Privacy Policy

1. Who we are

OmniAtlas ("we", "us") operates the learning platform at omniatlas.ai. Contact: info@omniatlas.ai.

2. Data we collect

• Account data — email address, display name, and authentication identifiers (via Amazon Cognito or Google OAuth).
• Learning data — quiz attempts, answers, scores, subject enrolments, and ratings you submit.
• Billing data — Stripe customer and subscription identifiers. We do not store card numbers; all payment data is held by Stripe.
• Usage data — pages visited, subject and question view counts (aggregated).
• Session data — a signed session cookie for authentication, stored in Redis and expiring with your session.

3. How we use your data

• To provide and improve the Service (progress tracking, personalised quiz results).
• To process subscription payments via Stripe.
• To send transactional emails (verification codes, receipts) — no marketing without explicit opt-in.
• To produce product analytics (page views, feature usage, and the events listed below) via PostHog, hosted in the EU, so we can see which parts of the Service are working and improve them. This only runs after you accept the cookie banner.

4. Data sharing

We do not sell your data. We share it only with:

• Stripe — for payment processing.
• Amazon Web Services — hosting, database, email (SES), and storage (S3) — all within the EU (eu-north-1 region).
• Amazon Cognito — authentication.
• PostHog — product analytics, hosted in the EU. We send your account ID (not your email) for logged-in events, page views, and product events such as signing up, submitting a quiz, and starting checkout.

5. Cookies

We use a single signed session cookie (session) required for authentication, and a short-lived guest cookie (oa_guest) for anonymous quiz attempts — both necessary for the Service to function and not subject to consent. With your consent (via the cookie banner), we also set PostHog analytics cookies to recognise repeat visits and page navigation. You can withdraw consent at any time via "Cookie settings" in the footer. We do not use third-party advertising cookies.

6. Data retention

Account and learning data is retained for as long as your account is active. You may request deletion at any time by emailing us; we will delete your personal data within 30 days.

7. Your rights (GDPR)

If you are in the EU/EEA, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact us at info@omniatlas.ai to exercise these rights.

8. Changes

We may update this policy. We will notify registered users of material changes by email.