Privacy Policy

Last updated: September 7, 2026

1. Information We Collect

When you use Haven, we collect information to provide and improve our service:

  • Account information: Your name, email address, and profile photo provided through Google Sign-In.
  • Household data: Family member names, task assignments, routines, recipes, meal plans, shopping lists, behavior logs, and reward activity you create within the app.
  • Calendar data: Calendar events you import via image scan, email forwarding, or Google Calendar sync.
  • Payment information: Billing details are processed securely by Stripe. We do not store your credit card number.
  • Usage data: We collect anonymized analytics through Vercel Analytics and Speed Insights to understand how Haven is used.
  • How you found us: If you have allowed analytics cookies, we remember the campaign parameters in the link you arrived on, the landing page you first opened, and the domain of the site that referred you. We don't store the full referring URL with this — only the site's domain. If you then create an account, this is copied onto the account so we can tell which channels bring families to Haven.
  • Email delivery and engagement signals: Whether a message we send you was delivered, opened, clicked, or bounced. These are recorded against the kind of message (for example, "weekly digest"), not against you individually.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve Haven's features and functionality.
  • Process AI-powered features such as calendar scanning, recipe import, and meal suggestions using Google Gemini.
  • Process subscription payments and manage your billing through Stripe.
  • Send you service-related communications (e.g., account verification, security alerts).
  • Display relevant advertisements on the free tier via Google AdSense.

3. Data Sharing

We do not sell your personal data. We share information only with the following service providers who help us operate Haven:

  • Google: Authentication (OAuth), AI processing (Gemini), calendar sync, and advertising (AdSense).
  • Stripe: Payment processing for Haven+ subscriptions.
  • Vercel: Application hosting and analytics.
  • Cloudflare: File storage (profile images and uploads).
  • Resend: Outbound email — both transactional messages and the recurring ones you have opted into — and the delivery and engagement webhooks that tell us whether those messages arrived.
  • SendGrid: Inbound email only, for calendar imports sent to your magic email address.
  • Inngest: Background job processing (e.g., recurring task generation).
  • Meta Platforms: Advertising measurement — only if you allow advertising cookies, and only once we enable it. When enabled, we send Meta a SHA-256 hash of your email address (never the address itself) together with your IP address and browser identifier, at signup and when you start a Haven+ subscription. Your choice is remembered in an essential haven_consent cookie.

We also read aggregate search statistics about our public pages from Google Search Console; this involves no personal data.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Neon. We use industry-standard security measures including encrypted connections, secure authentication tokens, and access controls to protect your information. All data is transmitted over HTTPS.

5. Children's Privacy

Haven allows parents and guardians to create family member profiles for children. These profiles are managed entirely by the parent or guardian account holder. Children do not have independent accounts or direct access to the service. We do not knowingly collect personal information directly from children under 13.

6. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Export your data in a portable format.
  • Withdraw consent for optional data processing at any time.

To exercise any of these rights, please contact us through our Support page.

7. Cookies and Tracking

The first time you visit Haven we ask you to choose. We don't turn on analytics, the attribution cookie, or personalized advertising until you do, and you can change your mind at any time. There are three categories:

  • Essential — always on. These keep you signed in, protect the site, and remember the choice you made here. Haven does not work without them.
  • Analytics — optional. Allowing these turns on Vercel Analytics and Speed Insights, and lets us set a first-party cookie called haven_attrthat remembers how you first reached Haven: the campaign parameters in your link, the landing page you opened, and the referring site's domain. It is set once, on your first visit, and is not used to follow you around other websites.
  • Advertising — optional. Allowing these lets Google AdSense serve personalized advertisements on the free tier, and, once we enable it, the Meta Pixel for advertising measurement. Declining still shows ads, just not personalized ones. Haven+ subscribers do not see ads at all.

Changing your choice. Select in the footer of any public page. That clears your stored choice and reopens the banner. Withdrawing analytics consent also deletes the haven_attr cookie.

How long we keep it. The haven_attr cookie lasts 30 days in your browser; if you create an account while it is set, the same information is copied onto your account and kept with it. Our operational event log — the records behind delivery and engagement measurement — is kept for 90 days.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

9. Contact Us

If you have questions about this privacy policy or our data practices, please reach out via our Support page.