Security and privacy
Where things live
Atlas Creed holds personal things, so the first rule is a plain separation: records live in your own space, files live in a private vault, and the most sensitive items are not stored anywhere.
Three places, three different promises
01Your own space
Module records are kept in a Firestore database under your account. Access rules are ownership-based: only the account owner can read and write. Ownership is the path itself in the database, not a field someone could forge.
02Your browser
Without signing in, the app works on data held in the browser. It is not uploaded to your account automatically; there is a separate, explicit action for that. A read that cannot reach the server shows an error, never an empty screen.
03Your private vault
Documents, scans and photos sit in a folder on your own drive, outside the app. The app keeps only a path reference (and, optionally, a size and a hash), never the bytes. Connecting a folder works in Chrome and Edge, and the app keeps access to the photos folder only.
What is not stored
- Document numbers, such as an ID card or passport.
- The files, scans and receipts themselves: only a path to them.
- Passwords or other sign-in details for outside services.
- The uploaded file of a bill or payslip, and its text: it is read in the browser and discarded, and only the extracted fields remain.
- A payee’s full IBAN: only the last four characters remain.
What leaves the browser, only on your click
A few actions call an outside service. None runs by itself, and each sends as little as possible.
- Exchange rates: only currency codes and dates go to a public source of reference rates, never amounts.
- Reading a shop receipt: on your click, a downscaled photo with its metadata removed, or the extracted text of a PDF, goes to a cloud model that keeps nothing. The lines are saved only after you confirm them.
- Category suggestion: on your click, payee names with personal details removed and the category tree are sent, never amounts, dates or accounts.
- Barcode: only the digits go to a product lookup service, never a photo.
- Crypto prices: only the symbols and the currency, and only on your click.
Honest about the limits
- Access to the app is by invitation for now, with Google sign-in.
- Data is not end-to-end encrypted: it sits in the database under the ownership rules. Whoever controls the account can see it.
- We do not claim any certification or compliance with any standard.
- A full export exists for all records. Erasing everything in one action currently exists for health data only.