Last updated: 12 August 2026
This policy explains what information CHAIOS Nexus ("CHAIOS") collects, how it is used, and the choices you have. We aim to collect only what is needed to run the service.
CHAIOS Nexus is free to use, and free to be listed in — businesses are not charged for a directory listing. The app is currently funded by its creator. As it grows, some links to products and services will earn a small commission; where they do they are labelled, and they are never selected using your personal information. We do not sell your personal information, and we do not aggregate it for sale. A listed business can see how many people viewed their own listing and how many enquiries they received — never who you are, never what you use other modules for, and never anything you have entered into the app. Some links to third-party booking or shopping sites may earn us a commission; where they do, they are labelled, and they are never selected based on your personal information. See our Promise for the full commitment.
CHAIOS contains no third-party advertising software — no ad networks, no tracking pixels, no session recording, and no behavioural profiling. Nothing you do here is used to decide what you are shown, here or anywhere else.
We do measure how busy the app is and how fast it responds — page counts and load times, through Vercel, who host it. This is what tells us we have enough capacity at peak times and warns us when something is getting slow, before you feel it. It sets no cookies, does not fingerprint your device, and builds no profile: it records that a page was loaded and how long it took, not who loaded it.
If you arrived from one of our own social posts, the link you followed tells us which post it was, and we record that once against your new account so we know which of them are worth writing. It is a short code such as fb — not a profile, not shared with anyone, and nothing is stored on your device to do it.
Your data is stored in a managed PostgreSQL database (Supabase) and is isolated to your account using row-level security. Passwords are handled and hashed by our authentication provider — we never see your plain-text password. Optional passkeys use your device's secure biometric hardware.
Files such as images can be stored in a local folder you choose on your device, or in your browser's private storage. Any data backups you create are saved to your own device or chosen location — CHAIOS does not store or have access to your backup files. Keeping backups safe is your responsibility.
Travel can give you a private email address. Forward a booking confirmation to it and CHAIOS reads the dates, places and flight numbers out of the message, then shows you what it found so you can accept or discard it. This is the only part of CHAIOS that receives content from outside the app, and it is off unless you turn it on.
What CHAIOS keeps:the details we read out — dates, airports, flight numbers, the hotel name — plus the subject line and the sender's domain so you can tell which booking it was. We do not keep the message itself, its attachments, or the sender's full address.
What we cannot control: the email reaches our email provider, Resend, before CHAIOS sees it. Resend holds a copy on servers in the United States, they do not publish how long for, and they do not offer us a way to remove it — so we cannot tell you it is gone. Everything else in CHAIOS is stored in Australia; this feature is the exception, which is why it has its own section here rather than a line in the list below.
Your controls: the address works only for you and only while it exists. Change it and the old one stops working immediately; turn it off and mail sent to it is ignored. Deleting an import removes everything CHAIOS read from that email.
Uploading a document instead: you can also pick a PDF itinerary from your own device. That file is read by the app on your device — it is never uploaded, never stored and never sent to us, and only the trip details you choose to accept are saved. If you change your mind before creating the trip, nothing is recorded at all.
The Health module can show your step count for the day. You choose where it comes from, and it works without either option — nothing here happens unless you turn it on.
Your phone's own sensor. Android and iPhone both count steps in the handset itself. CHAIOS can read that counter directly, which needs no other app and no health record. This is the option that needs the least from you.
A health store. Alternatively CHAIOS can read from Health Connect (Android) or Apple Health (iPhone). It reads three things — your step count, your active energy, and how many workouts your device recorded — and it reads them only for you. CHAIOS never writes anything back to Health Connect or Apple Health, and asks for no permission that would let it.
While the app is closed. If you switch on the ongoing step notification, CHAIOS keeps reading your steps in the background so the figure stays current — that is the whole point of it. This stops when you turn the notification off, and no other part of the app reads anything in the background.
What is kept: your step total for each day, so the weekly chart has a history, and your height if you choose to enter one — used only to estimate how far you walked. Both are stored with the rest of your account, in Australia. Your activity data is never shared with anyone, never sold, and never used for advertising — there is no advertising in CHAIOS at all.
Your controls: switch the source off in Health at any time, or withdraw permission in Health Connect, or in Settings on an iPhone — CHAIOS stops reading immediately either way. Deleting your account deletes the step history and height along with everything else.
What this is not: CHAIOS records activity figures your device already counted. It is not a medical record, it does not diagnose anything, and it gives no clinical advice. Please do not use it to store medical or clinical records — a purpose-built, regulated service is the right home for those.
We use a small number of third parties to operate CHAIOS: Supabase (database and authentication), Vercel (hosting), Resend (transactional email, and receiving forwarded bookings if you turn that on), Stripe (payments for partner features), and Google Maps (the vendor directory). These providers process data only as needed to deliver their part of the service.
We keep your data for as long as your account is active. When you delete your account, your associated data is removed from our database. Backups you stored yourself are not affected and remain under your control.
For any privacy questions or requests, contact support@chaios.au.
See also our Terms of Service.