Privacy

We’re Atlas, a product of Luminexa Studio. This page describes what we collect, how it’s used, and the guarantees we make about your data. We try to write it in plain language. If anything is unclear, email us at privacy@luminexa.tech.

What Atlas collects

• Account info: your email address, display name, and (if you signed up via Google) the avatar Google provides.
• Photos you upload: stored in private S3 buckets in AWS US-East-1. Only your account can access them.
• Photo metadata: EXIF data we read for location, time taken, and camera info. Used to drop pins on your globe.
• Trip details: stops, dates, notes, and attached documents you add to trips you create.
• No face data. Atlas does not scan faces. An earlier opt-in face-grouping feature is retired and its detection pipeline is switched off, so nothing new is ever computed. Any vectors it created stay scoped to the account that created them and are deleted with that account.
• Operational logs: standard request logs (IP, user agent, timestamps) for debugging and abuse prevention. Retained 30 days then deleted.

What Atlas does not collect

• We do not sell or rent your data to anyone.
• We do not use your photos to train any AI model — ours or anyone else’s.
• We do not run third-party advertising or analytics trackers that profile users across the web.
• We do not read your photo content for any reason other than generating thumbnails and reverse-geocoding GPS pins.

Sharing

When you share an album, only the people you explicitly invite can view its photos. We don’t expose your library to search engines or public links unless you create one yourself. Revoking a share takes effect immediately.

Where your data lives

All photos and database rows live in AWS US-East-1 (Northern Virginia). We use AWS RDS for PostgreSQL for metadata, on a private network, and S3 for photo bytes. CloudFront serves photos from edge locations close to viewers.

Your rights

• Your originals: every photo you upload stays downloadable at the resolution you uploaded it. A one-click archive of an entire account, photos plus a JSON file of your trips and notes, is being built; until it ships, ask us and we will produce one for you.
• Delete:delete your account anytime. Photos and metadata are removed within 30 days. Soft-deleted photos go to S3 Glacier first, then expire; we keep that 90-day window so “Recently Deleted” can recover anything you change your mind about.
• Correct: edit your name, email, location guesses, and photo captions at any time.

Cookies

Atlas uses one cookie to keep you signed in (the auth session token). We do not use third-party cookies and we do not run a cookie consent banner because we don’t collect anything that requires one.

Children

Atlas is not intended for children under 13. If you believe a child has created an Atlas account, please email us and we’ll delete it.

Changes

We’ll update this page when we add features or partners. Material changes will be sent to your account email at least 14 days before they take effect.

Contact

Questions, requests, or concerns? Email privacy@luminexa.tech.