Atlas Optimised is a private, invite-only performance coaching service. This policy explains what personal data we collect when you use the Atlas dashboard and connected services, how we use it, where we store it, and the rights you have over it.
1. Who we are
Atlas Optimised is operated by Harry Johnson as the sole data controller and coach. Contact: info@harryjohnsonmsc.com.
This policy applies to the Atlas dashboard at atlas-dashboard-7xz.pages.dev and any custom-domain deployment of the same service.
2. What data we collect
From you directly
- Account and profile: name, email address, date of birth, sex, height, weight, location (country / region).
- Training and goals: training history, primary and secondary goals, availability, injury history, current programme.
- Lifestyle: typical sleep hours, stress and life context, dietary preferences and restrictions.
- Health context: medical history, current supplements and peptides, blood panel history.
- Menstrual cycle tracking where relevant and opted in.
- Subjective inputs: journal entries, pre-session readiness ratings, session notes.
From your use of Atlas
- Training data: sessions logged, exercises, sets, reps, loads, tempo, RPE, rest periods.
- Nutrition data: meal logs, macronutrients, hydration, ingredient detail.
- Supplement adherence: logged takes of prescribed supplements.
- Biomarkers: blood panel values you or your coach upload.
From third-party services (only if you connect them)
- WHOOP: recovery, sleep, strain, heart rate variability, resting heart rate, respiratory rate, skin temperature. Pulled via WHOOP's OAuth.
- Cronometer: food diary entries, macronutrient and micronutrient breakdowns. Pulled via Cronometer's OAuth, only when you connect your account.
3. How we use your data
Your data is used solely to deliver the coaching service you have contracted for. Specifically:
- Generating personalised training, nutrition, supplement, and recovery plans.
- Tracking progress against goals and adjusting programmes.
- Producing AI-generated performance analysis (see section 5).
- Flagging signals that require coach review (illness risk, overreach, out-of-range biomarkers, adherence drops).
- Coach-side roster monitoring across all active clients.
Your data is not used for advertising, sold to third parties, or shared with anyone outside the coaching relationship without your explicit consent.
4. Where your data is stored
- Primary data store: Airtable (operated by Formagrid, Inc., United States). Access restricted to the coach via a personal access token.
- Compute and API layer: Cloudflare Workers (global edge network). Runs the application logic; does not persistently store your data.
- Dashboard hosting: Cloudflare Pages. Static files only; does not store user data.
- OAuth tokens: access and refresh tokens for connected services (WHOOP, Cronometer) are stored encrypted at rest using AES-GCM with a key held only in Cloudflare's secret store.
5. AI analysis
Atlas uses Anthropic's Claude API to generate performance reviews and coaching recommendations. When an analysis is generated:
- Relevant metrics (training, nutrition, recovery, journal entries for the selected window) are sent to the Claude API.
- Identifying details (full name, email, date of birth) are not required by the API for analysis and are minimised in the payload.
- Anthropic does not train on API inputs by default and acts as a data processor subject to their terms.
- Generated analysis is stored alongside your other coaching data.
You can opt out of AI analysis generation by request; this does not affect other parts of the service.
6. Third-party services we rely on
| Service | Purpose | Data shared |
|---|
| Airtable | Primary data storage | All data above |
| Cloudflare | Hosting and compute | Request metadata, auth tokens |
| Anthropic (Claude) | AI analysis | Metrics and context for the analysis window |
| WHOOP | Recovery and sleep data source (if connected) | OAuth token |
| Cronometer | Food log source (if connected) | OAuth token |
| Tally | Onboarding form | Form responses |
| Make (Integromat) | Automation between services | As required by each automation |
| Gmail | Coach notifications | Summary content, client name |
Each service operates under its own privacy terms. Links to their policies are available on request.
7. Retention
- Active clients: all coaching data is retained for the duration of your engagement.
- Deletion on request: on disconnect or written request, personal data is removed from Atlas within 30 days. OAuth tokens are revoked immediately.
- Audit and integrity: minimal coach-side operational logs may be retained for up to 12 months for security and audit purposes.
8. Your rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of any inaccurate data.
- Request deletion of your data (see section 7).
- Revoke any third-party connection (WHOOP, Cronometer) at any time from your dashboard.
- Export your data in a machine-readable format.
- Withdraw consent to AI-generated analysis.
To exercise any of these rights, contact info@harryjohnsonmsc.com.
9. Cookies and tracking
Atlas uses only the cookies and local storage required to keep you authenticated and to remember UI preferences (for example, your last selected date range). We do not use advertising cookies, analytics trackers, or third-party tracking pixels.
10. Security
We take reasonable steps to protect your data:
- HTTPS enforced across all endpoints.
- OAuth tokens encrypted at rest (AES-GCM).
- Access to the primary data store is restricted to the coach via a personal access token with scope limited to the Atlas base.
- Content Security Policy headers restrict connections to approved origins.
No system is absolutely secure. If you believe your account has been compromised, contact us immediately.
11. Children
Atlas Optimised is not directed at children under 16 and does not knowingly collect data from anyone under that age. If you are a minor, do not use the service.
12. International transfers
Some of our service providers (notably Airtable, Cloudflare, Anthropic) are based in the United States. Where data is transferred outside your home jurisdiction, we rely on the contractual commitments and data-processing terms of those providers.
13. Changes to this policy
Material changes will be notified by email to active clients and reflected here with an updated "Last updated" date at the top. Continued use of Atlas after a policy update constitutes acceptance of the revised terms.
14. Contact
For any question about this policy, your data, or your rights: