Privacy policy

Last updated: October 9, 2026

Overview

Atomus is a local-first application. Your notes, atoms and review history stay on your Mac. We never receive your content. This policy explains the small amount of data we do handle to sell you a license and keep it working.

Who we are

Atomus is developed by Flember Tecnologia LTDA, CNPJ 63.341.405/0001-03 ("we", "us"), the data controller for the data described here. Contact us at support@atomus.app.

Data we process

Purchase and license: your email address, license key, purchase date and update-period end date. Paddle shares your email with us after checkout so we can issue your license. Legal basis: performance of our contract with you.

License activation: when you activate Atomus, and roughly every few days after that, the app sends your email, license key, an anonymous hardware identifier of your Mac and your Mac's name, so we can enforce the device limit and let you manage your Macs. Legal basis: performance of contract.

Update checks: the app downloads a small version file from our download server. No account data is sent with it.

Website analytics: we use PostHog in cookieless mode to count page views and checkout steps. It stores nothing on your device and does not record your sessions. Legal basis: our legitimate interest in understanding how the site is used.

Support: if you email us, we keep the conversation to help you. Legal basis: legitimate interest and performance of contract.

What we never collect

  • Your notes, atoms or vault files
  • Your review history or learning data
  • In-app usage telemetry or crash reports
  • Your payment card details (handled only by Paddle)

Optional features that talk to others

AI features: if you add your own OpenAI or Anthropic API key, the text you send to AI features goes directly from your Mac to that provider under their terms. It never passes through our servers. With Ollama, everything stays on your Mac.

Git sync: if you enable sync, your vault is pushed to the Git remote you choose. We have no access to it.

Service providers

We use these processors to run Atomus. Some are located outside the EU, in which case transfers rely on their Standard Contractual Clauses or equivalent safeguards.

  • Paddle.com – Merchant of Record. Processes payments, taxes and invoices.
  • Vercel – Hosts this website and the license API.
  • Upstash – Stores license records (email, key, activated Macs).
  • Resend – Sends license, renewal and account emails.
  • PostHog – Cookieless, aggregate website analytics.
  • Cloudflare – Serves app downloads and updates, and forwards support email.

Retention

We keep license records for as long as your license exists, so you can reinstall and recover your key at any time. Refunded licenses are kept as revoked for accounting. Account-access links expire after one hour. Paddle keeps transaction records as required by tax law.

Your rights

You can ask us to access, correct, export or delete your data, or object to its processing, by emailing support@atomus.app. Deleting your license record means you can no longer activate Atomus. You can also complain to your local data protection authority.

Your local data

Your vault lives in the folder you choose on your Mac. You own it and can export, back up or delete it at any time. Uninstalling the app does not delete your vault.

Changes to this policy

We may update this policy from time to time. Changes are posted on this page with a new date.