1. Who we are
Intentional Chaos is operated by Sukara Technology (“we”, “us” or “our”). This policy covers our website and app, including Charts, Mirrors, Coach, learning content and personal experiments.
For privacy questions or requests, email nivaaz@sukara.tech. Our Terms of Service explain the conditions for using the service.
2. Information we collect
- Account information: your email address, account identifier, sign-in information, communication preferences and any profile details you provide. We also record the versions and time of your Terms agreement and Privacy Policy acknowledgment, and your confirmation that you are 18 or over. If you use Google sign-in, we may also receive your Google account identifier, name, email address, email verification status and profile picture.
- Chart information: names, birth dates, birth times, birth places, location coordinates, time zones and calculated chart results that you submit or save. This may include information about another person whose details you are authorised to provide.
- Reflection and Coach content: messages, conversation history, answers, notes, relationship context, feedback, saved insights, generated reports, experiments and observations you choose to submit or save.
- Purchase information: payment and customer identifiers, purchases, subscription status, credit balances, transaction records and billing details provided through our payment provider. Stripe handles payment card details; our app does not store full card numbers.
- Technical and usage information: IP address, browser and device details, pages visited, feature interactions, timestamps, identifiers, error reports and service logs. Our hosting and analytics providers may collect this information when you use the service.
- Support information: messages and attachments you send us, and records needed to respond to your request.
Reflections may reveal sensitive information, such as health, beliefs or personal relationships. Only share what you are comfortable having processed for the feature you use. Avoid including another person’s private information without their permission.
3. How we use information
We use information to create and secure accounts; calculate and save charts; provide personalised reflections and Coach responses; save your work; process payments and credits; deliver account and service messages; respond to support requests; diagnose problems; understand feature use; improve the service; prevent abuse; and meet legal obligations.
Chart features need the relevant birth details to calculate results. You can use features that do not need those details without providing them. If you do not provide information required for a feature, that feature may be unavailable.
If you opt in to product updates, we record your choice and may use your email address to send those updates. You can withdraw that choice by contacting us or using an unsubscribe link included in an update. Account and service messages may still be needed to operate your account.
We do not sell personal information. We do not use your private reflections or Google account data for targeted advertising.
4. Google sign-in
If you choose Google sign-in where it is available, Google shares basic identity information so that we can authenticate you and create or connect your account. We use and store that information for account access, account management and security, and share it with our authentication provider, Supabase, for those purposes.
Google sign-in does not give us access to your Gmail messages, Google Drive files, calendar or contacts. We do not request those permissions for sign-in. We do not send your Google sign-in token to our AI provider.
You can remove the app’s connection in your Google account settings. Removing that connection does not delete your Intentional Chaos account or information already saved with us; request account deletion separately as described below.
Our use of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements where applicable.
5. AI processing and human access
AI features use OpenAI to generate responses and reports. When you use these features, the relevant messages, conversation context, selected reflections and derived chart information may be sent to OpenAI. Information you type into a message is included in that processing, even if it contains personal or sensitive details.
Chart context for Coach is built from derived chart information rather than raw birth inputs. This does not remove personal details you include yourself in a conversation. Generated content and conversation history may be saved in your account.
OpenAI’s API data handling includes provider retention for security and abuse monitoring, and some API features retain application state. Deleting content from our app does not necessarily remove provider records immediately. See OpenAI’s API data controls for details.
Your saved content is not a public profile. Authorised administrators can access Coach conversations and related records to support users, investigate issues, review quality and safety, and operate the service. Do not treat Coach as a confidential professional relationship.
6. Service providers and sharing
We use service providers to operate the app. Depending on the feature and deployment, these include:
- Supabase: account authentication and storage of account, chart and reflection records.
- Vercel: website hosting, request handling and operational logs.
- OpenAI: AI responses and report generation.
- Stripe: checkout, billing, subscriptions and payment records.
- PostHog: product analytics and error diagnostics.
- Google: optional sign-in, place search and time zone lookups. Place searches and location details needed for a lookup may be sent to Google Maps services.
- Email delivery providers: authentication and service emails, including Resend where configured.
We share information needed for these services. Providers handle it under their applicable terms and privacy arrangements. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to applicable privacy obligations and notice.
If you choose to copy, export or share content, the recipient or external service receives what you share and handles it under its own practices.
8. Retention and security
We keep account information and saved content while needed to provide the service, maintain your saved work, resolve disputes, protect the service and meet legal obligations. Different records have different retention needs; this policy does not promise a single deletion period for all data.
After an account deletion, some information may remain in backups until they rotate, in provider systems under their retention rules, or in payment, security and legal records where continued retention is necessary. We limit use of retained records to those purposes.
We use access controls and other technical safeguards to protect information. No internet service or storage system can guarantee absolute security. Protect your email account, devices and sign-in credentials, and contact us if you suspect unauthorised access.
9. International processing
Our providers may store or process information outside your country, including in the United States. Processing locations depend on the provider, its subprocessors and the hosting configuration. Your country’s privacy rules may differ from those in the processing location.
Contact us if you need more information about the providers or locations relevant to your information. Any cross-border handling remains subject to applicable privacy obligations.
10. Access, correction and deletion
You can review available account settings, manage saved content using the controls provided, and request account deletion from Account. Follow the confirmation steps shown there; a pending request is not confirmation that deletion has completed.
You can also email nivaaz@sukara.tech to request access, a copy, correction or deletion of your personal information, or to raise an objection to its use. Additional rights may apply depending on where you live. We may need to verify your identity before acting on a request.
We will respond within a reasonable time and any deadline required by applicable law. If we cannot fulfil a request, we will explain the reason and any available review or complaint options. Account deletion and subscription cancellation are separate steps; manage any active subscription through Account or contact us for help.
11. Children
Intentional Chaos is intended for adults aged 18 and over. We do not knowingly offer accounts to children. If you believe a child has provided personal information, contact us so that we can investigate and take appropriate action.
12. Changes and privacy complaints
We may update this policy as the service or our obligations change. The current version and its date will be available on this page. For material changes, we will provide appropriate notice and obtain consent where required, including before using Google data for a newly disclosed purpose.
Send privacy complaints to nivaaz@sukara.tech with enough detail for us to investigate. If you are not satisfied with our response, you may contact the privacy regulator that applies to you. In Australia, this is the Office of the Australian Information Commissioner, where it has jurisdiction.