.

Trip wallet

Documents live in two places, and we handle them differently. Trip documents and timeline attachments are kept in private object storage, encrypted at rest by our storage provider, and shared with the people accepted as collaborators on that trip. They're delivered through signed links that expire in 5 minutes, are excluded from any public share link, and are never sent to AI providers or partners. Items in your personal vault (outside a trip) are end-to-end encrypted in your browser with a password only you know. We can't read them, and we can't recover them if you lose the password — that's the trade-off for real privacy.

Weather data

Trip weather shown in the app comes from Open-Meteo (open-meteo.com). Only the destination's coordinates and the trip dates are sent — never personal data. Forecasts are labeled FORECAST; longer-range values are historical averages labeled TYPICAL. Weather data by Open-Meteo.

Contact

Reach us at contact@atlaspass.app for any privacy question.

This page is maintained by the AtlasPass team to answer common privacy and security questions. It's not a legal certification.