Privacy Policy

Antichaos is a personal productivity app: chaos goes in, clarity comes out. Antichaos is operated by Jeremy Doupe, Melbourne, Australia. The data controller is Jeremy Doupe, based in Melbourne, Australia. For privacy questions, data-access requests, and complaints under the Australian Privacy Act or the GDPR, contact privacy@antichaos.app. Privacy requests are acknowledged within seven days and substantively answered within one month (GDPR Art. 12). This page is the canonical statement of Antichaos's data practices. It is written to be readable, not to be legal advice.

Account data. Email address, display name, an optional profile photo you upload, OAuth identifiers if you sign in with Apple or Google, and authentication session tokens. Where your account was created from: the app, or the website and the name of the link you arrived on if it carried one, kept with your account.

Your content. Tasks, decisions, brain dumps, notes, categories, planner entries, and anything else you type or dictate into the app. This is your data; Antichaos stores it to sync it across your devices. Text and links you share into Antichaos from other apps stay on your phone until you send them.

Calendar data. If you connect your calendar in the iPhone app, Antichaos reads the events in the calendars you choose so your week shows what is already booked. Nothing leaves your phone unless you add an event to Antichaos yourself. For each event it reads the title, the start and end, whether it lasts all day, the name of its calendar, the location, the notes, any link, and the names of the people invited and of the organiser, or their email address where your calendar holds no name for them. Events that were cancelled, and events you have declined, are left out. Calendars you add to your iPhone, including a Google account, are read the same way, through the phone; Antichaos has no connection to Google of its own. What it reads is held in your phone's memory and read again each time the app opens: it is never uploaded to Antichaos's database, never sent to its servers or its AI, and never included in error reports or usage events. If you tap Add to Antichaos on one of these events, Antichaos makes an event of its own from its title, day, start and end time, and that event is stored and synced like anything else you add. The other way round, if you tap Add to my calendar on one of your Antichaos events, Antichaos writes that one event, with its title, day and time, into the calendar you pick. It writes it once and never changes or deletes it there afterwards, except to move it to another calendar when you tap Change, and changing or deleting the Antichaos event does not reach it. If that calendar belongs to an account such as iCloud or Google, the account syncs it as it does any event you add yourself. Which calendars you chose, and which of your Antichaos events are linked to which calendar event, are kept on your phone. You can turn calendar access off at any time in iPhone Settings.

Voice data. If you record a capture by voice, the audio is saved on your own device the moment you stop recording, before transcription is attempted, so that a failed transcription does not mean losing what you said. It is sent to OpenAI to be transcribed and is deleted from your device as soon as the text it produced has been saved, which is a moment later than the transcript arriving and is deliberate: deleting the audio first would mean a failure in between lost both. A recording whose transcription failed stays on your device, marked as waiting, so you can try it again; it is deleted when a retry succeeds, when you discard it, and in any case within 7 days, applied the next time the app is opened. Your audio passes through Antichaos's server on its way to OpenAI and is never stored there, never attached to your account, and never included in error reports.

Quick notes. A note you give Siri with "Quick note to Antichaos" goes to Antichaos's server and is sorted like any other capture: by the AI provider listed below when AI features are on, and filed as you said it when they are off. If it cannot be sent at once, it waits on your phone until Antichaos next opens, and is then sent the same way.

Photo data. If you add a photo to a Brain Dump or a Calendar Dump, the image is resized on your device, sent to OpenAI or Amazon Web Services (see section 4) to be read, and dropped the moment the response comes back. If the request fails, the photo is kept in your phone's memory so that trying again does not mean photographing the page a second time; it is cleared as soon as a send succeeds, when you remove it, and when the app closes. Antichaos never writes the image to disk, never uploads it to storage, never attaches it to your account, and never includes it in error reports. Only the text read out of it becomes tasks or calendar entries, and only after you confirm them. Profile photos are separate: those you do choose to store, and they stay until you replace or delete them.

AI conversation data. Messages you send to Thought Partner and the responses returned. These are not stored on Antichaos's servers, see section 7.

AI preferences. Anything you write under Settings, Make AI work for you, is stored against your account and sent with the AI requests that can use it, so the AI can follow it. Brain Dump parsing and Thought Partner are sent all of it; the AI Briefing export is sent only the three fields about what you never want it to do, what another AI should know, and the corrections you have asked it to remember; scheduling and voice transcription are sent none of it. Clear a field to stop it being sent.

Subscription data. Subscription status and entitlement, processed by RevenueCat and Apple. Antichaos never sees your card number.

