Atlas EP — Privacy Policy

Effective Date: April 11, 2026

Atlas EP ("the App") is published by Atlas Glinn, LLC ("Atlas Glinn," "we," "us," "our"). This Privacy Policy explains what data the App collects, why we collect it, how we use and protect it, and the choices you have.

By installing or using Atlas EP you agree to this Privacy Policy. If you do not agree, do not install or use the App.

1. Who This App Is For

Atlas EP is a professional Executive Protection (EP) platform used by:

• Licensed personal protection officers and security agents
• Corporate security and enterprise protective details
• Dignitary protection teams and government protective operations
• Protectees ("principals") consenting to biometric relay during active details

The App is not intended for general consumer use. It is built for active security operations.

2. What Data We Collect

Atlas EP collects the following categories of data only for the operation of the App. We do not sell any data. We do not use any data for advertising or cross-app tracking.

2.1 Location Data

• Precise GPS location of the user's device, collected continuously while the App is active or in background "field mode"
• Used for: Blue Force Tracker (BFT) team positioning, advance work mapping, emergency response routing, geo-fencing of incidents, and motorcade tracking
• Sharing: Shared with other members of the same ATLAS EP team over an encrypted mesh or private server relay. Not shared outside your team.

2.2 Health and Biometric Data (HealthKit)

• Heart rate, heart rate variability (HRV), blood oxygen (SpO₂), motion, and sleep summary
• Sources: Apple Watch, connected Garmin HRM devices, and HealthKit
• Used for: Duress detection, fatigue monitoring, principal biometric relay (when the user is the protectee), and emergency medical handoff
• Sharing: Only shared within your team, and only if you (or the protectee) explicitly enable the relay. Never shared with advertisers or analytics providers.

2.3 Audio Data

• Microphone audio captured during push-to-talk (PTT) radio transmissions and covert emergency recording
• Used for: Encrypted PTT communications and evidentiary emergency capture
• Storage: Stored locally on device and optionally uploaded to your team's private server. Recording can be controlled or disabled in Settings.

2.4 Camera and Photo Library

• Camera feed used for counter-surveillance room sweep (infrared/visible-light hidden-camera detection), advance-work site photos, and client profile photos
• Photo library read access used to attach existing photos to advance packages
• Photo library write access used to save emergency captures and incident documentation
• Sharing: Photos stay on your device unless you explicitly export or share them. Never uploaded automatically.

2.5 Motion Data

• Device accelerometer and motion used for crash detection, duress-panic detection, and activity state (still / walking / running)
• Used for: Triggering emergency chains when a fall or impact is detected, and classifying agent activity status

2.6 Bluetooth Data

• Surrounding Bluetooth devices are scanned during room sweep for suspicious or unknown peripherals (hidden-cam detection)
• Team mesh uses Bluetooth for peer-to-peer communication when a cellular or WiFi network is unavailable
• No raw Bluetooth scan data is transmitted off-device. Only flagged threat summaries are logged.

2.7 Account and Profile

• Name, email address, role, callsign, badge number, organization
• Used for: Account creation, team roster, authentication
• Storage: Stored locally on device and on your organization's private server.

2.8 Client Data (Protectees, Advance Packages)

• Client profiles, medical info, emergency contacts, mission details, advance-work venue data
• Storage: Stored locally on your device and on your organization's private server. Encrypted at rest using CryptoKit AES-256-GCM.
• Sharing: Shared only with your team members on the same mission.

2.9 Device Identifiers

• Internal UUID used to route messages to your device within your team
• Does not include advertising identifiers (IDFA). We do not use advertising identifiers.

2.10 Crash and Diagnostic Data

• Anonymized crash reports collected by Apple and optionally forwarded to us for debugging
• No personally identifiable information is included

3. How We Use Your Data

We use the data above only to:

• Run the core features of the App (BFT, threat scoring, PTT, sweep, DAR, etc.)
• Deliver real-time information to your authorized team members
• Detect emergencies and trigger escalation chains
• Provide historical records (DARs, incident reports) to you and your organization
• Improve the App's stability through anonymized crash reports

We do not use any of your data for:

• Advertising
• Cross-app tracking
• Behavioral profiling
• Sale to third parties
• Training public machine-learning models

4. HealthKit — Specific Notice

Atlas EP integrates with Apple HealthKit. In compliance with Apple's App Store Review Guidelines and HealthKit terms:

• Data gathered through HealthKit is used only for health, fitness, and emergency-safety purposes
• Atlas EP does not write HealthKit data to any third-party advertising or data-broker service
• Atlas EP does not use HealthKit data to target advertising to you
• Atlas EP does not sell HealthKit data
• You can revoke HealthKit permissions at any time in iOS Settings → Privacy & Security → Health → Atlas EP

5. Third-Party Services

Atlas EP uses the following third-party services strictly for App functionality:

Each third-party service has its own privacy policy. We do not share HealthKit, Location, Camera, or Audio data with third parties beyond what is strictly required to operate the App.

6. Data Storage and Retention

• On-device storage: All user data is stored in the iOS sandbox, encrypted by iOS Data Protection.
• Server storage: Your organization's private Atlas Glinn server stores encrypted team and mission data. Access is restricted to your team's authenticated members.
• Retention: Incident records and DARs are retained for the life of the active mission or until explicitly deleted by the user or their team administrator.
• Deletion on account removal: When you sign out or delete your account, locally cached data is removed from the device. Server-side data is purged per your organization's retention policy (default 90 days).

7. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Withdraw consent to specific features (HealthKit, Location, etc.) via iOS Settings
• Port your data to another format where technically feasible
• Object to processing

To exercise any of these rights, email privacy@atlasglinn.com.

If you are a resident of California, the EU, the UK, or any other jurisdiction with specific data-protection laws, you have additional rights under your local law and we will honor them.

8. Children's Privacy

Atlas EP is not directed at anyone under 17. We do not knowingly collect data from anyone under 17. If we discover we have inadvertently collected data from a minor, we will delete it.

9. Security

We protect your data using:

• AES-256-GCM encryption at rest (CryptoKit)
• TLS for all standard API traffic
• Biometric and PIN device authentication
• Private team channels with no public federation by default
• Keychain for sensitive credentials
• Regular security reviews

No security system is perfect. If we learn of a security breach affecting your data we will notify affected users as required by law.

10. International Transfers

Atlas Glinn is based in the United States. If you use Atlas EP from outside the United States, your data will be transferred to and stored on U.S.-based servers operated by Atlas Glinn and its subprocessors. By using the App you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Effective date" at the top
• Material changes will be notified in-app on next launch

Continued use after a change constitutes acceptance of the updated policy.

12. Contact

For questions, concerns, or requests regarding this policy:

This document is written in plain English and is intended to be a complete, accurate disclosure of our data practices. If anything is unclear please contact us.

© 2026 Atlas Glinn, LLC. All rights reserved.