Privacy Policy

Introduction

Atium AI, LLC (“Company,” “We,” or “Us”) respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information We may collect from you or that you may provide when you visit atiumai.com (the “Website”) or use our mobile applications, including WhiskLab (together with the Website, the “Services”), and our practices for collecting, using, maintaining, protecting, and disclosing that information. This policy applies to information We collect on the Services and in email, text, and other electronic messages between you and Us.

This policy does not apply to information collected by Us offline or through any other means, or to information collected by any third party, including through any application or content that may link to or be accessible from the Services. Please read this policy carefully. By accessing or using the Services, you agree to this privacy policy. This policy may change from time to time, and your continued use of the Services after We make changes is deemed to be acceptance of those changes.

Users Under the Age of 18

The Services are intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you are under 18, do not use or provide any information through the Services, register for an account, or provide any information about yourself to Us, including your name, address, telephone number, or email address. If We learn We have collected or received personal information from a user under 18 without verification of parental consent, We will delete that information. If you believe We might have any information from or about a user under 18, please contact Us at support@atiumai.com.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Services, including information by which you may be personally identified, such as name and email address (“personal information”); information about your internet connection and the equipment you use to access the Services; and the content you create or upload while using the Services. We collect this information directly from you when you provide it to Us, and automatically as you navigate through the Services.

Information You Provide to Us

The information We collect directly from you includes:

Information you provide when you register for an account, including your name, email address, and password. Passwords are stored in hashed form and are not visible to Us.
The content you create, upload, or store in the Services, including recipes, meal plans, pantry and inventory records, shopping lists, photographs, receipts, notes, and messages you send to in-application assistants.
Dietary information. Dietary preferences and restrictions, allergies and intolerances, and nutrition goals that you choose to record. We treat this category as sensitive personal information, because dietary restrictions and allergies may indicate, or allow someone to infer, a health condition. We use it only to provide the features you request — filtering recipes, flagging ingredients, and tailoring suggestions. We do not use it for advertising, we do not sell or share it, and we do not disclose it to any party other than the service providers identified below who process it on our behalf in order to deliver those features. Providing this information is optional.
Records and copies of your correspondence, including email addresses, if you contact Us.
Details of transactions you carry out through the Services. Purchases made through the Apple App Store are processed by Apple, and We do not collect or store your financial account or payment card information.

Content that you choose to share with other users through the Services is shared at your own risk. Although We provide controls over who may view shared content, We cannot control the actions of other users with whom you choose to share, and We cannot and do not guarantee that your content will not be viewed by unauthorized persons.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with the Services, We may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to the Services, including traffic data, logs, the pages or screens you view, and the actions you take.
Information about your device and internet connection, including your IP address, device identifier, device model, and operating system.
Crash reports and diagnostic logs.
Metadata contained in files you upload, such as the capture date of a photograph.

We do not collect real-time location information, your contacts, or biometric identifiers. The technologies We use for this automatic data collection may include cookies and similar technologies. You may refuse to accept browser cookies by activating the appropriate setting on your browser; if you do so, some parts of the Website may be inaccessible or not function properly.

Third-Party Information Collection

Some content and functionality in the Services is provided by third parties, including our analytics providers, Google Analytics and PostHog. These third parties may use cookies and similar technologies to collect information about your use of the Services, and they process that information in accordance with their own privacy policies. We do not control these third parties’ tracking technologies or how they may be used.

You may opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, and you may learn more about opting out of interest-based tracking by participating third parties at the Network Advertising Initiative opt-out page. Depending on how these tools are configured, disclosures to analytics providers may constitute “sharing” for purposes of cross-context behavioral advertising under certain United States state privacy laws.

How We Use Your Information

We use information that We collect about you or that you provide to Us, including any personal information:

To present the Services and their contents to you.
To provide the features you request, including storing and organizing your content and synchronizing it across your devices.
To provide you with notices about your account, including subscription renewals and expiration.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and Us, including for billing and collection.
To notify you about changes to the Services or any products or services We offer through them.
To diagnose and correct defects, to detect and prevent fraud and abuse, and to improve the Services.
To recognize you when you return to the Services and to restore your content and settings.
To contact you about a crash report or support request you have submitted to Us.
In any other way We may describe when you provide the information.
For any other purpose with your consent.

Artificial Intelligence Features

Certain features of the Services use machine learning models to interpret the content you provide and generate output, including extracting structured recipes from links or images, itemizing receipts, and responding to requests you express in ordinary language. To provide these features, We transmit the content required for the requested operation to third-party model providers, currently OpenAI and Anthropic, which process it on our behalf under their applicable business terms and their own retention and handling practices.

Output generated by these features may be inaccurate or incomplete, and should not be relied upon where accuracy is material, including in connection with allergies, food safety, nutrition, or health. See our Terms of Use.

Disclosure of Your Information

We may disclose aggregated or de-identified information about our users without restriction. We may disclose personal information that We collect or that you provide as described in this privacy policy:

To our subsidiaries and affiliates, if any, for the purposes described in this privacy policy.
To contractors, service providers, and other third parties We use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which We disclose it to them. As of the date of this policy these are Google Cloud Platform (hosting, storage, and database services), OpenAI and Anthropic (the features described above), and Google Analytics and PostHog (analytics).
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, in which personal information held by Us about our users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by Us when you provide it.
With your consent.

We may also disclose your personal information to comply with any court order, law, or legal process, including responding to a government or regulatory request; to enforce or apply our Terms of Use; or if We believe disclosure is necessary or appropriate to protect the rights, property, or safety of Company, our users, or others.

