Privacy Policy

1. Information We Collect

a. Information you provide

• Account data (email, username, password, profile information, declared age for moderation).
• Content you post (tasks, notes, posts, Thoughts, comments, votes, photos, etc., including metadata like timestamps).
• Trader data you create (watchlists, price targets, saved searches, and portfolio configurations).
• Payment information (processed by third-party processors like Stripe; we do not store full card details).
• Support communications (messages, feedback, and other correspondence you send to us).

b. Automatically collected information

• Device information (IDFV, OS version, IP address, browser type, desktop application identifiers).
• Usage data and analytics (pages viewed, features used, time spent, interactions like votes/shares).
• Trader usage data (market data queries, options chain views, calculation requests, and feature usage patterns).
• API usage data (endpoints accessed, request frequency, rate limit utilization, API keys used).
• Cookies, similar technologies, and IDFA (for tracking, only with consent).
• Session data (login times, session duration, navigation paths).

c. Information from third parties

• If you log in via Apple, Google, or another provider, we receive basic profile information from them.
• Financial data providers supply market data, options pricing, and related information displayed in Trader. This data is received from third-party sources and is not verified by us for accuracy.
• Analytics partners (e.g., Google Analytics) may receive anonymized data.

We do not collect sensitive data (e.g., health) unless core to a feature (none currently).

2. How We Use Your Information

• To provide and improve the Services (e.g., sync across apps, personalize feeds).
• To enable social features (e.g., display shares/votes, recommend content).
• To display financial market data, options analytics, and derived calculations within Trader for informational purposes only. Use of this data does not constitute investment advice.
• To send notifications, updates, and marketing (with opt-in consent).
• To detect abuse, enforce Terms, and moderate UGC (e.g., AI scanning for spam/hate).
• To monitor API usage, enforce rate limits, and prevent abuse of programmatic access.
• For analytics, research, and AI training (only with explicit opt-in consent for personal data).
• For security and fraud prevention.
• To comply with legal obligations (e.g., retain fraud logs).

Note: We do not guarantee the accuracy, completeness, or timeliness of data or calculations displayed in the Services, particularly market data and derived analytics in Trader. See our Terms of Service for additional disclaimers.

Publicly Shared Content

When you share content publicly (including "Thoughts"), please be aware:

• Public Visibility: Publicly shared content is visible to all users on the Chaos Constellation network. We cannot restrict who on our platform views your public content.
• AI Training and Product Improvement: We use publicly shared content to train and improve our AI models, algorithms, recommendation systems, and product features. By sharing content publicly, you grant us a perpetual, royalty-free license to use this content for these purposes.
• Aggregated Analysis: Public content may be analyzed in aggregate to identify trends, improve our services, and develop new features.
• Searchability: Public content may be indexed and searchable within our platform.

Note: Private content and content not explicitly shared publicly is not used for AI training without your explicit opt-in consent.

3. Third-Party AI Data Processing

Certain Services, including Capture, use third-party artificial intelligence services to process and enrich your content. We obtain your explicit consent before any data is shared with these services.

a. AI Service Provider

We use Google Gemini, operated by Google LLC, to provide AI-powered features in our apps. Google processes your data on its secure servers in accordance with Google's data processing terms and privacy policies.

b. Data Sent for AI Processing

When you use AI-powered features, the following data may be sent to Google Gemini:

• Text content: The text of your Thoughts, notes, and other user-generated content.
• Images: Images you attach to your content, for captioning and description.
• Voice transcripts: Transcribed text from voice recordings you create within the app.

c. AI Processing Activities

Your data is processed by Google Gemini for the following purposes:

• Classification & Categorization: Automatically classifying your Thoughts into types (e.g., idea, task, insight) and categories (e.g., technology, personal, creative).
• Entity Identification: Extracting publicly known entities mentioned in your content (e.g., companies, places, products) and analyzing sentiment.
• Semantic Analysis: Generating embeddings to find similar Thoughts and enable intelligent search.
• Stream Assignment: Automatically organizing your Thoughts into relevant streams (folders) based on content analysis.
• Image Captioning: Generating descriptions of images you attach to your Thoughts.
• Content Generation: Generating AI-powered prompts, summaries, and anonymous post variants when you use these features.

d. Consent & Control

• We request your explicit consent before any data is sent to third-party AI services. This consent is obtained during onboarding or upon your first use after this policy takes effect.
• Your consent and the version of the disclosure you agreed to are recorded for audit purposes.
• Google Gemini provides the same or equal data protection as described in this Privacy Policy and in accordance with Apple's App Store Review Guidelines.

