Atlas ("we", "us", "the app") is a location-based city exploration application operated from Türkiye. This Privacy Policy describes what personal data we collect, how we use it, how we share it, and your rights. By using Atlas, you agree to the practices described here.
Atlas is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe a minor under 13 has provided us personal information, contact us and we will delete it promptly.
Under Turkish law, individuals between the ages of 13 and 18 are considered minors. Atlas assumes that users in this age group use the app with the knowledge and supervision of a parent or legal guardian. Where consent of a parent or legal guardian is required for the processing of personal data under applicable law, such consent must be obtained before the minor uses the app.
| Category | Status |
|---|---|
| Camera, Photo Library, Microphone | Not accessed |
| Contacts / address book | Not accessed |
| HealthKit / fitness data | No integration |
| IDFA / ad tracking | Not collected |
| Private messaging / direct chat | Not offered |
| Category | Purpose |
|---|---|
| Location | Enable core exploration features and activity metrics |
| Account | Profile management and secure authentication |
| Social | Group features, friend connections, shared content |
| Moderation | Review reported content and enforce community rules |
| Technical | Crash reporting and service stability |
Atlas includes user-generated content: usernames, group names and descriptions, polls, trips, goals, and place recommendations. To keep the community safe:
See our Terms of Service for full community guidelines.
We do not sell your personal data. Atlas acts as the data controller, and we engage carefully selected sub-processors under contractual data protection obligations. Data is shared only with:
| Sub-Processor | Purpose | Data Location |
|---|---|---|
| Google Cloud / Firebase | Backend services: account, authentication, content storage, push notifications, anonymized diagnostics | EU region (primary) and Google global infrastructure |
| Apple Inc. | Sign in with Apple authentication only | Apple infrastructure |
| Google LLC (Identity Services) | Sign in with Google authentication only | Google global infrastructure |
We may disclose your data to Turkish authorities or competent courts when required by law, court order, or under Law No. 5651, KVKK provisions, or similar legal obligations.
Because our primary sub-processor (Google / Firebase) operates globally, some of your personal data is transferred outside of Türkiye — primarily to the EU region of Google Cloud, and in limited cases to other Google infrastructure. Google Cloud and Firebase maintain GDPR-compliant data processing agreements and appropriate safeguards.
Under Article 9 of KVKK, the transfer of personal data abroad requires either (a) your explicit consent, or (b) the existence of adequate protection or a written undertaking approved by the Turkish Personal Data Protection Authority. By creating an account and using Atlas, you provide your explicit consent ("açık rıza") to the transfer of your personal data to the sub-processors listed above, including to locations outside of Türkiye, solely for the purposes described in this Privacy Policy. You may withdraw this consent at any time by deleting your account; however, withdrawal prevents continued use of Atlas because the service cannot operate without these sub-processors.
As the data controller based in Türkiye, we process your personal data under the following legal bases, in accordance with the Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR):
Under KVKK (Article 11) and GDPR, you have the right to:
To exercise these rights, email us at [email protected] with "Privacy" in the subject line. We respond within 30 days as required by KVKK.
We retain your personal data only for as long as your account remains active. You may delete your account at any time via Settings > Delete Account.
Crash diagnostics and aggregate usage statistics may be retained after account deletion only in an irreversibly anonymized form that cannot be linked back to you, directly or indirectly. These records do not contain your user ID, email, username, precise location, or any other identifier.
Notwithstanding the above, certain records may be retained after account deletion where Turkish law requires it. In particular, access and traffic logs that qualify as "traffic data" under Law No. 5651 and its implementing regulations may be retained in secure archives for the minimum period required by law (typically one to two years), and disclosed only to authorized Turkish authorities upon lawful request. These archived records are isolated from the active service and are not used for any other purpose.
We use industry-standard security practices, including TLS encryption for data in transit, attestation mechanisms to prevent unauthorized API access, and server-side security rules. No internet-based service is 100% secure, but we take reasonable measures to protect your information.
We may update this Privacy Policy from time to time. Significant changes will be announced in the app. Continued use of Atlas after an update constitutes acceptance of the revised policy.
For privacy-related questions or to exercise your rights, contact [email protected].