Privacy Policy
Summary of key points
- What do we collect from the apps? Nothing. See section 2.
- Do we process sensitive information? Not on our side. What you write about your own health or wellbeing may be sensitive, which is exactly why it never leaves your phone. See section 3.
- Do we get information from third parties? Only a payment processor's confirmation that a subscription is valid, if you subscribe. See section 8.
- Do we sell or share personal information? No, never, and we have none to sell. See section 13.
- What about this website and email? The site sets no cookies and runs no analytics. Email you send us is handled as described in section 10.
- What are your rights? You hold the only copy of your app data and can export or erase it at any time. For anything else, see sections 12 and 13.
1. Who we are
Public Safety Strong and Reset are published by Chaos Innovations LLC, a Virginia limited liability company ("Chaos Innovations", "we", "us"), the data controller for the limited purposes described below. You can reach us at privacy@chaosinnovations.com.
2. What the apps collect
Nothing. We do not collect, receive, transmit, store on our servers, sell, rent or share any personal information from the apps. The only information that ever reaches us is what a payment processor passes on if you choose to subscribe to Public Safety Strong, covered in section 8 — and never anything you wrote in the app.
This is not only a policy commitment. The apps offered on this website are published without the INTERNET permission. That permission is not merely unused — it is absent from the app's manifest, so Android itself blocks any network connection the app might attempt. There is no server for your information to travel to.
The apps contain no advertising, no analytics, no crash reporting, no attribution or marketing SDKs, no artificial-intelligence services, and no third-party code that phones home.
3. What the apps store, and where
Everything you enter stays in the app's private storage on your device. Depending on which features you use, this can include:
- journal entries, reflections and drawings;
- shifts, work logs, appointments, reminders and their notes;
- check-ins, sleep, hydration and similar wellness entries you choose to record;
- in Reset, optional personal health notes such as blood pressure, glucose, pulse or weight, which the app records for you and never interprets;
- your theme, accessibility settings and chosen profession.
That data is encrypted at rest with AES-256-GCM. The encryption key is generated on your device and held in the Android hardware-backed keystore, marked non-exportable — it cannot be extracted from the device by us, by the app, or by another app. Your data is also protected by the device's own full-disk encryption and by Android's per-app sandbox. Public Safety Strong and Reset are separate apps with separate storage; neither can read the other's data.
Brain-break rounds, including Fact • Myth, are held in memory only and are discarded when you leave the activity.
4. What the apps deliberately do not do
Some boundaries are enforced by the app's structure rather than by a setting:
- They do not score or rate you. There is no streak, no completion percentage, no adherence figure and no "missed" flag. The data model contains no field for any of them.
- They do not interpret anything you record. They apply no severity or pain scale, raise no alerts, and offer no diagnosis, treatment or medical advice.
- They do not monitor you. They do not detect a crisis, and will never contact your employer, your family or emergency services on your behalf.
- They do not read your other data. They request no access to your contacts, photos, location, microphone, camera, call logs, health data or files.
- They make no automated decisions about you and build no profile of you.
5. Device permissions and why each is needed
| Permission | Why |
|---|---|
| POST_NOTIFICATIONS | To show a reminder you asked for. Optional — decline it and the rest of the app works. |
| SCHEDULE_EXACT_ALARM | So a reminder arrives at the minute you set rather than whenever the system next wakes up. |
| RECEIVE_BOOT_COMPLETED | So your reminders survive a restart. |
| VIBRATE | So a reminder can be felt rather than heard. |
There is intentionally no INTERNET permission in that list, and none of these permissions can send information anywhere.
6. Notifications and your lock screen
Reminder notes are private by default. On a locked screen a reminder shows only a neutral line naming the app — for example "LEO Strong reminder" or "Reset reminder" — without the title or the note, so someone beside you cannot read it. You can change this per reminder.
7. Keeping and deleting your data
Your data is kept on your device until you delete it. Delete my data in the app's settings erases everything at once: your entries, your settings, the encrypted store itself, and any reminders already queued with the Android alarm service. Uninstalling the app also removes all of it. Because we never hold a copy, there is nothing for you to ask us to delete and no backup for us to restore — deletion is final.
Export my data saves a copy of your entries to a file you control. The app cannot currently import that file back in, so treat it as a record rather than a restorable backup.
8. Subscriptions and payment
Public Safety Strong and Reset are each free for the first month and ask for no payment details. If you later subscribe, the payment is handled by the platform you buy through — Google Play, or another processor we name at the time — under that company's own privacy policy. We never see or store your card number. What we receive from a processor is limited to what is needed to know that a subscription is valid and to handle refunds and tax: typically a transaction identifier, the plan, the amount, the country, and an email address if you gave one. We keep these records for as long as tax and accounting law requires, and use them for nothing else.
