Atlas Mind policy
1. Purpose and application
This overview explains how the Atlas Mind website is protected today and how Atlas Mind itself is being built to protect your information. It describes only measures that are in place on the website or built and tested in Atlas Mind, and says plainly what is not yet available.
2. Substantive provisions
2.1. The website today
atlasmind.co.uk is a static website with no sign-in. It does not ask for personal information and does not set cookies. It is served over HTTPS only: requests over plain HTTP are redirected, and browsers are told to keep using HTTPS for this site for a year. Pages are sent with headers that stop other sites from embedding them, stop browsers from guessing file types and limit what the browser passes on to other sites. Our web server keeps its request logs for up to 11 days.
2.2. How Atlas Mind is built
Atlas Mind for macOS, Atlas Mind accounts and the services behind them are not yet available. The points below describe how they are built today. We will confirm them here when they open.
Your Mind stays on your computer. Atlas Mind keeps your Mind in a file on your own Mac. Our servers do not hold a copy, apart from an encrypted backup if you choose to turn backups on.
Your AI providers are called from your computer. Requests to AI providers go directly from your Mac with your own key. They do not pass through our servers.
Backups are encrypted before they leave your computer. Backups are encrypted on your Mac with XChaCha20-Poly1305, using a key protected by your passphrase or recovery code. We do not hold that key and cannot read your backups.
Accounts are protected. Passwords are stored only as Argon2id hashes. You can add a second factor using an authenticator app, a session ends after 24 hours without use, and you can sign out of every session at once.
Messages between your phone and your Mac are encrypted end to end. Our relay passes them on but has no way to read them.
2.3. Reporting a security problem
If you believe you have found a security vulnerability in Atlas Mind or this website, please email [email protected] with enough detail for us to reproduce it. Please do not access, change or delete other people's information while testing, and give us reasonable time to fix the problem before telling anyone else. We will acknowledge your report and keep you informed of progress.
2.4. If something goes wrong
If a security incident puts your personal information at risk, we will tell you and the Information Commissioner's Office where the law requires us to.
2.5. Independent assurance
Atlas Mind has not yet been independently audited, certified or tested by an outside security firm. We will say so here when it has been.
2.6. Your part
When you use Atlas Mind, keep your Mac and Atlas Mind up to date, protect your Mac with a password, and connect only services and AI providers you trust.
3. Customer rights, administration and changes
Nothing in this document is intended to restrict rights that cannot lawfully be excluded, including applicable statutory consumer and data protection rights. Where this document conflicts with mandatory law, the mandatory rule prevails. Complaints, concerns and requests can be sent to [email protected], and security reports to [email protected].
Forlais may revise this policy to reflect changes in the service, third-party requirements or applicable law. Any revision that materially affects customer rights will be communicated in the manner and timeframe required by the applicable agreement and law. The date of the latest revision is shown with this document.