Haven Privacy Policy
Last updated: August 25, 2026 · This policy will be finalized at public launch; material changes will be announced in-app before taking effect.
Our promise, in one paragraph
Haven handles some of the most sensitive data a consumer app can hold: your raw, honest reflections during a difficult time. Our design principle is that this content — journals, AI conversations, voice memos, letters, SOS logs — belongs to you and your device. We don't sell it, we don't advertise against it, we don't use it to train AI models, and we make it easy to destroy it completely.
What stays on your device
- Journals, AI companion messages, voice memos, letters, SOS logs, and onboarding answers (encrypted local storage, keyed to your device's secure enclave).
- Anchor contact phone numbers — the SMS composer is prefilled locally; our servers never see them.
- Your archive export (markdown journals, insights, graduation certificate PDF) is assembled entirely on-device.
What leaves your device, and why
- AI Companion: when you send a message, its contents transit an in-memory proxy to our AI provider (Anthropic) solely to generate a reply. It is never persisted, logged, or used for model training.
- Account & billing: an anonymous account identifier and entitlement status are stored with our auth service and RevenueCat so your subscription works across devices and reinstalls.
- Diagnostics: scrubbed crash traces and event counts (PostHog / Sentry). Emotional content is never included in logs, crash reports, analytics, push payloads, or URLs.
- Notifications: never contain your content (“Your daily anchor is ready”, never anything about your relationship).
Clean Slate — deletion by default
After 365 days of inactivity, your server-side data is automatically purged — a hard delete across databases, billing records, and analytics identifiers. You can also trigger “Erase Everything Now” at any time for an immediate wipe of both server and device data. These flows satisfy Apple's and Google's account-deletion requirements.
Discretion by design
The app uses a neutral name and icon, blurs its snapshot in the app switcher, and offers an optional Face ID / biometric lock. Nothing about Haven's branding reveals what you're working through.
Contact
Questions, data requests, or deletion requests:
jack@hephaestussoft.com.
Hephaestus Soft LLC · 30 N Gould St, Ste N, Sheridan, WY 82801, USA.