What we collect
Account details: your email address, and your name if you sign in with Apple or Google.
Your content: your map, notes, links, images, to-dos, charts and focus session logs, and the history of changes to them.
Your AI key, if you add one. It is encrypted and never shown again after you save it.
Connected assistants: which AI assistants you have allowed to access your map.
Plan details: your plan and its status. Card details are handled by Stripe; we never see or store your full card number.
Technical information: request logs, including IP addresses, kept by our hosting provider for security and troubleshooting.
How we use it, and why
To provide Chizu under our agreement with you: sign you in, store and sync your map, process payments, and provide support.
To keep Chizu secure and fix problems, which is in our legitimate interest and yours.
To meet legal obligations, such as keeping tax records.
To send service messages, such as sign-in codes and changes to your plan. We only send marketing if you agree, and you can opt out at any time.
AI processing
When you use Ask AI or the capture bar with your own AI key, the relevant parts of your map are sent to the AI provider for that key (currently Anthropic) to produce suggestions.
When you connect an AI assistant such as Claude or Gemini, it can read your map and send suggestions. What that assistant does with your information is governed by its provider’s privacy policy. You can disconnect it at any time.
Suggestions only change your map when you approve them.
International transfers
We are based in Australia, our database is in Singapore, and some of our providers process information in the United States and other countries. Wherever you live, your information may be processed outside your country.
Where the law requires it, such as for information from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as the European Commission’s standard contractual clauses offered by our providers.
How long we keep it
We keep your content while your account exists. When you delete your account, we delete your content, AI key and assistant access straight away. Copies in backups are removed within 7 days.
We keep payment records for as long as tax law requires.
Security
Information is encrypted in transit. AI keys are encrypted at rest. The database accepts connections only from our own servers, and access to our systems is limited to the people who run Chizu and protected with two-factor authentication.
Your rights
You can see and change your content in the app, export everything from Account → Export data, and delete your account from Account → Delete account.
Depending on where you live, you may also have the right to access, correct, delete or move your personal information, to object to or restrict how we use it, and to withdraw consent. This includes rights under the GDPR in Europe and the UK, privacy laws in US states such as California, and the Australian Privacy Act. To use any of these rights, contact support@advaise.app. We will not treat you differently for using them.
Complaints
If you have a privacy concern, contact us at support@advaise.app. We will respond within one month.
You can also complain to your local data protection authority, for example the Office of the Australian Information Commissioner, the UK Information Commissioner’s Office, or the authority in your EU country.
Children
Chizu is not meant for anyone under 16, and we do not knowingly collect their information.
Changes
We may update this policy. We will tell you about significant changes before they apply.