Privacy Policy

Last updated: July 1, 2026

The protection of your personal data is important to us. In this Privacy Policy we explain which personal data we process in connection with the website chaosflat.com and the Chaosflat app, for what purposes we do so, and what rights you have.

Chaosflat is an app for organizing households, shared flats, and everyday shared tasks. Through Chaosflat, users can, among other things, create or join households, manage tasks, keep shopping lists, and document shared expenses.

1. Data Controller

The party responsible for data processing is:

Nicolas Müller Lorystrasse 14 3008 Bern, Switzerland Email: nicolas@heex.ch

If you have any questions about data protection, you can contact us at any time using the email address above.

2. Applicable Law

We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation of the European Union (GDPR), to the extent it applies, as well as the Swiss Federal Act on Data Protection (FADP).

3. What Data We Process

Depending on how you use our website or app, we may process the following categories of personal data:

3.1 Data When Visiting the Website

When you visit our website, technical data may be processed automatically, in particular:

IP address
date and time of access
pages accessed
browser type and version
operating system
referrer URL
device information
technical server log data

This data is needed to provide the website securely and reliably.

3.2 Data When Using the App

When you use Chaosflat, in particular the following data may be processed:

name or display name
email address
login and account data
household or flat-share membership
invitations to households
tasks, completion status, and assignments
shopping lists and list entries
shared expenses, amounts, participants, and settlement information
settings and app preferences
technical usage and device data
information about active or past subscriptions, purchases, or premium features

Please note: content you enter in the app may be visible to other members of your household, to the extent this is intended for the app's functionality.

3.3 Data When Signing Up for the Waitlist

If you sign up for the waitlist or launch notifications, we process in particular:

email address
date and time of sign-up
technical information related to the sign-up, where applicable

We use this data to inform you about the launch of Chaosflat or relevant product information.

3.4 Support and Contact Requests

When you contact us, we process the data you provide, in particular:

name
email address
content of your message
technical information, where necessary to process your request

3.5 Payment, Purchase, and Subscription Data

If you use paid features, in-app purchases, or subscriptions, payments are processed via the respective platform providers, in particular the Apple App Store or Google Play Store.

We ourselves do not receive or store complete payment data such as credit card numbers, bank details, or full payment information. These are processed directly by Apple, Google, or other payment providers.

We may use RevenueCat to manage purchases and subscriptions. In doing so, in particular the following data may be processed:

app user ID or internal user identifier
purchase and subscription status
product ID of the purchased product or subscription
purchase date, expiration date, and renewal status
purchase platform, e.g. iOS or Android
technical information for validating purchases
pseudonymous device or app information

This data is needed to unlock paid features, manage subscriptions, restore purchases, and prevent abuse.

4. Purposes of Data Processing

We process personal data in particular for the following purposes:

providing and operating the website
providing and operating the Chaosflat app
creating and managing user accounts
managing households, tasks, shopping lists, and expenses
synchronizing content between household members
providing and managing paid features
processing, verifying, and restoring in-app purchases and subscriptions
sending waitlist or launch notifications
responding to contact and support requests
improving the security and stability of our services
error analysis and technical maintenance
abuse and fraud prevention
compliance with legal obligations

5. Legal Basis

To the extent the GDPR applies, we base the processing of personal data on the following legal grounds:

Art. 6(1)(b) GDPR: performance of a contract or pre-contractual measures, in particular to provide the app, user accounts, paid features, in-app purchases, and subscriptions.
Art. 6(1)(f) GDPR: legitimate interest, in particular in the secure, stable, and user-friendly operation of our website and app, as well as in preventing abuse and payment fraud.
Art. 6(1)(a) GDPR: consent, in particular for voluntary sign-up for notifications or optional services.
Art. 6(1)(c) GDPR: compliance with legal obligations, to the extent we are legally required to process or retain certain data.

6. Hosting and Technical Infrastructure

Our website and app are operated through technical service providers. In doing so, personal data may be processed on the servers of these providers.

We select our service providers carefully and, where necessary, enter into data processing agreements. In doing so, we ensure that personal data is only processed to the extent necessary.

Hosting provider / technical service provider: Hetzner Online GmbH Germany (data processing takes place in Germany)

7. Database, Authentication, and App Infrastructure

To operate the app, we may use service providers for database, authentication, file storage, push notifications, payment management, or backend infrastructure.

In doing so, in particular account data, app content, technical usage data, and information about purchases and subscriptions may be processed.

Services used:

Apple Sign-In
Google Sign-In
Apple App Store / Apple In-App Purchases
Google Play Store / Google Play Billing
RevenueCat

When using these services, personal data may be transferred to Apple Inc., Google LLC, or RevenueCat, Inc. The privacy policies of these providers additionally apply.

If data is processed outside Switzerland, the EU, or the EEA, we ensure appropriate safeguards, in particular standard contractual clauses or other legally recognized protective measures.

8. Cookies and Similar Technologies

Our website may use cookies or similar technologies. Cookies are small files stored on your device.

We use necessary cookies or comparable technologies to technically provide the website and app, operate them securely, and enable basic functions.

