Privacy Notice

Last updated 7 August 2026

This notice explains what Haven Mentor (“Haven”, “we”, “us”) collects, why, who it is shared with, and what you can do about it. It is written to be read, not to be survived. If anything here is unclear, email support@havenmentor.com and a person will answer.

Haven is a private AI coaching platform, guided by an AI coach. It is not therapy, not medical care, and not a crisis service. Because of what people write here, much of what you tell Haven can reveal information about your mental and emotional health. We treat it accordingly. There is a plain-language companion to this notice at Health data & privacy, and it does not contradict this page — if you ever find that it does, the discrepancy is a bug and we want to hear about it.

Summary

We collect your email, your date of birth, what you write in Haven, and basic technical logs.
We do not sell your data, we do not run ads, we do not buy data about you from data brokers, and we do not build advertising profiles. There is no exception to this and no paragraph further down that quietly takes it back.
Your reflections are shared with our AI provider so a reply can be generated, with detectable identifiers stripped first — except for the short automated safety check, which reads your message as written.
Nothing you write is ever sent to our payment processor.
In a Together conversation, another person reads what you send to the shared thread. That is the point of the feature and it cannot be undone. See §6.
You can export or delete everything from Settings at any time.

1. What we collect

Information you give us

Email address — your account identifier and how we reach you.
Password — stored only as a cryptographic hash. We never hold the password itself and cannot recover it.
Date of birth — required at signup to enforce our minimum age and the parental-consent flow (§8).
Preferred name — whatever you want your guide to call you. It does not have to be your real name.
What you write or speak in Haven — your reflections, and the guide’s replies.
Memories — short notes your guide keeps so it does not start from scratch each time. You can read, approve, or delete every one of them in Settings.
Support messages — anything you send us through the contact form or by email.

We do not ask for a phone number, a postal address, a job title, or a photo, and Haven has no field for any of them. If a future feature needs one, this list changes first.

Sensitive information

We do not ask you for information about your health, race, religion, sexuality, politics, or beliefs, and Haven has no form that requests any of it. But Haven is a space for talking through hard things, so you may well write some of it into a reflection. When you do, it is stored as part of that conversation and handled under this notice like everything else — encrypted at rest, never sold, never used for advertising, and deletable by you at any time. We do not analyse it to infer characteristics about you, and we do not use it to categorise you for any purpose other than running the features you turned on.

Payment information

Subscriptions are handled by Stripe. Card numbers and security codes go directly to Stripe and never touch Haven’s servers — we never see them. Stripe may collect a billing address to satisfy card-network and tax rules. All we store on our side is your email, your plan, your billing period, and the status of the subscription. Nothing you write in Haven, and no health information, is ever sent to Stripe. Stripe’s terms are at stripe.com/legal/ssa.

Signing in with Google

Google is the only third-party sign-in Haven offers. If you use it, we receive your email address and Google’s confirmation that it is verified, and nothing else — no contact list, no friends list, no profile photo, no demographic data. We verify that sign-in with Google directly rather than trusting your browser. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. Haven has no Facebook, X, Apple, or other social login.

Collected automatically

Our servers keep ordinary technical logs: IP address, browser and device type, timestamps, which pages and endpoints were requested, and error reports. These exist to keep the service running, to enforce rate limits, and to investigate abuse and outages.

Optional product analytics

If “Contribute Anonymized Interaction Patterns” is on (Settings → Data & Storage — it is on by default and you can turn it off at any time), Haven records event type, which guide and voice you used, your plan, and word counts. It never includes anything you wrote. Turning it off deletes the analytics associated with your account.

What we deliberately do not do

We do not buy, rent, or receive information about you from data brokers, marketing partners, affiliate networks, public-records aggregators, or social platforms. We do not enrich your profile from outside sources, we do not run advertising or ad trackers, and we do not do “targeted advertising”, “event promotion”, or audience matching of any kind. Everything we hold about you came from you, or from your own use of Haven.

2. Why we process it

To run Haven — create and secure your account, generate replies, keep your history available across your signed-in devices.
To keep people safe — screen messages for signs of crisis and respond with real help. See §5.
To bill you — manage subscriptions, meter usage against your plan, and prevent double-charging.
To support you — answer your messages and fix what you report.
To keep it working — diagnose faults, prevent abuse and fraud, and improve reliability.
To meet legal obligations — including consent records and tax and accounting rules.

We do not process your information to profile you for advertising, to rank or recommend content to keep you engaged, or to train a general-purpose AI model on your reflections.

