Atlas

// privacy

Privacy policy.

Effective 5 October 2026

The short version

  • Your trips, bookings and photos are stored so the app can work, and are visible only to you and the people you share a trip with.
  • Separately, Atlas records how it is used as telemetry — including the trip content you enter, the files you upload and your chats — keyed to your browser and, while you are signed in, linked to your account. Deleting your account unlinks it but does not remove it; see § 04.
  • The AI features send trip content to Google’s Gemini API when you use them — the chat, AI trip drafts, the paste-to-itinerary reader, booking parsing and the journal writer. Nothing is sent until you use one.
  • Place searches go to Google Places and routes to OpenRouteService, both through our server. Map tiles load from MapTiler directly in your browser.
  • A public share link shows the itinerary and photos to anyone holding the link. Costs, booking references, collaborators and chats are never on it.
  • Deleting your account deletes your trips, files and every derived record except the log of AI calls and the daily allowance counts, which hold no trip content and stay so the limits stay honest. No backup is kept.

§ 01

Who runs Atlas

Euxie Atlas (“Atlas”) is run by Euxie, which is James Argarin, an individual based in the Philippines. It is not a company and carries no advertising. It does keep two kinds of record: the ones the features below need, and a usage telemetry trail described in § 04.

§ 02

What is stored

Your account (email and password hash, handled by Supabase Auth), your trips — days, stops, notes, costs, booking references — the files you upload (booking documents and photos, including the date and location your camera wrote into a photo), your chats with the planner, and a log of AI calls (token counts and timings, never the text of a prompt).

Files live in a private storage bucket. They are served through short-lived signed links, never public URLs.

§ 03

What the AI reads

When you use an AI feature, the relevant content is sent to Google’s Gemini API under this app’s key: the chat sends your messages and what it looks up to answer them — the itinerary of the trip you are in or, in the app-wide chat, of the trips you ask about, and the details read from your booking documents (references and traveller names included) when you ask about bookings; the paste reader sends what you pasted; booking parsing sends that document; the journal writer sends a day’s stop names and photo captions. Generating a trip draft sends your destination, dates, pace, interests, travel constraints, travel mode, currency and optional budget. Suggested venue names and the destination are then searched through Google Places. An uncreated draft is kept only in the current page; AI usage counts and quota records are still stored. Google’s API terms apply to that processing. No AI call happens in the background — each one is something you clicked.

Place searches are forwarded to Google Places and route lookups to OpenRouteService from our server, so your IP address is not shared with them. Map tiles are fetched by your browser from MapTiler, which therefore sees your IP address, as any map host does.

§ 04

Usage telemetry

To understand how Atlas is used, it also records what you do here as telemetry. This is a second copy of your content, keyed to a device identifier in your browser and, while you are signed in, linked to your account as well, and read by the maintainer. Specifically:

What we store

  • Your activity — which actions you take and when.
  • The content you process — the trips you create and edit (titles, destinations, dates, budgets), the stops you search for and add, what you paste into the itinerary reader and what it finds, the trip reviews it writes, your chat messages and the planner's replies, and which proposed actions you confirm or undo. Do not enter anything here you would not want stored, including passwords, secrets or personal documents.
  • Files you upload — the booking documents and photos you add to a trip, together with the date and location your camera wrote into a photo are stored in our private file storage.
  • Your network and device — your IP address, an approximate location derived from it, your browser and operating system, language, time zone, screen and window size, and similar technical details your browser exposes.
  • A device identifier — a random id kept in your browser’s storage so we can recognise return visits. It is also stored in a cookie so our servers can recognise the device. It is not tied to your name and clearing your browser storage resets it.
  • Page views via Vercel Web Analytics — the hosting platform records which pages are visited, referrers, and coarse device and country data. It sets no cookies and identifies a visitor only by a hash that changes daily, so it cannot follow you across days or sites.
  • Performance via Vercel Speed Insights — the hosting platform measures how quickly pages load and respond (Core Web Vitals), with the page, device type and country. It sets no cookies and does not identify you.
  • Your account — while you are signed in, telemetry recorded from this browser is also linked to your account (its id and email address), so we can see what one account did across devices. Deleting your account unlinks that telemetry but does not delete it: the records stay under the device identifier, without your account or email. To have them removed as well, ask separately (below).
  • Support access — to diagnose a problem, the operator can sign in to your account and see the app as you see it, without learning or changing your password. Each access is time-limited and logged, and does not sign you out anywhere else. Nothing done during it is recorded as your telemetry.
  • Feedback you send — your bug reports, feature requests and replies are stored linked to your account, so the maintainer can answer them on your Requests page, and each new report is also emailed to the maintainer. Deleting your account unlinks them but does not delete them.

How long we keep it

Stored data is retained indefinitely unless you ask us to remove it.

Requesting deletion

To have your data deleted, use the feedback button in the app (the message reaches James Argarin) and mention your device identifier if you have it. We will remove the associated records.

§ 05

Sharing

A trip is visible to its owner and the people invited to it. Invites are bound to an email address. A public link, if you create one, shows a read-only page — itinerary, day notes and photos — to anyone who has the link; it never shows costs, booking references, documents, collaborators or chats, and you can revoke it at any time. Public pages are marked not to be indexed by search engines.

§ 06

Deletion

Deleting a trip deletes its days, stops, files, chats and share links, for everyone. Deleting your account deletes every trip you own the same way, removes you from trips shared with you, deletes the rest of Atlas’s data about you, and signs you out. Your hive sign-in itself stays, because it is shared with the other apps on this site. Photos you added to someone else’s trip remain with that trip. There is no soft-delete and no backup. The log of AI calls and the daily allowance counts (§ 02: token counts and timings, never what was asked) stay with your hive sign-in, so deleting your data does not reset the daily limits. Usage telemetry (§ 04) is unlinked from your account by this but not removed — ask for that through the contact below.

§ 07

Your agreement and email choice

When you create an account, Atlas records which version of the terms of use you agreed to and when, and whether you asked for product news and offers by email. That box starts unticked; you can change your answer under Account at any time. Deleting your account turns promotional email off; the record of what you agreed to is kept with your sign-in.

§ 08

Bot check on sign-in

The sign-in, sign-up, password-reset and account forms run Cloudflare Turnstile, a check that the visitor is a person and not a script. It runs in a frame served by Cloudflare, which reads your network address and technical details of your browser to decide, and tells this site only whether the check passed. Cloudflare states that it uses those signals to detect and block bots, not to identify or profile anyone; its Turnstile privacy policy describes them.

§ 09

Contact

Questions go through the feedback button in the app’s header, which emails the maintainer directly.