We do not sell your personal information for monetary consideration, and We do not use the content you provide to serve advertising.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to Us:

Tracking technologies. You may set your browser to refuse all or some cookies, or to alert you when cookies are being set. You may opt out of Google Analytics as described above.
Diagnostics. You may disable the sharing of optional diagnostic information in your device settings.
Promotional communications. You may opt out of receiving promotional email from Us by following the unsubscribe instructions in any message. This opt-out does not apply to transactional messages concerning your account or a purchase.

Accessing, Correcting, and Deleting Your Information

You may review and change your account information by logging into the Services and visiting your account settings. You may delete your account from within the Services, or by contacting Us at support@atiumai.com. When you delete your account, We delete the personal information and content associated with it from our production systems; residual copies are removed from backups in the ordinary course. We may retain server logs, transaction records required for legal or accounting purposes, and information that has been aggregated or de-identified.

We may not accommodate a request to change information if We believe the change would violate any law or legal requirement or cause the information to be incorrect.

Your Rights Under Certain State and International Laws

Depending on where you reside, you may have additional rights with respect to your personal information. California residents have the rights to know, delete, correct, and opt out of the sale or sharing of personal information, and to limit the use of sensitive personal information. Residents of the European Economic Area, the United Kingdom, and Switzerland have the rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with a local supervisory authority. Our legal bases for processing are performance of a contract, our legitimate interests in securing and improving the Services, your consent where We request it, and compliance with a legal obligation.

To exercise any of these rights, contact Us at support@atiumai.com from the email address associated with your account. We will respond within the period required by applicable law, and We will not discriminate against you for exercising a privacy right. You may designate an authorized agent to submit a request on your behalf.

California: Categories of Personal Information

The following table sets out the categories of personal information enumerated in the California Consumer Privacy Act, as amended (“CCPA”), that We have collected in the preceding twelve (12) months, the sources of that information, and the categories of third parties to whom We disclose it for a business purpose. We retain each category for the periods described under “How Long We Retain Your Information” above.

Category	Examples	Source	Disclosed to	Sold or shared?
Identifiers	Name, email address, IP address, device identifier	You; automatic collection	Hosting and analytics providers	No sale. See note below on analytics.
Commercial information	Subscription status and transaction records	You; Apple	Hosting providers	No
Internet or network activity	Screens viewed, actions taken, crash and diagnostic logs	Automatic collection	Analytics providers	No sale. See note below on analytics.
Geolocation data	Coarse location inferred from IP address. We do not collect precise geolocation.	Automatic collection	Analytics providers	No sale. See note below on analytics.
Audio, visual, and similar information	Photographs and receipts you upload	You	Hosting and model providers	No
Inferences	Suggestions and estimates derived from your content	Generated by Us	Hosting and model providers	No
Sensitive personal information	Dietary restrictions, allergies, and intolerances, from which a health condition may be inferred	You	Hosting and model providers	No

We do not collect government identifiers, financial account or payment card numbers, precise geolocation, biometric information, the contents of your mail or messages with third parties, education records, or information about protected classifications such as race, religion, or sexual orientation.

We have not sold personal information in the preceding twelve (12) months, and We do not use sensitive personal information for any purpose other than providing the Services, which means the right to limit its use does not currently give rise to any additional restriction. Depending on how our analytics tools are configured, disclosures to analytics providers may constitute “sharing” for cross-context behavioral advertising under the CCPA. Where that is the case you may opt out using the mechanisms described under “Third-Party Information Collection” above, and We honor the Global Privacy Control (GPC) and other opt-out preference signals transmitted by your browser.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure, including encryption of information in transit and at rest and restricted access to production systems.

The safety and security of your information also depends on you. You are responsible for keeping your password confidential, and We ask you not to share it with anyone. Unfortunately, the transmission of information via the internet and mobile platforms is not completely secure. Although We do our best to protect your personal information, We cannot guarantee the security of information transmitted to the Services, and any transmission is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained in the Services.

How Long We Retain Your Information

We retain personal information for as long as necessary to fulfil the purposes described in this policy, including to provide the Services to you, unless a longer retention period is required or permitted by law. In determining the appropriate retention period, We consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which We process it, whether We can achieve those purposes by other means, and applicable legal, tax, accounting, and reporting requirements.

Account and content. Retained while your account is active, and deleted from production systems when you delete your account.
Diagnostic and server logs. Retained for up to twelve (12) months.
Transaction records. Retained for the period required by applicable tax and accounting law.
Correspondence. Retained for as long as needed to resolve your enquiry and to keep a record of what We told you.

Where We de-identify or aggregate information so that it can no longer reasonably be associated with you, We may retain and use it without restriction, and We will not attempt to re-identify it except as required or permitted by law.

International Transfers

We operate in the United States, and our service providers may process information in the United States and in other countries in which they operate. Those countries may have data protection laws that differ from the laws of your country of residence. Where required by applicable law, We rely on appropriate safeguards for such transfers, including the European Commission’s standard contractual clauses.

Changes to Our Privacy Policy

It is our policy to post any changes We make to this privacy policy on this page, with a notice that the policy has been updated on the Website home page. If We make material changes to how We treat our users’ personal information, We will notify you through a notice within the Services or by email to the address specified in your account. The date this privacy policy was last revised appears at the top of the page. You are responsible for ensuring We have an up-to-date, active, and deliverable email address for you, and for periodically visiting this page to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact Us at support@atiumai.com.