ApplyAtlas
Privacy policy
Last updated September 7, 2026
ApplyAtlas helps students organize college applications. This notice explains what information the app uses and the choices available to you. For questions or requests, contact support. You can send a request without signing in.
Information in your account
We store your email address, display name, a password hash, account confirmations, school list, application details, prompts, deadlines, essay drafts and revisions, and to-do items. Optional entries and links are collected only when you add them. We also keep account and security records needed to operate the service and limit abuse.
How information is used
We use this information to sign you in, save and display your work, provide account recovery, organize your schedule, provide support, and protect the service. We do not sell your application information or use your essays for advertising, admissions profiling, or AI training. No AI essay analysis is enabled in this release.
Cookies and device storage
The cookie notice and Cookie settings control explain essential storage. ApplyAtlas does not currently enable optional analytics or advertising cookies. Your acknowledgement is stored on this browser for 180 days and does not opt you into any future tracking. You can reopen Cookie settings from the Cookies button. Clearing browser storage also clears this choice.
A secure sign-in cookie keeps you signed in. Selecting “Remember me for 30 days” keeps your session on that browser for up to 30 days from sign-in, unless you sign out or access is revoked. Without this choice, new sign-ins use a browser-session cookie with a seven-day server limit. Some browsers restore session cookies when reopening, so always sign out on a shared device. Browser storage remembers display preferences and keeps an encrypted draft recovery copy. The app warns you when work has not finished saving. A recovery copy is not a substitute for a completed cloud save; browser storage can be removed by your browser or device settings. Account settings includes recovery and export controls.
Service providers and university sources
Floot provides the app's infrastructure. Its hosting and app logs use Amazon Web Services, and its app databases use Neon in the United States. Email delivery is handled through Floot. See Floot's privacy policy for its infrastructure practices.
University identity search uses the Research Organization Registry. A search may be sent to ROR when online results are needed; essays and account details are not sent with it. Links to universities open separate websites whose own privacy policies apply.
Advertising and payments
For a paid review, we store the selected service, fixed order price, turnaround, payment and order status, the materials you submit, your order consents, and feedback. Authorized support staff and assigned reviewers can access the materials selected for that order to provide the review. Ordering a review does not give access to the rest of your workspace. Remove Social Security numbers, payment information, identification documents, and unnecessary personal information before submitting. Only submit work you have permission to share.
The operator is notified by email with the order reference, service, due date, and an admin link, not the essay text or files. ApplyAtlas coordinates fulfillment and makes the response available in your order. Review materials are not automatically sent to an external provider by the app. If you need information about a particular reviewer or how your materials are handled during fulfillment, contact support before ordering.
No advertising or ad-tracking scripts are loaded in the workspace. Stripe hosts Plus checkout and billing management. Stripe receives your account email and an internal account identifier to connect your subscription, and collects payment information directly. ApplyAtlas stores Stripe customer and subscription identifiers, payment status, paid-access dates, and limited event identifiers. We also retain a limited launch-offer record, including an internal account identifier and subscription dates, so the first-200 offer and continuous-subscription price can be honored. This billing record remains after account deletion and does not contain your name, email address, school list, or essays. We do not receive or store full card numbers. See Stripe's privacy policy.
Keeping and deleting information
Stripe also processes one-time review purchases. It receives the account and order references, service description, and amount needed to take payment, not your essay text or application PDF. We retain payment references, amounts, status, and a limited action history for billing reconciliation and support; this financial record can remain after account deletion without the review materials.
Unpaid review drafts are normally removed after 30 days. Discarding an unpaid order closes it and keeps that original removal date. Open checkouts and paid orders awaiting a response are kept while they are being resolved. Paid review materials and feedback are removed 90 days after completion, cancellation, or a full refund; the order shows the scheduled removal date. Save a copy of feedback you want to keep. Financial or dispute records may be kept separately. Account deletion removes stored review materials with the primary account data; an open checkout or unfinished paid review must first be resolved through support. Copies already downloaded by you or a reviewer cannot be remotely erased.
When you contact support, we keep your message, email address, replies, and attachment names. Support conversations in the app are removed 90 days after their last message. We do not open attachments in the support inbox. Email infrastructure records have the provider's separate retention practices.
Your account data is retained while you use the service. You can export it from account settings. Account deletion first confirms cancellation of any active subscription, then disables access and schedules deletion of primary account data within seven days. If billing cancellation cannot be confirmed, deletion pauses and the app asks you to retry or contact support. Payment records held by Stripe and infrastructure backups and logs have separate retention practices. Contact us if your request needs further assistance.
Plus subscribers can archive schools and individual entries for up to 60 days. The app shows the scheduled deletion date. Deleting a school permanently removes its application, requirements, prompts, essays, draft history, and linked tasks. Deleting an individual entry removes that entry, its draft and history, and tasks still linked to it, without deleting the rest of the school. Tasks moved elsewhere before deletion are kept. Downgrading does not shorten an archive’s 60-day window; restoring requires Plus, but exporting retained work remains free. Free users can permanently delete schools or entries instead of archiving. Deletion cannot be undone. It removes server data; downloaded files and copies on other devices are not remotely erased. On a shared device, finish saving and sign out when you are done.
Age and your choices
You must be at least 13 to register. If your location requires a higher age or parental permission to use an online service, those requirements also apply. Do not register if you cannot meet them. Contact us if you believe a child who is not eligible has provided information.
You can correct your entries, export your information, request account deletion, or contact us about access, correction, objection, or other rights available where you live. We may need to verify account ownership before acting on a request. You may also contact your local data-protection authority.
Updates
We will update this notice when the service changes and identify the revision date above. Material changes affecting account information will be communicated in the app or by email.