Aatram (“we,” “our,” or “us”) is a behavioral-psychology platform that helps you face dreaded tasks. We designed Aatram to keep your most sensitive information on your device. That includes what you avoid, why, and how you feel about it. This page explains exactly what data Aatram collects, what we send to our backend, and what we never touch.
The following data never leaves your device and is never seen by us or any third party:
This data is stored locally using Apple’s SwiftData framework and is included in standard iOS device backups (encrypted at rest by iOS).
To enable accountability features (Crew, daily focus totals), we sync the minimum amount of data needed to make those features work:
live_sessions table contains your user ID, the circles you’re sharing presence with, your display name, your current weight tier label, and the session start time. The row is automatically deleted when your session ends or after 90 minutes of staleness. This is what lets crew members see you as “Live” even when your phone is locked.This data is stored in our Supabase backend (PostgreSQL with Row-Level Security policies). It is protected by per-user RLS so other users cannot read your row except where Crew features explicitly require it (e.g., your circle members can see your live presence and signal aggregates). We do not run analytics on it, sell it, or share it with advertisers.
Aatram uses Sign in with Apple and Sign in with Google. We receive only your email address and a stable user identifier from these providers. We do not receive your password or social graph.
Aatram is designed to protect your focus. As of v2.0, we do not send push notifications about your crew’s activity:
You can disable any notifications from iOS Settings or from inside Aatram (Settings → Notifications).
On iOS 26 and newer, Aatram generates personalized nudge copy and weekly insights using Apple Foundation Models, which run entirely on your device. Your task titles and categories are processed by the on-device model — they never leave your phone, never reach our servers, and never reach Apple’s servers.
On older iOS versions, or when on-device AI is unavailable, the app falls back to deterministic pre-written copy. Either way, no task content is transmitted off-device for AI generation.
| Data | Stored at |
|---|---|
| Account (email, name, user ID) | Supabase (encrypted in transit and at rest) |
| Circle memberships, session aggregates, live presence | Supabase |
| Push device token | Supabase + Apple’s APNs |
| Task titles, dread ratings, reflection notes, avoidance patterns | Your device only (SwiftData) |
Supabase is a SOC 2 Type 2 compliant backend service. Your data sits behind row-level security so other users cannot read your records, except where Crew features explicitly require it (your circle members can see your live presence and aggregated session signals).
You can, at any time, from inside the app:
If you’d like to exercise additional rights under GDPR (right to access, right to portability, right to rectification) or similar laws, email us at the address below.
Settings → Delete Account triggers a server-side delete_my_account RPC that removes:
If you were the sole member of a circle, the circle is deleted. If others remain, ownership transfers to the longest-tenured member. The deletion is immediate and irreversible.
Aatram includes the following third-party SDKs:
Aatram is not directed to children under 13 and we do not knowingly collect personal information from children under 13.
We do not track you across other apps or websites. We do not run third-party advertising. We do not use AppTrackingTransparency-tracked identifiers. We do not use IDFA.
If we materially change this policy we will update the “Last updated” date at the top and notify you in-app on next launch.
Questions, deletion requests, or GDPR/CCPA rights inquiries:
Email: aatramapp@gmail.com
We aim to respond within 7 business days.