If we use analytics, marketing, or tracking cookies, we only use them where a legal basis exists, in particular your consent where required.

You can delete or block cookies in your browser settings. This may limit certain functions.

9. Analytics and Usage Statistics

We use Google Analytics, a web analytics service provided by Google LLC.

Google Analytics uses cookies and similar technologies to analyze the use of our website. In doing so, personal data such as IP address, usage behavior, and device information may be processed.

The data may be transferred to and stored on Google's servers. Transfer to the USA cannot be ruled out.

We use Google Analytics only where corresponding consent has been given (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.

Further information can be found in Google's privacy policy.

10. Newsletter, Waitlist, and Product Notifications

If you sign up for our waitlist or notifications, we use your email address to inform you about the launch of Chaosflat or important product information.

You can unsubscribe at any time by using the unsubscribe link in the respective email or by contacting us.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

11. Push Notifications

If you enable push notifications in the app, we may send you notifications, for example about new tasks, reminders, shopping lists, or expenses.

Push notifications are only sent if you allow them on your device. You can disable them at any time in your device's system settings.

Depending on the device, Apple or Google services may be used for push notifications.

12. App Stores, In-App Purchases, and External Platforms

If you download Chaosflat via the Apple App Store, Google Play Store, or another platform, the respective platform operator's privacy policy and terms of use additionally apply.

In-app purchases and subscriptions are processed via the Apple App Store or Google Play Store. Payment processing takes place directly through the respective platform operator. We do not receive complete payment information such as credit card numbers or bank details.

We may use RevenueCat to manage, validate, and restore purchases and subscriptions. RevenueCat helps us recognize a user's purchase status and correctly unlock premium features.

We do not have full control over what data Apple, Google, or other platforms process in connection with downloads, installation, updates, payments, subscriptions, or app usage.

13. Disclosure of Data

We only disclose personal data where necessary, in particular:

to technical service providers for hosting, database, email delivery, error analysis, or app operation
to service providers for managing in-app purchases, subscriptions, and premium features, in particular RevenueCat
to platform and payment providers such as Apple or Google, where necessary for in-app purchases, subscriptions, or purchase restoration
to other members of your household within the app, where intended for the functionality
to authorities or third parties where we are legally required to do so
to enforce our rights or defend against claims

We do not disclose your data to third parties for advertising purposes without your consent.

14. Visibility Within Your Household

Chaosflat is designed for shared use within a household. Certain content you create or edit may therefore be visible to other members of your household.

This includes in particular:

your display name
tasks and completed tasks
task assignments
shopping list entries
expenses, amounts, and participants
comments or notes, where such features are available

Do not share sensitive or confidential information in the app if you do not want other household members to see it.

15. Data Retention

We store personal data only for as long as necessary for the purposes stated above or as required by statutory retention obligations.

In general:

we store account data for as long as your user account exists.
we store household, task, shopping list, and expense data for as long as it is necessary for using the app.
we store waitlist and notification data until unsubscription or until the purpose no longer applies.
we store support requests for as long as necessary for processing and traceability.
we store data on purchases, subscriptions, and premium features for as long as necessary for provision, restoration, billing, traceability, and compliance with legal obligations.
server log data is stored only for a limited time, unless needed longer for security reasons.

You may request deletion of your data, provided there are no legal or legitimate reasons preventing deletion.

16. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

These may include in particular:

encrypted transmission via HTTPS
access restrictions
secure authentication procedures
regular updates and maintenance
data minimization
backups and technical protective measures

Despite all measures, no data transmission over the internet can be guaranteed to be completely secure.

17. International Data Transfers

Depending on the service providers used, personal data may also be transferred to countries outside Switzerland, the EU, or the EEA.

This may in particular be the case when using Apple, Google, RevenueCat, or other international service providers.

Where data is transferred to countries without an adequate level of data protection, we ensure appropriate safeguards, in particular through standard contractual clauses or other legally recognized guarantees.

18. Your Rights

To the extent the GDPR applies, you have in particular the following rights:

the right to access the personal data we process about you
the right to rectification of inaccurate data
the right to erasure of your data
the right to restriction of processing
the right to data portability
the right to object to certain data processing
the right to withdraw consent with effect for the future
the right to lodge a complaint with a competent data protection supervisory authority

If you wish to exercise your rights, please contact us at:

nicolas@heex.ch

19. Right to Complain

If you believe that the processing of your personal data violates data protection law, you can file a complaint with a data protection supervisory authority.

For persons in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC) is responsible in particular. For persons in the EU, the data protection supervisory authority of the respective member state may be responsible.

20. Minors

Chaosflat is not specifically directed at children under the age of 16. If you are under 16, you should only use Chaosflat with the consent of your parents or legal guardian, to the extent such consent is legally required.

21. Changes to This Privacy Policy

We may amend this Privacy Policy at any time, in particular if we change our website, app, features, or the service providers we use.

The current version is available on our website.

22. Contact

If you have questions about data protection or wish to exercise your rights, you can contact us:

Nicolas Müller Lorystrasse 14 3008 Bern, Switzerland Email: nicolas@heex.ch