3. Our legal bases

Where the law requires a legal basis, we rely on: performance of a contract (running the service you signed up for), legitimate interests (security, fraud prevention, reliability), consent (optional analytics, and any sensitive information you choose to write), and legal obligation (consent records, tax, responding to lawful requests). You can withdraw consent at any time; it does not affect processing that already happened. If you are in Canada, we rely on express or implied consent as applicable, and the narrow statutory exceptions — investigating a breach of agreement, fraud detection, or complying with a subpoena, warrant, or court order.

We share the minimum needed, with vendors under written contract who may use it only to perform their work for us. We do not sell personal information, and we have not sold or shared personal information for cross-context behavioural advertising in the last twelve months.

Our AI provider — receives your message so a reply can be generated or spoken. Identifiers we can reliably detect (email addresses, phone numbers, card and Social Security numbers, web links, street addresses) are stripped first. Your name, email, and account details are never sent. Our agreement forbids using your content to train their general-purpose models.
Stripe — payments only. Receives your email, plan, and billing period. Never receives anything you wrote.
Our email provider — receives your email address to deliver verification codes, password resets, parental-consent requests, and receipts.
Our hosting provider — stores the encrypted database and serves the site.
Google — only if you choose to sign in with Google, and only to verify that sign-in.
Law enforcement or regulators — only where we are legally compelled.
A buyer — if Haven is ever sold or merged, your information may transfer. This notice, or one at least as protective, would continue to apply, and we would tell you before it took effect.

We name our AI, voice, email, and hosting providers on request. Email support@havenmentor.com and we will tell you exactly who they are and what each one receives. We do not list them by name here because doing so has repeatedly led people to assume Haven is a thin wrapper around a public API, which misdescribes both the product and the safety work around it — but withholding the name from a person who asks would be a different thing entirely, and we do not do that.

5. How AI is used, and the one deliberate exception

Haven’s replies are generated by AI, through a system we build and maintain: our own guide instructions, safety layer, and memory handling running on top of a commercial AI provider. Guides are communication styles, not people, and not licensed anything. Output can be wrong and must never be treated as diagnosis or professional advice.

Before your message is sent to generate a reply, we strip the identifiers listed in §4. There is one deliberate exception. Every message also passes a short automated safety check that looks for signs someone is in danger, and that check sees your message exactly as you wrote it, because removing details could cause us to miss a real crisis. We think keeping that check accurate is the right call, and we would rather tell you than let you assume otherwise. If it detects a crisis, the generated reply is discarded and replaced with a reviewed message pointing to real human help. That response is never delayed, paywalled, or replaced by anything.

Your reflections are not used to train general-purpose AI models — neither ours nor our provider’s. To opt out of optional product analytics, turn off “Contribute Anonymized Interaction Patterns” in Settings → Data & Storage.

6. Together conversations, and connected therapists

Together is a conversation between two people with a guide in the middle. It has privacy consequences that the rest of Haven does not, so they are spelled out here rather than left to be discovered.

What you send to the shared thread is disclosed to the other person as you send it, and cannot be unsent. Once someone can read what you wrote, we cannot control what they do with it — including copying, screenshotting, or repeating it.
What you say privately to the guide inside that conversation stays private. The other person is never shown it, in either direction.
Leaving is visible. A line saying you left is added to the shared thread.
Your data export includes the shared thread, which means it contains messages the other person wrote and the name they used. Their private messages to the guide are never included. Bear that in mind before you forward the file to anyone.
Everyone in a Together conversation must be 18 or over.
Support lines are always one tap away inside a conversation and open in a new tab on purpose, so reaching for help never announces itself to the other person.

If your account is connected to a therapist, they see only what you explicitly choose to share with them, plus whether you engaged with tasks they assigned. They cannot read your private reflections, and a Together conversation is invisible to them — they are not shown it and are not told it exists. A therapist’s own notes about you live in their dashboard and are governed by their professional obligations, not only by this notice.

Voice. When you use call mode, speech recognition happens in your browser and we do not receive or store a recording of your voice. To speak a reply, only the words to be read aloud are sent to our voice provider — never your name, email, or account details. The generated audio is cached on our servers, keyed to the text, so a repeated line is not regenerated. Spoken conversations land in your history as text.

7. How long we keep it

Account and reflections — for as long as you have an account. Delete the account and they go with it.
Technical logs — a short operational window, then discarded.
Billing records — retained as long as tax and accounting law requires, even after deletion. These contain no reflections.
Parental-consent records — these deliberately survive account deletion. They are the durable proof that consent was sought and what was decided, which is the entire point of holding them; deleting them on request would destroy the only record that the process was followed. They contain the decision, the timestamps, and the addresses involved — not the child’s reflections.
Backups — deleted content can persist in encrypted backups for a short period before those rotate out. It is isolated from any further processing in the meantime.