4. Sharing Your Information

We do not sell your personal information. We may share it with:

• Service providers (e.g., hosting like AWS, analytics like Google, payment processors) who provide equal or better data protection as described here and in Apple's Guidelines.
• Related entities (none currently) under the same protections.
• Legal authorities if required by law (e.g., subpoenas).
• In connection with a merger, acquisition, or sale of assets (with notice where possible).

For third-party AI services (including Google Gemini as described in Section 3): We obtain explicit, unbundled consent before sharing personal data, clearly disclosing the AI service, what data is sent, and how it is processed. No sharing without your permission.

5. Tracking and Consent

• We comply with App Tracking Transparency (ATT): If we track you across apps/websites (e.g., for ads), we request explicit permission via Apple's ATT prompt. Without it, IDFA is zeroed out, and no tracking occurs.
• You can revoke tracking consent anytime in settings. We do not manipulate or force consents (per Guideline 5.1.1(iv)).

6. Data Retention and Deletion

• We retain data only as long as needed for the purposes above or legal requirements (e.g., 7 years for financial records; anonymized analytics indefinitely).
• Account Deletion: Initiate via in-app settings (Guideline 5.1.1(v)). We delete all personal data within 30 days (or sooner), including from backups where possible, except legally required retention (e.g., tax logs). Confirmation sent via email. For regulated data, we may anonymize or archive.
• Other requests: Access, correction, or deletion via settings or email (below). EU/CA users: Additional rights (e.g., portability) under GDPR/CCPA—exercise via contact. California residents: See Section 8 for your specific rights under CCPA/CPRA.

7. Your Choices & Rights

• Opt out of marketing, cookies, or non-essential data collection in app settings.
• For children: General Services are not intended for users under 13; we do not knowingly collect personal information from children under 13 without parental consent (COPPA). Trader is restricted to users 18 and older.
• Cross-app syncing: Opt out in settings to limit data sharing across Focus/Resonate/etc.
• California residents: See Section 8 below for your specific rights under CCPA/CPRA.

8. California Residents (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (collectively, "CCPA").

Your Rights

• Right to Know: You may request that we disclose what personal information we have collected, used, disclosed, and sold about you in the preceding 12 months.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt Out of Sale/Sharing: You may opt out of the sale or sharing of your personal information. Note: We do not sell personal information as defined under the CCPA.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use of sensitive personal information to only what is necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

How to Submit a Request

To exercise your rights, contact us at brina@chaosintelligenceinc.com or use the in-app settings where available. We will respond to verifiable consumer requests within 45 days. If we need additional time, we will notify you of the extension (up to an additional 45 days) and the reason for the delay. We may require identity verification before processing your request.

Authorized Agents

California residents may designate an authorized agent to submit requests on their behalf. We may require proof of the agent's authorization and may still verify your identity directly.

9. Other State Privacy Laws

Residents of certain other states have privacy rights similar to those described in Section 8. We are committed to honoring these rights as required by applicable law.

Virginia (VCDPA)

Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data, as well as the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.

Colorado (CPA)

Colorado residents have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and may opt out of targeted advertising, the sale of personal data, or certain profiling activities.

Connecticut (CTDPA)

Connecticut residents have rights to access, correct, delete, and obtain a copy of their personal data, and may opt out of the sale of personal data, targeted advertising, and profiling.

To exercise your rights under any state privacy law, please contact us at brina@chaosintelligenceinc.com. We will respond within the timeframe required by applicable law.

10. Data Security

We use industry-standard measures (e.g., encryption, access controls) to protect your data, but no method is 100% secure. Report issues to us.

10A. API and Programmatic Access

When you use the Chaos API or our desktop applications, we collect additional data to ensure platform integrity and prevent abuse:

• API Keys: We generate and store API keys associated with your account. Keep these secure; compromised keys should be revoked immediately.
• Request Logs: We log API requests including endpoints, timestamps, IP addresses, and response codes for security, debugging, and rate limit enforcement.
• Usage Patterns: We analyze API usage patterns to detect abuse, enforce rate limits, and ensure fair access for all users.
• Desktop Application Data: Our desktop applications may collect usage analytics, crash reports, and diagnostic data to improve performance and stability.

This data is used to protect the platform, enforce our Terms of Service, and may be retained for legal and security purposes even after account termination.

11. International Transfers

Your information may be transferred to and processed in the United States (our servers) and other countries, with safeguards like Standard Contractual Clauses for EU data. By using the Services, you consent to the transfer of your information to the United States and other jurisdictions where we operate.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified in-app or by email. Continued use constitutes acceptance.

13. Contact Us

For privacy questions, data requests, CCPA/state privacy law requests, or abuse reports:

Chaos Constellation LLC

Email: brina@chaosintelligenceinc.com