Privacy Policy

What we store

• Your account: name, email address, whether the address is verified, sign-in credentials (passwords are stored only as a hash, never in readable form), passkeys you register, and active sessions.
• Your household and home: household and home names, country, timezone, members and their roles, and invitations.
• Your home record: rooms, systems, equipment, model and serial numbers, filters and consumable specifications, warranties, documents and manuals you upload, and photos.
• Your work: tasks, assignments, due dates, completions, completion photos and receipts, comments, and an append-only activity history.
• Operational data: notification preferences and delivery records, push subscriptions if you enable them, rate-limiting counters, and error diagnostics that exclude the contents of your records.

Who can see it

Your records belong to your household. Members see what their role allows, and those rules are enforced on our servers, not merely hidden in the interface. You can read the full permission table inside the app under Household → Roles and permissions.

We do not sell your data, and we do not share it with other households. Staff access is limited to what is needed to operate and support the service.

Photos and documents

Uploads are stored privately and are not reachable from a public or guessable address. Location metadata is stripped from photos when they are processed. Uploaded files are scanned before they are attached, and a file that fails the scan is quarantined rather than stored alongside your records.

Artificial intelligence

Two features use AI, and both are optional. Equipment identification sends the photos you choose to a model provider to suggest what a piece of equipment is; HavenCue never saves an uncertain result as fact without your confirmation. Ask Cue answers questions using your own household’s saved records. Neither feature is given records from another household. If AI is disabled for your deployment, the rest of HavenCue works unchanged.

Email and notifications

We send account email you cannot opt out of — verification, password reset, and security notices. Everything else follows your notification settings, including quiet hours. You can change these at any time under Settings → Notifications.

How long we keep it

Your records are kept while your household exists. Completion history and activity are append-only by design: they are the home’s memory, and members rely on them, so they are not silently rewritten.

Deleting your account marks it deleted, releases your email address, ends your sessions, and removes you from every household. Work you completed remains in the shared history of households other people still use, under the name recorded at the time. A household with no remaining members is closed along with your account.

Your choices

• Export: a full export of your household’s data is available on every plan, including Free, under Settings → Export data.
• Delete: delete your account under Settings → Account settings. If you are the only owner of a household other people use, transfer ownership first so they keep access.
• Correct: edit any record in place; completions can be corrected, with the correction recorded rather than hidden.

Children

HavenCue is intended for adults. An adult can create a managed profile for a child in their household; that profile sees only what it is given and is controlled by the adult who created it. We do not knowingly collect personal information directly from children under 13 through independent account registration.

Contact

Questions about this policy, or a request about your data: contact support.