Privacy Policy
Last updated 17 August 2026
Chaos is a group chat with an AI in it that helps a group decide things. This policy explains exactly what we collect, why, who else sees it, and how to get rid of it. It covers the Chaos mobile app and joinchaos.ai.
The short version. We store your account, your conversations, and a short list of preferences Chaos infers about you. To answer, we send the relevant part of a conversation to Microsoft Azure OpenAI. We do not sell your data, we do not run ads, and we do not use your conversations to train AI models. You can delete everything at any time.
Who we are
Chaos is built and operated from Bengaluru, India, and we are the data controller for everything described here. For any privacy question, or to exercise any right below, write to hello@joinchaos.ai — we answer within 30 days.
What we collect
| Data | Why | Source |
|---|---|---|
| Name, email address, profile photo (optional) | To create your account and show who said what | You, or your Google/Apple account if you sign in that way |
| Password | To sign you in. Stored only as a salted hash, never in plain text | You, if you do not use Google or Apple |
| Messages, conversation titles, options and votes | They are the product — the group needs to read them | You and the people in your conversations |
| Group memory — shared notes a group keeps, such as a budget ceiling | So Chaos applies the group's constraints to every plan | Typed by members of the group |
| Personal preferences, e.g. "keeps trips to four nights or fewer" | So plans account for you without you repeating yourself | Inferred from your own messages, or typed by you. Visible only to you, and editable and deletable on the Me screen |
| Device push token | To notify you about a conversation while the app is closed | Your device, if you allow notifications |
| Basic technical logs — IP address, timestamps, error traces | To keep the service up and to limit abuse | Automatic |
We do not collect your contacts, your location, your calendar, or anything from other apps. There is no advertising SDK and no third-party analytics in the app.
How AI processing works
When Chaos replies, names a conversation, or answers a question across a group's conversations, we send to Microsoft Azure OpenAI only what that specific answer needs: recent messages in that conversation, the display names of the people in it, that group's shared memory, and — for your own requests — your own preferences.
- Azure OpenAI processes this on our behalf and does not use it to train models.
- One person's private preferences are never sent as something "the group knows", and a group's shared memory is never turned into a fact about you.
- Chaos deliberately does not reply to everything. It answers when it is named, when a question has been going back and forth, or when a thread has run a while without it.
- AI output can be wrong. Treat it as a suggestion, not advice — and please do not rely on it for medical, legal, or financial decisions.
Who else sees your data
We do not sell personal data, and we do not share it for advertising. We use a small number of processors:
| Service | What it handles |
|---|---|
| Microsoft Azure (OpenAI Service) | Generates Chaos's replies from the context described above |
| Google Firebase Authentication | Verifies Google and Apple sign-in. Receives your email address and name from that provider |
| Firebase Cloud Messaging | Delivers push notifications, when enabled |
| Microsoft Azure (hosting) | Runs the server and database |
We may also disclose data where the law requires it, or to protect the rights and safety of our users.
Other people in your conversations
Chaos is a group product. Anyone in a conversation can read everything in it, including your display name and photo. An invite link lets whoever holds it see the conversation's title and the names of its members before they join — it never exposes anything that was said. Treat invite links the way you would treat the conversation itself.
How long we keep it
- Your account and conversations — until you delete them.
- Personal preferences — until you tap Forget on them, or delete your account.
- Sign-in sessions — refresh tokens expire after 30 days, and signing out ends them immediately.
- Technical logs — a short operational window, then discarded.
Deleting your account removes your profile and preferences and ends every session. Messages you sent into a shared conversation stay visible to the other members, shown without your identity attached — otherwise deleting your account would silently tear holes in other people's conversations.
Your choices
- See and correct — your profile and every learned preference are on the Me screen, editable in place.
- Delete — any single preference, or your whole account. See Delete your account.
- Export or object — write to hello@joinchaos.ai and we will respond within 30 days.
- Notifications — turn them off in your device settings at any time.
Depending on where you live you may have additional rights — for example under the GDPR or India's DPDP Act — including access, correction, erasure, and the right to complain to a regulator. The email above is the way to exercise any of them.
Security
Traffic runs over HTTPS. Passwords are stored only as salted hashes. Sign-in tokens are stored hashed and rotate on every refresh, so a stolen one that has already been used is detected and the whole session family is revoked. The database is not reachable from the internet. No system is perfectly secure, but we do not treat that as an excuse.
Children
Chaos is not intended for anyone under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to hello@joinchaos.ai and we will delete it.
Where your data lives
Our servers are hosted in Microsoft Azure. Your data may be processed in other countries where our processors operate. When we transfer data internationally we rely on appropriate safeguards, such as standard contractual clauses.
Changes
If we change this policy we will update the date at the top, and for anything significant we will tell you in the app before it takes effect.
Chaos is in early testing. If something here does not match what you see in the app, that is a bug in one of the two — please tell us at hello@joinchaos.ai.