That billing record is kept apart from anything you write in the app. Your entries are never linked to a payment, because they never leave your device for us to link them to.
There are two kinds of build, and they differ in one respect worth stating plainly. The builds offered for direct download from this website contain no payment code and no network access of any kind; a Public Safety Strong subscription is proved by a signed licence key your phone verifies by itself. A Google Play build of Public Safety Strong uses Play's own billing, which requires the internet permission so it can ask Play whether a subscription is current. In neither case does anything you wrote in the app travel anywhere.
9. Backups
If you use Android's own backup or device-transfer features, your operating system — not our app — may copy app data to your Google account under Google's privacy policy. That is a choice you control in your Android settings.
10. This website and email
This site is a set of static pages served from Amazon S3 through Amazon CloudFront. It sets no cookies, runs no analytics, embeds no social or advertising pixels, and loads no third-party fonts or scripts. There is no form on it.
As with any website, our hosting provider, Amazon Web Services, necessarily processes your IP address and request details to deliver the page, and may retain them briefly for security and abuse prevention. We do not build profiles from this, combine it with anything else, or use it for marketing.
If you email us, we receive your email address and whatever you write. Mail to our addresses is received by Amazon Simple Email Service, held for no more than 30 days in encrypted Amazon S3 storage, and forwarded to the mailbox we read (Google Gmail). We use it only to answer you and to keep a record of what we agreed, and keep it no longer than that needs.
Amazon Web Services and Google act as our service providers for these purposes. Our service providers are in the United States; if you contact us from elsewhere, your message is processed there.
11. Children
Our apps are intended for adults aged 18 or over. Public Safety Strong is for adults working in public safety; Reset is for adults generally. Neither is directed at children, and we do not knowingly collect information from anyone under 18 — or from anyone at all through the apps. If you believe a child has emailed us personal information, contact privacy@chaosinnovations.com and we will delete it.
12. Legal bases (EEA, UK, Switzerland and Canada)
The apps process no personal data on our side, so no legal basis is needed for them. For the limited information we do handle, we rely on performance of a contract (subscription records and support email), legal obligation (tax and accounting records), and our legitimate interests in keeping this website secure. You may withdraw any consent, object to processing, or complain to your local data-protection authority.
13. Your privacy rights, including US state rights
Depending on where you live — including under the laws of Virginia, California, Colorado, Connecticut, Utah, Texas, Oregon and other US states, and under the GDPR and UK GDPR — you may have the right to know whether we process personal data about you, to access it, to correct it, to delete it, to receive a copy, to opt out of its sale, targeted advertising or profiling, and not to be discriminated against for exercising these rights.
We hold no personal data about app users, so for the apps there is nothing to disclose, correct, export or delete — you already hold the only copy, and the app lets you export or destroy it yourself. We have not sold or shared personal information in the past twelve months, and we will not do so in the future. We do not use personal information for targeted advertising or profiling, and we do not process sensitive personal information.
For email or billing records, contact privacy@chaosinnovations.com. We may need to confirm your identity before acting on a request, and we will use what you give us only for that. You may use an authorised agent, who must show written permission from you. We will respond within the time the law requires, normally 45 days.
Appeals. If we decline a request, you may appeal by replying to our decision or emailing the address above with "appeal" in the subject. We will tell you in writing what we decided and why. If your appeal is denied, you may contact your state attorney general.
California "Shine the Light". We do not disclose personal information to third parties for their direct-marketing purposes.
14. Do-Not-Track
There is no uniform standard for browser Do-Not-Track signals, so we do not respond to them — but since this site does no tracking of any kind, there is nothing for such a signal to switch off.
15. Security
No system is perfectly secure, but an app that cannot transmit data removes most of the ways data gets exposed. Your protection rests on your device: keep a screen lock on it, keep Android updated, and be careful who can pick it up. If we ever became aware of a vulnerability affecting your data, we would publish it on this page and in the app's release notes.
16. Not a medical service
Our apps are private, self-supportive tools. They are not emergency services and do not provide medical diagnosis, treatment, psychotherapy, emergency medical services or clinical monitoring. They are not HIPAA-covered services, and nothing you record in them is a medical record held by us. If you are in crisis, call or text 988 in the United States to reach the Suicide & Crisis Lifeline, or call 911.
17. Changes to this policy
If this policy changes we will update the date at the top and, for anything material, note it in the app's release notes. We will not weaken the commitments in section 2 for a version of the app already on your phone; a change of that kind would require a new app release that you would have to choose to install.
18. Contact
Chaos Innovations LLC
Privacy enquiries: privacy@chaosinnovations.com
General support: support@chaosinnovations.com