Privacy Policy for Chaos

1. Introduction

Welcome to Chaos! This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile and desktop application ("App"). Chaos is designed to be your personal assistant, helping you manage your life by capturing, organizing, and reminding you of your notes and tasks (which we call "Objects").

Please read this Privacy Policy carefully. If you do not agree with the terms of this policy, please do not access the App.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Effective Date" of this Privacy Policy.

2. Information We Collect

To provide you with a seamless and intelligent assistant experience, we need to collect and process certain information. The types of information we collect depend on how you use our App.

Information You Provide to Us

• Your Content (Objects): When you "brain dump" into Chaos, we collect the content you provide. This includes text you type, your voice recordings and their transcriptions, images you snap, and files you upload or drag and drop. This content forms your "Objects."
• Account Information: You can start using Chaos immediately with an anonymous account. If you choose to create a full account to sync your data or access additional features, we will collect information such as your name, email address, and password.
• Information from Third-Party Services (with your permission): To enhance your experience, you may choose to connect other services to Chaos. This may include:
  • Calendar Data: We access your calendar to import existing reminders and to understand your schedule for providing context-aware notifications (e.g., reminding you about a task before a relevant meeting).
  • Location Information: With your explicit permission, we may collect your device's location data, including in the background, to provide timely, location-based reminders (e.g., reminding you to bring homework to school as you leave home).

Information We Collect Automatically

• Usage and Device Information: We collect information about how you interact with our App, such as the features you use and the actions you take. We also collect data about your device, including the operating system, hardware model, and a unique device identifier.
• Metadata: When an Object is created or updated, we automatically generate metadata, such as creation and update timestamps, parent-child relationships between Objects, and completion status.

Information Generated by our AI

• Processed Object Data: Our AI models process the content of your Objects to organise them. This includes determining if an input should create one or more Objects, whether to merge with an existing Object, and assigning metadata like priority (priority), due dates (due_date), and categories.
• Embeddings (embedding): To help you find related information quickly, our AI creates a numerical vector representation (an "embedding") of your Objects. This allows the system to perform similarity searches across your content.

3. How We Use Your Information

Our primary goal is to provide you with a powerful and personal assistant. We use your information to:

• Provide and Maintain the Service: To create, update, organise, and manage your Objects, and to sync them across your devices.
• Personalise Your Experience: To use AI to structure your data, understand the context of your reminders, and prioritise what's most important to you. This includes ordering and sizing the tiles on your home screen and customising the theme and personality of your reminders.
• Provide Timely Reminders: To send you push notifications and display widgets on your homescreen or lockscreen at the most relevant moments, based on context like time, your location, your calendar events, or an Object's due date.
• Help You Accomplish Tasks (Agentic Features): For certain Objects, and based on your configured preferences, our AI may offer to help you complete the task. This could range from drafting a reply to an email to researching a topic. We will only take action with your explicit approval, unless you have set a high-risk tolerance for specific, automated tasks.
• Improve Our App: To understand how users interact with Chaos so we can improve the UI/UX, develop new features, and fix bugs.
• Authenticate and Secure Your Account: To manage your account, prevent fraud, and ensure the security of your data.

4. How We Share Your Information

We do not sell your personal data. We only share your information with the following third parties as necessary to provide our service:

• AI Service Providers (OpenAI): The content of your Objects (e.g., text, transcriptions) is sent to OpenAI's models to be processed for organisation, categorisation, and contextual understanding. We only send the data required for these tasks. We are not responsible for the privacy practices of OpenAI, and we encourage you to review their policies.
• Backend and Database Provider (Supabase): All of your data, including your Objects and account information, is stored and managed using Supabase. Supabase provides the database, authentication, and backend functions for the Chaos app.
• For Corporate/Enterprise Users: If you are using a version of Chaos provided by your employer or another organisation, your owner_organisation_idwill be linked to your Objects. The administrator of your organisation may have the ability to access, manage, and control the data associated with your work account.
• Legal Compliance: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, or in urgent circumstances to protect the personal safety of users of the App or the public.

5. Your Data Rights and Choices

You are in control of your personal information.

• Access, Correct, and Delete Your Data: You can view, edit, and delete your Objects directly within the App at any time. You can also delete your entire account, which will permanently remove all associated data from our systems.
• Control Third-Party Integrations: You can manage connections to third-party services like your calendar and location services from within the App's settings. You can grant or revoke access at any time.
• Manage Notifications: You can configure the frequency and type of notifications you receive from Chaos in the App's settings or your device's notification settings.
• Data Portability: You have the right to request a copy of your data in a machine-readable format. Please contact us to make this request.

6. Data Security and Retention

• Storage: Your data is stored securely with our backend provider, Supabase, which employs industry-standard security practices.
• Encryption: Your data is encrypted in transit (between the app and our servers) and at rest (in the database).
• Retention: We retain your information for as long as your account is active. If you delete your account, we will permanently delete your data in accordance with our data retention policies.
• Local Hosting: For advanced users, Chaos is designed with the capability to be run entirely locally. If you choose to self-host the database and backend services, your data will remain on your own systems, and this Privacy Policy will not apply to the data you store locally.

7. Children's Privacy

Chaos is not intended for or directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has provided us with personal information, we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. By using Chaos, you consent to this transfer.