What this policy covers — and its relationship to HIPAA.This policy explains what the Atlas ARC member app collects, how we use it, and how we protect it.
Protected health information (PHI) created in the course of your clinical care at Northern Illinois Recovery Center (or another Atlas anchor) is also governed by that provider's
HIPAA Notice of Privacy Practices, which controls where it applies. This policy does not replace the HIPAA Notice.
1. Information we collect
Account & profile
- Your email address and name, and a password (stored only as a secure one-way hash)
- Emergency contact name and phone number, if you choose to add them
Information you create in the app
- Daily check-ins, including how you're feeling and self-reported responses (which may include a safety indicator)
- Journal entries and reflections you write
- Goals, onboarding answers, and preferences you set for each program area
- Community posts you choose to share, and recovery milestones (e.g., a sobriety date) if you enter them
- Messages you exchange with your care team
Health information shown to you
- Lab results and clinical information your care team makes available to you in the app
Membership & billing
- If you have a paid membership, billing details processed through our payment processor (your name, email, and card information entered securely). We store only limited billing metadata (such as the last four digits of a card and invoice records) — never your full card number.
Automatically
- Basic security and session data (timestamps, session identifiers) needed to keep your account secure. The app does not use third-party advertising or behavioral-tracking cookies.
2. How we use it
- To operate the app and deliver your program — your daily practice, check-ins, care-team messaging, labs, community, and membership features
- To authenticate you and keep your account secure (including one-time email verification codes)
- To coordinate your care with your Atlas care team
- To process membership payments, where applicable
- To comply with our legal and regulatory obligations
3. What we do not do
- We do not sell your personal information.
- We do not share your information with advertisers or data brokers.
- We do not use behavioral-advertising trackers.
4. How your information is stored and protected
The app and its database are hosted on Fly.io in the United States (Chicago region) under a signed business-associate agreement. We use administrative and technical safeguards including encryption in transit (TLS), authenticated sessions, one-time email verification, and role-based access controls so that your information is only accessible to you and your authorized care team. No system is completely secure; if a breach affecting your information occurs, we will notify you as required by law.
5. Service providers we share information with
We share information only with the vendors that help us run the app, each under contract to protect it:
- GoHighLevel (LeadConnector) — our communications, contact-management, and workflow-automation platform, and a central part of how we stay in touch with you. Your contact details (name, email, and phone number) and related activity — such as tags marking where you are in a process (e.g., "invited," "activated") — are shared with GoHighLevel, which uses them to send you email and text-message communications and to run automated workflows on our behalf: delivering your invitation to the app, appointment and program reminders, confirmations, and follow-ups. GoHighLevel processes this under contract for us and does not use it for its own purposes. See our SMS Terms & Conditions.
- Google Cloud (Vertex AI) — powers an optional in-app AI helper. Only the text you type into that helper is sent for a response; your name, email, and health records are not attached. This runs on Google's BAA-covered Vertex platform.
- Resend — sends transactional email and your login verification codes; receives your email address.
- Stripe — processes membership payments; receives your name, email, and the card details you enter securely. Stripe holds your card data; we store only limited metadata.
- When required by law — valid subpoena or court order, or to protect against imminent harm.
6. Text messaging (SMS)
If you provide a mobile phone number and opt in, we may send you text messages (for example invitations, reminders, and account notifications) through our messaging provider, GoHighLevel. Message frequency varies and message/data rates may apply. We do not sell or share your mobile number or SMS opt-in information with third parties or affiliates for their marketing purposes. You can opt out anytime by replying STOP and get help by replying HELP. Full details are in our SMS Terms & Conditions.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who provide support services, such as customer service, is permitted. All other use-case categories exclude text-messaging originator opt-in data and consent; this information will not be shared with any third parties.
7. Your choices and rights
You can view and update your profile in the app, and you may request access to, correction of, or deletion of the personal information we hold about you by contacting us at atlaswellnesssupport@gmail.com. Depending on where you live, you may have additional rights (for example, under the CCPA/CPRA in California).
8. Data retention
We retain your account and the information you create for as long as your account is active, and afterward only as long as needed for legitimate business, legal, or clinical-recordkeeping obligations, then delete or de-identify it. Clinical records held by your provider are retained per that provider's medical-records policy and applicable law.
9. Children
The app is intended for adults. Care for minors at any Atlas anchor is handled through that provider's clinical consent process, not through this app.
10. Changes to this policy
We may update this policy; material changes will be posted here and dated above.
11. Contact
Atlas Wellness Holdings, LLC / Northern Illinois Recovery Center
Privacy inquiries & SMS support: atlaswellnesssupport@gmail.com · (815) 261-3450