Privacy Notice

1. Who we are

Haven AI is operated by Haven AI 247 ("Haven AI", "we", "us"). We act as the data controller for the personal data we collect through the Haven AI service.

2. Data we collect

• Account data — email address, hashed password or OAuth identifiers, and account settings.
• Content you create — chat messages with Haven, journal entries, gratitude notes, identity and roadmap answers, craving/SOS session logs.
• Usage & device data — IP address, browser and device information, timestamps, and interaction telemetry used to keep the service reliable and secure.
• Support communications — messages you send us and our responses.
• Payment data — collected and processed by Paddle (see "Sharing"); we receive only order metadata and subscription status, never full card details.

3. How we use it

• To create your account and deliver the service (contract).
• To generate AI responses and maintain your history (contract).
• To secure the service and prevent fraud or abuse (legitimate interests).
• To provide customer support (contract / legitimate interests).
• To improve reliability and product quality (legitimate interests).
• To send service and transactional emails (contract).
• To comply with legal obligations (legal obligation).

We do not sell your data, and we do not use your journal entries or chat history to train third-party AI models.

4. Who we share it with

• Merchant of Record — Paddle: for checkout, subscription management, invoicing, tax, and refunds.
• Cloud & hosting providers: to host the app, database, and edge functions.
• AI model providers: to generate responses inside the Haven experience. Prompts are processed to produce a reply; they are not used by us to train models.
• Email provider: to deliver transactional and account emails.
• Professional advisors and authorities: where required by law or to protect our rights.

5. Data retention

We keep account and content data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it for legal, tax, or fraud-prevention reasons (typically up to 7 years for financial records held by Paddle).

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can also withdraw consent where processing is based on consent. UK/EEA users can lodge a complaint with their local supervisory authority.

To exercise a right, contact us through your account. We aim to respond within one month.

7. International transfers

Our providers may process data outside the UK/EEA. Where that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls, and least-privilege service credentials. No system is perfectly secure — if you believe your account has been compromised, contact us right away.

9. Cookies

We use essential cookies and local storage to keep you signed in, remember preferences, and secure the service. We do not use third-party advertising cookies. Payment pages hosted by Paddle may set their own cookies to process your order.

10. Children

Haven AI is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

11. Sensitive content notice

Haven AI is an AI-powered personal wellness companion that helps people build healthy habits, reflect through guided conversations, strengthen resilience, and stay accountable to their personal goals. It provides educational and self-guided wellness tools — not medical, therapeutic, or crisis services. Because Haven AI touches on unwanted habits, emotional wellness, and recovery, your content may include sensitive information. Sharing this information is voluntary. If you are in immediate danger, contact emergency services (in the US: dial 988 or 911) or a qualified crisis resource.

12. Contact

For privacy questions, email us at support@havenai247.com.