8. Minors

Haven’s minimum age is 13. Accounts for anyone under 13 are refused and there is no parental-permission route below that age. If we learn we hold information from someone under 13, we deactivate the account and delete the data.

13 to 17 requires a parent or guardian’s consent. We ask for a date of birth at signup; if it indicates the account holder is under 18, we ask for a parent or guardian’s email and contact them to request consent, and we record the decision. Until that adult confirms, the account cannot use the AI at all — not chat, not voice. If consent is declined, or is not given before the request expires, the account and its data are deleted. A parent or guardian can withdraw consent, or ask us to delete the account, at any time by emailing support@havenmentor.com.

If you are a parent whose consent link has expired or will not open, email us and we will send a new one. Nothing is deleted without warning while you are waiting on us.

9. How we protect it

Encrypted at rest — your synced conversation history and memory profile are encrypted on our servers, so a stolen database copy is not readable.
Encrypted on your device — the history saved in your browser is encrypted too, so it is not readable from a shared computer’s storage.
Encrypted in transit — everything travels over HTTPS.
Credentials are never stored in readable form — passwords and session tokens are hashed; two-factor codes are hashed with a server-side secret.

Being honest about the limit: this is encryption at rest, not end-to-end encryption. Haven must be able to decrypt your data to operate the service, so a small number of staff can access it when needed to run Haven or help you. We cannot truthfully say that no one but you could ever see it, and we are not going to pretend otherwise. No system is perfectly secure.

10. Your rights and how to use them

Wherever you live, you can do all of this yourself in Settings: read your data, export it as a JSON file, correct your name, change your preferences, turn analytics off, and delete your account and its data. You do not need to ask our permission or wait for us.

Depending on where you live you may also have the right to know what we process, to get a copy, to correct it, to have it deleted, to restrict or object to processing, to data portability, to withdraw consent, to opt out of sale or targeted advertising (we do neither), to limit the use of sensitive information, and not to be discriminated against for exercising any of these. If a decision produces legal or similarly significant effects and is made solely automatically, we will tell you and offer a human review.

To exercise a right we cannot fulfil through Settings, or to appeal a decision, email support@havenmentor.com. We will verify that the request is really yours before acting, using only the information in the request. An authorised agent may act for you with written proof. If we refuse, we will say why in writing, and you may complain to your state attorney general or data protection authority.

US state privacy categories

Categories of personal information collected in the last twelve months:

Category	Examples	Collected
A. Identifiers	Email address, account ID, IP address, preferred name	YES
B. Customer records	Name, contact information, billing status	YES
C. Protected classifications	Date of birth and age (required at signup to enforce the age floor and parental consent). We do not collect race, ethnicity, national origin, marital status, or gender.	YES
D. Commercial information	Plan, billing period, subscription status	YES
E. Biometric information	Fingerprints, voiceprints	NO
F. Internet activity	Server logs of your use of Haven. We do not collect browsing history outside Haven, cross-site behaviour, interest data, or advertising interactions.	Haven only
G. Geolocation	Precise device location	NO
H. Audio, electronic, sensory	Voice recordings. Speech recognition runs in your browser; we never receive or store a recording of your voice. We do store the synthesized audio of the guide’s own replies.	Replies only
I. Professional or employment	Job title, work history — except a licence number and state if you apply for a therapist account	Therapists only
J. Education information	Student records	NO
K. Inferences for profiling	Profiles built to predict preferences or characteristics for advertising or ranking	NO
L. Sensitive personal information	Account credentials; date of birth; and any health, belief, or sexuality information you choose to write into a reflection	YES

We disclose Category A and D to the service providers in §4 for business purposes only. We do not sell any category, and we do not share any category for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics about you.

11. Do Not Track

There is still no agreed technical standard for Do Not Track signals, so we do not respond to them. This matters less here than it would elsewhere: Haven runs no advertising trackers and no cross-site tracking of any kind, so there is nothing for such a signal to switch off. The optional analytics described in §1 have their own switch in Settings.

12. Cookies

Haven does not use cookies for your account and runs no advertising or analytics cookies. You stay signed in through secure storage on your own device. The one exception is a signed, short-lived cookie used to meter free usage for visitors who have not made an account yet; it carries no name, no email, and nothing you wrote.

13. Changes to this notice

We will update this notice as Haven changes, and revise the date at the top. If a change materially affects your rights we will tell you in the app or by email rather than relying on you to re-read this page.

14. Contact

Questions, privacy requests, appeals, and anything a parent or guardian needs: support@havenmentor.com. A real person answers.

Haven Mentor
2712 W Estes Ave
Chicago, IL 60645
United States

If you are in crisis, please do not wait for us to reply. In the United States, call or text 988. In Canada, call or text 9-8-8. Both are free and answer around the clock.