Privacy Policy
Last updated: July 19, 2026
Overview
Atomic comes in two shapes. Self-hosted Atomic (the desktop app, your own server, and the clients that connect to it) runs entirely on hardware you control — we never see your data. Atomic Cloud is our hosted service, where we store your knowledge base on your behalf. This policy covers both, separately, because they are genuinely different.
Self-Hosted & Desktop
When you run Atomic yourself, we do not collect, transmit, or store any of your data. Your notes, tags, and settings live on your own machine or server, and the apps communicate exclusively with the server address you configure. There are no analytics, crash reporting, advertising, or tracking frameworks in any Atomic client. The iOS app stores your server URL and API token on-device, keeps a local cache for offline access, and requests camera access solely to scan QR codes during setup — that data never reaches us.
Atomic Cloud — What We Store
When you create an Atomic Cloud account we store your email address (used for magic-link sign-in and service emails), your chosen subdomain, and the content you put into your knowledge base: notes, files, tags, and the derived data that powers Atomic's features (embeddings, generated wiki articles, chat history). Content is stored on encrypted volumes, in an isolated database per account, and backed up nightly; backups are retained for 30 days on encrypted object storage.
Atomic Cloud — Service Providers
We use a small set of processors to operate the service, each receiving only what its job requires: DigitalOcean (infrastructure hosting), OpenRouter (AI processing — your content is sent to produce the embeddings, tags, summaries, and chat responses you request, routed to the model providers behind your selected models, e.g. Anthropic or OpenAI; our account settings exclude providers that train on API inputs). If you bring your own API key instead, your content goes to your chosen provider under your own agreement with them, Stripe (payments — we never see or store your card details), Mailgun (transactional email, e.g. magic links and billing notices), and Cloudflare (this website and backup storage). We do not sell your data, share it with advertisers, or use it for any purpose other than providing the service.
Atomic Cloud — Your Control
You can export your data or migrate your entire knowledge base to a self-hosted server at any time. Deleting your account permanently removes your content from the service immediately; a final backup is retained for 30 days (so we can recover you from an accidental or malicious deletion) and then ages out with the rest. Your subdomain is reserved for 90 days after deletion so a newcomer can't immediately impersonate your old address. Your data is never deleted for non-payment.
Analytics & Tracking
Neither the Atomic apps nor this website include third-party analytics, advertising, or tracking frameworks. Atomic Cloud keeps ordinary server logs (for security and reliability) that are size-capped and rotate automatically. Signing in sets a single session cookie, used only to keep you signed in — there are no third-party or advertising cookies, so no cookie banner is needed or shown.
Where Your Data Lives
Atomic Cloud is hosted in the United States (New York). If you use the service from elsewhere — including the EEA, UK, or Australia — your content is transferred to and processed in the US as described in this policy. Our processors publish their own compliance and transfer commitments (DigitalOcean, Stripe, Cloudflare, Mailgun, and OpenRouter each maintain GDPR programs).
Your Rights
Wherever you live, we extend the same rights to everyone: you can access and export everything we hold for you (the export and migration tools produce a complete copy), correct it (it's your knowledge base — edit anything), delete it (account deletion is self-serve and complete, as described above), and take it elsewhere (exports are in open formats; migration to self-hosted Atomic is a first-class feature). For anything you can't do from the dashboard, contact us and we'll handle it promptly.
The Demo Instance
demo.atomicapp.ai is a public, read-only showcase populated with published research papers. It has no user accounts, sets no cookies, and accepts no user content. Standard rate-limiting logs apply.
Children
Atomic Cloud is not directed at children and is not intended for anyone under 13 (or the age of digital consent where you live).
Security Incidents
If we ever discover a breach affecting your data, we will notify you by email promptly and describe what happened, what was affected, and what we're doing about it.
Contact
For privacy questions or requests, email privacy@atomicapp.ai. You can also open an issue on GitHub or ask in the community Discord for anything non-sensitive.