Privacy Policy
Last updated: 10 August 2026
1. Who we are
OmniAtlas ("we", "us") operates the learning platform at omniatlas.ai. Contact: info@omniatlas.ai.
2. Data we collect
- Account data — email address, display name, and authentication identifiers (via Amazon Cognito or Google OAuth).
- Learning data — quiz attempts, answers, scores, subject enrolments, and ratings you submit.
- Billing data — Stripe customer and subscription identifiers. We do not store card numbers; all payment data is held by Stripe.
- Usage data — pages visited, subject and question view counts (aggregated).
- Session data — a signed session cookie for authentication, stored in Redis and expiring with your session.
3. How we use your data
- To provide and improve the Service (progress tracking, personalised quiz results).
- To process subscription payments via Stripe.
- To send transactional emails (verification codes, receipts) — no marketing without explicit opt-in.
- To produce aggregated, anonymised analytics (popular subjects, quiz completion rates).
4. Data sharing
We do not sell your data. We share it only with:
- Stripe — for payment processing.
- Amazon Web Services — hosting, database, email (SES), and storage (S3) — all within the EU (eu-north-1 region).
- Amazon Cognito — authentication.
5. Cookies
We use a single signed session cookie (session) required for authentication, and a short-lived guest cookie (oa_guest) for anonymous quiz attempts. We do not use third-party advertising cookies.
6. Data retention
Account and learning data is retained for as long as your account is active. You may request deletion at any time by emailing us; we will delete your personal data within 30 days.
7. Your rights (GDPR)
If you are in the EU/EEA, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing. Contact us at info@omniatlas.ai to exercise these rights.
8. Changes
We may update this policy. We will notify registered users of material changes by email.