Privacy Policy

Hey Haven LLC, doing business as HeyHaven AI ("Haven," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use the Haven application and related services (the "Service") available at heyhaven.ai.

1. What Data We Collect

We collect the following types of information:

• Account information: Your name and email address when you create an account.
• Household data: Information you provide about your household, including meal plans, bills, subscriptions, errands, chores, gift lists, health reminders, garden settings, and other data you enter into Haven's modules.
• Chat messages: Messages you send to Haven's AI assistant, including voice transcriptions.
• Usage analytics: How you interact with the Service, including pages visited, features used, and session duration. We use this to understand how to improve Haven.
• Payment information: When you subscribe to a paid plan, payment details are collected and processed by Stripe. We do not store your full credit card number.

2. How We Use Your Data

We use your data to:

• Provide the Service: Process your requests, generate AI responses, and display your household information.
• Personalise recommendations: Tailor Haven's suggestions based on your household context, preferences, and history.
• Improve the product: Analyse aggregate usage patterns to improve features, fix bugs, and develop new functionality.
• Communicate with you: Send service-related emails including billing confirmations, security alerts, and policy updates.

3. AI Processing

Haven uses Anthropic's Claude API to process your chat messages and generate responses. When you interact with Haven's AI assistant, your messages and relevant household context are sent to Anthropic for processing.

Anthropic's use of this data is subject to Anthropic's usage policies. We use Anthropic's API tier that does not use your data to train AI models.

4. Data Storage

Your data is stored in Supabase, a hosted database platform with servers located in the United States. We use row-level security (RLS) to ensure that your household data is only accessible to authorised members of your account. No other users can view or access your data.

5. Data Sharing

We do not sell your data. We share your information only with the following service providers, strictly as needed to operate the Service:

• Anthropic — AI processing of chat messages and household context.
• Stripe — Payment processing for subscriptions and credit purchases.
• Vercel — Application hosting and delivery.

We may also disclose your information if required by law or in response to valid legal process.

6. Your Rights

You have the right to:

• Access your data: View all data we hold about you at any time through your account settings.
• Export your data: Download a copy of your household data in a standard format.
• Delete your data: Request deletion of your account and all associated data at any time. See Section 9 for retention details.

To exercise any of these rights, contact us at privacy@heyhaven.ai or use the tools in your account settings.

7. Cookies

We use minimal cookies strictly for authentication and session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. For more details, see our Cookie Policy.

8. Children's Privacy

Haven is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@heyhaven.ai and we will promptly delete it. Note: Haven's Kids & Chores module allows parents to create child profiles, but these are managed by the parent's account and do not require children to have their own accounts.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days. Some data may be retained longer if required by law (e.g., billing records for tax purposes).

10. Security

We take the security of your data seriously:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
• Row-level security: Database-level access controls ensure your data is isolated from other users.
• No plaintext passwords: Passwords are hashed and salted. We never store passwords in plaintext.

While we implement industry-standard security measures, no system is 100% secure. We encourage you to use a strong, unique password for your Haven account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

12. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@heyhaven.ai.