Last updated: June 24, 2026
This Privacy Policy describes how Haven ("Haven", "we", "us") — the operator of the Haven coordination platform — collects, uses, shares, and protects your information. Haven acts as the data controller for the information described below.
1. Information we collect
- Account info: name, email, password hash, profile photo.
- Property info: nickname, address, photos, and notes you add.
- Service info: requests, messages, before/after photos, ratings.
- Provider info (if applicable): service area, documents you upload for verification.
- Device & usage info: device type, OS, app version, IP address, basic analytics events.
- Billing info: handled by our payment processor; we receive limited transaction metadata (plan, amount, status, last 4 digits of the card) but not full card details.
2. How we use it and legal basis
We process your information under the following legal bases (GDPR / UK GDPR):
- Contract: creating and operating your account, matching Hosts and Providers, delivering notifications, providing customer support.
- Legal obligation: tax, accounting, anti-fraud, and law-enforcement requests.
- Legitimate interests: securing the Service, preventing fraud and abuse, debugging, improving the product, and limited direct marketing of Haven features.
- Consent: optional analytics or marketing where required by local law; you can withdraw at any time.
We do not sell your personal information.
3. Sharing
We share your information only with:
- Other Haven users as required for the Service (e.g. a Provider you accept a job with sees the property address).
- Paddle.com Market Limited ("Paddle") — our Merchant of Record and payment processor. Paddle handles checkout, payment, billing, tax compliance, invoicing, refunds, and chargebacks on our behalf. See Paddle's privacy notice.
- Infrastructure subprocessors we use to run Haven (cloud hosting, authentication, transactional email, analytics, error monitoring).
- Professional advisers (legal, accounting, insurance) under confidentiality.
- Authorities or courts where legally required, or to protect rights, safety, or property.
4. Storage, security, and international transfers
Data is stored on managed cloud infrastructure with encryption at rest and in transit. We use row-level security so users can only access their own data, principle-of-least-privilege access controls for staff, and audit logging on administrative actions. No system is 100% secure — please use a strong, unique password.
Haven is operated from the United States. If you access the Service from the EEA, UK, or another jurisdiction, your data may be transferred to and processed in the United States and other countries where our subprocessors operate, under appropriate safeguards (e.g. Standard Contractual Clauses).
5. Data retention
- Account & profile data: kept for the life of your account, then deleted within 90 days of account deletion.
- Property & service-request data: kept while your account is active; deleted with your account.
- Messages and reviews: retained for up to 24 months after a job completes for safety and dispute resolution, then deleted or anonymized.
- Billing records: retained by Haven and by Paddle for up to 7 years to comply with tax and accounting law.
- Logs & analytics: retained in identifiable form for up to 90 days, then aggregated.
- Backups: rotated and overwritten within 30 days.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data, and to withdraw consent. You can exercise most of these directly in the app (edit profile, delete properties, delete account) or by emailing privacy@haven.app. We will respond within 30 days. EEA/UK residents have the right to lodge a complaint with their local supervisory authority.
7. Cookies
We use strictly necessary cookies to keep you signed in and the app functional, and a small number of analytics cookies to understand product usage. Where required by law we present a cookie banner so you can manage non-essential cookies.
8. Children
Haven is not directed to children under 18. We do not knowingly collect information from children.
9. Changes
We may update this Policy from time to time. Material changes will be announced in-app and reflected in the "Last updated" date above.
10. Contact
Privacy questions or data requests: privacy@haven.app.