Privacy, in plain language.

Who we are

Atlas is a travel-planning and memory product operated through madjourneys.ai. Questions and privacy requests can be sent to privacy@madjourneys.ai.

Information Atlas processes

• Account information: email address, display name, profile image, login provider and session-security records.
• Trip content: destinations, dates, itineraries, notes, travelers, invitations and role choices.
• Sensitive travel content you choose to add: booking references, tickets, contact details, uploaded confirmations and other Vault files.
• Photos and metadata: original image files and embedded metadata such as capture date, camera details and precise GPS coordinates when the original file contains them. Atlas does not invent missing GPS data.
• AI interactions: prompts, trip context needed to answer or propose an update, uploaded sources and the review history for proposed changes.
• Technical and safety data: device/browser information, approximate network information, logs, abuse-prevention signals and security events.

How information is used

We use information to authenticate accounts, organize and display trips, process owner-approved invitations, store files and photos, create maps and timelines, research travel information, operate Atlas AI, monitor trip-related public conditions, protect the service and respond to support or legal requests.

People you invite

Trip owners choose access. Co-travelers can work with the trip and may see operational travel details. Followers receive a read-only itinerary view. Atlas does not send followers confirmation codes, tickets, Vault sources, traveler-wallet records or exact photo GPS metadata. Owners can revoke invitations and member access.

Service providers

Atlas uses specialized providers to operate the service, including Cloudflare for hosting and storage, Supabase for identity, Google or Apple when you choose their sign-in, Resend for transactional email, and OpenAI for AI features. Each provider processes only the information needed for its function under its own security and privacy commitments. Information may be processed outside your province, state or country.

AI and automated changes

Atlas may send relevant trip context and selected source files to an AI provider when you ask it to research, chat or prepare an update. AI output is treated as a proposal: it cannot delete itinerary items, and changes are not applied until an authorized traveler reviews and confirms them. Do not rely on Atlas as an emergency service.

Retention and deletion

Trip information remains until an owner deletes it or the account is deleted, subject to short-lived backups, security records and legal obligations. Expired invitations are retained briefly for fraud prevention and auditing. Account deletion is available from account settings and removes access plus associated personal data; some trip records may need to be transferred or deleted when an account is the sole owner.

Your choices and rights

You can correct trip content, revoke access, download original photos, sign out, or request access, correction, export or deletion of personal information. Depending on where you live, you may have additional rights to object, restrict processing or complain to a privacy regulator. Atlas does not sell personal information or use sensitive travel data for targeted advertising.

Security and children

Atlas uses encrypted connections, private storage, server-side authorization, expiring single-use invitations and access auditing. No online service is risk-free, so protect your email account and report suspicious access. Atlas is not directed to children under 13, and a child should use it only through a parent or guardian where legally permitted.

Changes

We may update this policy as Atlas evolves. Material changes will be shown in the product or sent to the account email before they take effect when required.