Problem reports. If you send a report from Settings or from the error screen, Antichaos receives what you wrote, the email address on your account, the screen you were on, and your app version and platform. The error screen also attaches the error's own message. Reports are emailed to support and are not stored in the app's database; none of your tasks, notes, or other content is attached. Reply-to is set to your address so the answer reaches you.

Why you cancelled. If your subscription has lapsed, Antichaos asks one question in Settings: which of five reasons fits, and a line of your own if you want to add one. It is optional, you can dismiss it, and it is asked once. Unlike a problem report this answer IS stored, in a table of its own, with your account, the month, the reason you picked and what you wrote. It is stored because a reason nobody can count is not worth asking for. It is never attached to your tasks or notes, never sent to any AI, and it is deleted with your account.

Device information. Device type, OS version, and IP address at the request layer for security and rate limiting.

Notifications. Reminders in the iPhone app are local notifications: your phone is told in advance when to show them and shows them itself. Nothing is sent from Antichaos for them, which is also why reminders still arrive with the app closed and with no connection. The one alert that comes through Antichaos's server and Apple's push service is for a shared card: when someone shares a card with you, your phone gets one alert saying who shared it and that it is waiting in To sort, never the card's title. For that alone your phone gives Antichaos a device token, which is deleted when you sign out on that phone, when Apple reports it no longer works, and with your account. Turning reminders off in Settings cancels every one already scheduled. The web version does not offer notifications at all: it asks for no permission and creates no push subscription.

Usage data. Antichaos records a fixed list of product events against your account, and no others: an account being created; the onboarding carousel being started, each card in it being seen, and it being ended, along with how it ended, whether Skip took you to its last card, and which option on that card was chosen; a first capture saved; a card being created, edited, completed, deleted or reprioritised, recorded as that one word at most once a day for each, never the card itself; a paywall being shown, dismissed, or used to buy a plan, with the plan, its billing period, the store's product id and whether an introductory price applied; how you answered the question Antichaos asks before AI first runs (yes, not now, or closed without an answer); a confirmation you edited before saving, or discarded; a parse being flagged as low confidence; the crisis support panel being shown; an AI request's feature, model, outcome and cost; an AI request refused for being over the spend allowance; a subscription starting; a trial ending; and the offline queue draining or stalling. These are written to Antichaos's own database and are keyed to your account id, so they are usage data linked to you. There is no analytics SDK in the app, no advertising SDK, no third-party analytics vendor, and nothing that records what you tap or replays your screen. Every value in an event is a number, a flag, or one word from a fixed list, so a task title, a capture, a category you named, or anything you said to Thought Partner cannot appear in one. Raw events are deleted after 90 days, and all of them are deleted with your account.

Crash data. When something breaks, the app sends a diagnostic report to Sentry, an error-tracking service in the United States. The report carries your account id, so crash data is linked to you as well, together with the fault itself, the screen you were on, the requests the app had made with their query strings stripped, and your app version and platform. What is deliberately not in it: no session replay, no recording of your screen, no record of the text of what you tapped, no console output, and no request bodies. Error text that could be something you wrote is replaced by a character count before the report leaves your device. Reports are used only to diagnose faults, are never used for marketing or profiling, and age out on Sentry's retention schedule.

Contract necessity (GDPR Art. 6(1)(b); APP 3): accounts, sync, and the core product. Consent (Art. 6(1)(a)): voice recording, AI features, notifications, and calendar access: using or enabling them is the consent action, and all are optional. Legitimate interests (Art. 6(1)(f)): security logs, rate limiting, error diagnostics, crash reports, and first-party usage analytics kept to the minimum needed to see whether the product works. Legal obligation (Art. 6(1)(c)): tax and compelled disclosure.

Antichaos does not sell personal data, does not share data with advertisers or data brokers, and does not build advertising profiles. Sub-processors:

• OpenAI (United States): transcribes voice recordings, and may run the models behind Brain Dump parsing, scheduling, export and Thought Partner, including reading photos. See section 7.
• Amazon Web Services (United States): may run Anthropic's Claude models behind those same features instead of OpenAI. It never receives voice recordings.
• Supabase (Australia): authentication, transactional sign-in emails, and the primary database for account data and your content.
• Replit (United States): application hosting.
• Resend (United States): sends the transactional email this app produces, which is trial reminders and the problem reports you send from inside the app.
• Sentry (United States): crash and error reports, carrying your account id and the diagnostic detail described in section 2. No analytics, no session replay.
• RevenueCat (United States): subscription entitlement management (mobile app).
• Apple (United States): payment processing for subscriptions, and sign-in if you use Apple sign-in.
• Google (varies): sign-in if you use Google sign-in.

