No mysterious nonsense

Privacy notice

Last updated 15 September 2026

This notice explains how ThatChaosMama, run by Leonie, handles personal information across this website, the CHAOS app and Chaos Club. For privacy questions or requests, email thatchaosmama@gmail.com.

The short version: your private planning information is not sold or used for advertising. Share only what you are comfortable sharing in Community or live sessions, because other members will be able to see or hear it.

Who the services are for

The CHAOS app, Chaos Club and its Community are for adults aged 18 and over. The website can be browsed without creating an account.

Information we collect

Sensitive information

CHAOS does not require medical records, diagnoses or other special-category information. You may sometimes choose to mention health, neurodiversity or personal circumstances in your own notes or Community posts. Please share the minimum necessary and never upload medical documents. We do not use sensitive information for advertising or profiling.

Why we use it

Depending on the activity, our lawful basis is usually performance of our contract with you, your consent, compliance with a legal obligation, or our legitimate interests in safely operating and improving the service. Where special-category information is involved, we will also need an additional lawful condition and will minimise its use.

Who handles information

We use trusted providers only where needed to operate the service, including Stripe for payments, Supabase for CHAOS accounts and app data, website/app hosting providers, and email or online-session providers. Providers may process information under their own notices and contractual safeguards. We may also disclose information when required by law or when reasonably necessary to protect someone from serious harm.

Community privacy and confidentiality

Community is private to authorised Chaos Club members, but no online group can promise absolute confidentiality. Members must not screenshot, record, copy or share another person’s content outside the Club. Live sessions are not recorded unless everyone has been clearly told and actively agrees beforehand. Reports are handled as discreetly as possible, but details may be shared where necessary to investigate or keep someone safe.

Security and storage

We use access controls and service security features designed to protect information. Private planner records are linked to your account; Community access is restricted to active Club members. No system is completely risk-free, so use a unique password and do not share passwords, addresses, payment details or documents in Community.

How long information is kept

We keep personal information only while needed for the purpose collected and for legitimate support, safety, accounting, tax or legal requirements. Account and planner information is normally retained while your account is active. Community reports may be retained after content is removed where needed for member safety and moderation records. Waitlist details are kept until you unsubscribe, ask for deletion or the list is no longer needed.

Your choices and rights

You may ask for access to your personal information, correction, deletion, restriction, portability or an objection where applicable. You may withdraw consent and unsubscribe from marketing at any time. Email thatchaosmama@gmail.com so we can verify and handle your request. You may also complain to the UK Information Commissioner’s Office.

Safety is not an emergency service

ThatChaosMama, CHAOS and Chaos Club are not medical, mental-health or emergency services. If you or someone else is in immediate danger, call 999. For urgent health advice in the UK, use NHS 111.

Changes

We may update this notice as CHAOS and Chaos Club develop. Material changes will be highlighted in the app, on the website or by email where appropriate.

Optional website analytics

With your permission, we count page views, browser visitors, visits and selected button clicks to understand how the website is used. We store random browser and visit identifiers, the public page path, a broad device category and a source such as Facebook or Google. We do not store your name, email, payment details, full referring URL, query strings or IP address in these analytics records.

Choosing Allow analytics enables optional local storage. Your browser identifier expires after 90 days; visits are grouped after 30 minutes of inactivity. Your preference lasts up to 180 days. Records older than 90 days are removed when new events are processed and are excluded from reports. Analytics are stored with our website hosting and visible only to the approved owner account. You can decline or withdraw using Analytics preferences in the footer. Browser privacy signals are respected. Counts cover participating browsers and are estimates, not an exact number of people. Checkout clicks do not mean completed sales.