This Privacy Policy explains how Haven ("Haven", "we", "us") handles your information. Haven is a wellbeing app that helps you stay away from online gambling and take a calmer approach to money. Our guiding principle is simple: we process as little of your data as possible, and as much as we can stays on your device.
Haven is developed and operated by Haven, based in the Netherlands. For any privacy question or request, contact us at [email protected].
The core protection in Haven — blocking gambling websites and apps — runs entirely on your device. It does not require an account, and the content you browse is never sent to us. We do not intercept or decrypt your secure (HTTPS) traffic, we do not read the content of the pages you visit off your device, and we do not sell your data or use advertising or third-party tracking SDKs.
The following happens locally and stays local:
You can use Haven's protection without an account. If you create one, we process:
Accounts and their data are handled by our processor Supabase. We use this to let you sign in, and to keep your progress and subscription status in sync across sessions and devices.
When you have an account, your progression (such as streaks, points, level and cosmetic items) and your subscription status are stored server-side so they can't be lost or tampered with.
Purchases of Haven Pro Plus are processed by Google Play and by our subscription provider RevenueCat. We receive your purchase and entitlement status (for example, whether your subscription is active) and a purchase identifier. We never receive your card or bank details — those are handled by Google Play.
If you create an account we may send you a one-time welcome email (transactional). Marketing email is separate and opt-in only: we only send it if you tick the dedicated consent box, and you can withdraw that consent at any time. Email is delivered through our provider Resend.
Haven periodically downloads a cryptographically signed blocklist so it can keep blocking new gambling sites without an app update. These are ordinary network requests; your IP address is visible to the server for the duration of the request, as with any download, and is not used to build a profile of you.
If you set up an accountability partner, the notifications are sent from your own device via your own email app. This information does not pass through our servers.
Where the GDPR applies, we rely on: performance of a contract (providing your account and subscription), consent (marketing email; the optional Accessibility features you enable), and our legitimate interest in keeping the service secure and functional.
We share data only with the providers needed to run the features above:
On-device data stays until you delete it or uninstall the app. Account and progression data are kept while your account exists; if you ask us to delete your account, we remove your server-side personal data. Subscription records may be retained where required for accounting and legal obligations.
Depending on where you live, you have the right to access, correct, delete, export, or restrict the processing of your personal data, and to withdraw consent. To exercise any of these, email [email protected]. To delete your account and its server-side data, contact us at that address and we will process the deletion.
Haven is intended for adults and is not directed to children under the age required to gamble in your country. We do not knowingly collect data from children.
We use encryption in transit, hashed passwords and PINs, and signed blocklist updates. No method is perfectly secure, but we design for minimal data and strong defaults.
Our processors may store or process data outside your country, including outside the EU. Where that happens we rely on the appropriate safeguards offered by those providers.
We may update this policy. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated in the app.
Haven · Netherlands · [email protected]