Sharing cards with other people. When you share a card, the person sees its title, due date, importance, urgency and how many steps it has straight away, before they decide whether to keep it. A shared card arrives in your default category. You can stop sharing at any time, but you cannot know whether they have already looked. If they keep it, a copy is written into their account: the title, the notes, the steps, the due date, the importance and urgency you set, and whether you had marked it done. Your reminders, your waiting-on and your ideas on that card do not travel. Clear, Dread and Blocked stay yours and are never shown to them, but marking a card done does cross, both ways. From then on, edits to the title, notes and steps travel in both directions, as does completing it; the due date and importance you each hold are your own. Connecting also shows that person your display name, on the card and in their list of people. If either of you stops sharing or removes the connection, you each keep the copy you already have: stopping does not reach into their account and delete anything. If they use Antichaos's AI features on a shared card, its text goes to Antichaos's server and from there to the AI provider listed above, under their settings rather than yours. Nobody can connect to you without a code you have given them, which expires and is for one person.

Apart from Supabase (Australia) and Google (varies), the sub-processors above process data in the United States. Safeguards: EU-US Data Privacy Framework where the recipient is certified, Standard Contractual Clauses as backstop, and APP 8 reasonable-steps for Australian transfers. Copies of safeguards available via privacy@antichaos.app.

Account data: until you delete your account; deletion completes within 30 days except where law requires retention (e.g. tax records, seven years). Your content: until you delete it or your account. Voice audio: passed through Antichaos's server to OpenAI and never stored there; held on your own device only until the text it produced has been saved, and a recording still waiting to be retried is deleted after 7 days, applied the next time the app is opened. AI conversation history: not stored on Antichaos's servers; Thought Partner conversations are kept only on your device, for up to an hour after you close it, so you can pick up where you left off. Calendar data: held in your phone's memory only while the app is open, and read again from your calendar each time; your choice of calendars stays on your phone until you delete your account, or until another account signs in on it. Usage events: 90 days, and deleted with your account. Why you cancelled: kept until you delete your account, and deleted with it. Crash reports: held by Sentry on its retention schedule and used only to diagnose faults. Security logs: up to 30 days routine, 12 months for incident records. Nothing is retained "just in case."

What Antichaos sends to its AI providers (section 4): only what is needed to produce the result: the text, audio or photos you submit, relevant conversation history for Thought Partner, and the minimum task context (for example, your existing tasks when planning). Antichaos does not send your email address, display name or sign-in details. It does send your AI preferences from Settings if you have filled them in.

Consent is the action: nothing is sent to OpenAI or Amazon Web Services until you use an AI feature. The app's non-AI features work without it.

Training: under OpenAI's API terms and Amazon Bedrock's terms, what Antichaos sends is not used to train AI models.

AI outputs are suggestions, not decisions. Antichaos proposes tasks and plans; you confirm them. (This also serves as the APP 1.7 automated-decision-making disclosure commencing 10 Dec 2026.)

Access, rectification, erasure, portability, restriction, objection, and consent withdrawal, in GDPR terms, applied as a global floor for all users (APP equivalents apply for Australians). Account deletion is available in-app under Settings and removes your content, uploaded files, and account. You can export your data from the in-app Export screen. The Raw export row produces one time range at a time and starts on the past 7 days, so a full copy is two exports, not one: set it to All open items and tap Generate, then set it to All done items and tap Generate again. On the web, the .md button saves each as a markdown file. In the iPhone app there is no .md button, because a downloaded file lands somewhere you cannot reliably reach on a phone; use Share instead, which carries the same text out. Two things are in neither export: your calendar entries, and anything still unsorted in the Brain Dump queue. For other formats, request via email until additional formats ship. Complaints: OAIC (oaic.gov.au) for Australians, your national supervisory authority in the EU/EEA, ICO (ico.org.uk) in the UK, but email privacy@antichaos.app first and we'll fix it directly.

Antichaos operates under the Australian Notifiable Data Breaches scheme and GDPR Arts. 33–34: 72-hour internal escalation target from detection, user notification as soon as practicable once serious-harm grounds are formed. Report suspected breaches: privacy@antichaos.app, subject "Data breach".

Antichaos is intended for adults and is not directed at children. Do not use Antichaos if you are under 18.

Encryption in transit (HTTPS), encryption at rest for the primary database, OAuth and email authentication with no plaintext password storage, per-user rate limits on all AI endpoints, and the 72-hour breach escalation above. Vulnerability disclosures: privacy@antichaos.app, subject "Security disclosure".

Material changes get in-product notice and a new "Last updated" date. Governed by the laws of Victoria, Australia, without contesting your right to complain to your local regulator.