Haven Privacy Policy

Last updated: 30 October 2026.

Haven is a private voice and text journal. You record what's on your mind, and Haven keeps it for you. Smart features (transcripts, titles, tags, to-dos and insights made with outside AI services) are optional and off unless you turn them on.

This policy explains what Haven collects, how, what it's used for, who receives it, how long it's kept, and how to delete it. If anything here is unclear, write to privacy@myhavenjournal.com.

"Haven", "we" and "us" means the creator of Haven, who you can reach at privacy@myhavenjournal.com. Haven is for people 18 and older.

The short version

Your journal is yours. We don't sell it, we don't show you ads, and we don't use it to train AI models.
If you choose Just record, your recordings stay with Haven's own storage and hosting providers and go to no AI service.
If you turn on transcription, the audio of each new recording goes to Deepgram to be turned into text.
If you turn on smart features, transcripts (and a few related details listed below) also go to Anthropic to make titles, tags, to-dos and insights.
Recordings made while a feature is off are never sent to it later, even if you turn it on.
You can change your choice, delete any entry or delete your account at any time.

What we collect, and how

What you give us

Your account: your email address and a password. The password is stored only as a one-way scrambled form by our sign-in provider; we can't read it.
Your recordings: the audio, how long it is, and a small sound-level outline used to draw the waveform.
A recording that isn't saved yet: if a recording can't be uploaded (for example, you lose your connection), it stays in Haven's open page on your device, in memory only, until it's saved or you discard it. It isn't written to your device's storage, and it's gone if you close the page.
What you add: tags, moods, to-dos you type, and which entries you've let go.
Your settings: your reminder time, and whether reminders are on.
Your smart features choice: which level you chose (Just record, Transcription, or Smart features), the version of the scope and wording you agreed to, and when you gave or withdrew consent. We keep a history of every change. See "Your consent record" below.

What Haven makes for you, only if you turned the feature on

With transcription: a transcript of each new recording.
With smart features: a title, a mood, tags and to-dos for each new journal entry; for dreams, the people, places and things in them; when you open a tag, a short summary of that theme, a reflection question and suggested next steps; and, when you open your dream insights, a short summary of what keeps returning in your dreams and, sometimes, a question.

What we collect automatically

Your time zone, from your device, so reminders and weekly to-dos line up with your day. It's kept in a cookie and in your settings.
Sign-in cookies, so you stay signed in. Haven uses no advertising or analytics cookies and no tracking tools.
If you turn on reminders: your browser's push address for this device.
Records with no journal content: the ids and times of entries, to-dos and accounts that were deleted (so a backup can never bring them back), and the id of each transcription request (so we can check our opt-out from Deepgram's model training was applied).
Service logs at our database provider: your email address, IP address and the addresses of requests. Haven doesn't put journal content in them.

How we use it

To provide the journal: store your entries, play them back, and show your history, tags, to-dos and dreams.
To transcribe recordings, only if you turned transcription on.
To make titles, moods, tags, to-dos, dream details, tag insights and dream insights, only if you turned smart features on.
To send you reminders, only if you turned them on.
To send sign-in, invitation and password-reset emails.
To keep encrypted backups, so Haven can be restored after a failure.
To keep Haven secure and working. The alerts that tell us something is wrong are built to leave out journal content.
To meet legal obligations.

We don't sell your data, use it for advertising, or use it to train AI models. Every request to Deepgram opts out of its model training. Anthropic's commercial terms don't allow it to train on what we send.

What goes to the AI services, exactly

Nothing goes to either service unless you chose it, and only from recordings made while it was on. Haven checks your current choice again right before every request, so turning a feature off stops sending at once.

When: Each new recording, with transcription or smart features on
Sent to: Deepgram
Exactly what: The audio and its file type

When: Each new journal entry, with smart features on
Sent to: Anthropic
Exactly what: Its transcript, up to 30 tag names you use, and up to 40 open to-dos Haven took from your entries

When: Each new dream, with smart features on
Sent to: Anthropic
Exactly what: Its transcript, up to 30 of your dream tags, and up to 40 people, places and things from earlier dreams

When: When you open a tag's insights, with smart features on
Sent to: Anthropic
Exactly what: The tag's name; how many entries have it, over how long and how often, whether it's coming up more or less, their 3 most common moods and up to 3 tags often used with it; and the dates and transcripts of up to 12 recent entries with it

When: When you open your dream insights, with smart features on and at least 2 dreams recorded with them on
Sent to: Anthropic
Exactly what: How many dreams, over how long and how often; up to 10 people, places and things that appear in 2 or more of them, with how many dreams each appears in; and the dates and transcripts of up to 12 recent dreams

When: When you open your dream log, with smart features on
Sent to: Anthropic
Exactly what: For recent dreams still missing their people, places and things: the dream's transcript and tags, and up to 40 people, places and things from earlier dreams

When: When you tap "Read it again"
Sent to: Deepgram or Anthropic
Exactly what: The same as for a new recording, sent again, only for a recording made with that feature on and only while it's on

When	Sent to	Exactly what
Each new recording, with transcription or smart features on	Deepgram	The audio and its file type
Each new journal entry, with smart features on	Anthropic	Its transcript, up to 30 tag names you use, and up to 40 open to-dos Haven took from your entries
Each new dream, with smart features on	Anthropic	Its transcript, up to 30 of your dream tags, and up to 40 people, places and things from earlier dreams
When you open a tag's insights, with smart features on	Anthropic	The tag's name; how many entries have it, over how long and how often, whether it's coming up more or less, their 3 most common moods and up to 3 tags often used with it; and the dates and transcripts of up to 12 recent entries with it
When you open your dream insights, with smart features on and at least 2 dreams recorded with them on	Anthropic	How many dreams, over how long and how often; up to 10 people, places and things that appear in 2 or more of them, with how many dreams each appears in; and the dates and transcripts of up to 12 recent dreams
When you open your dream log, with smart features on	Anthropic	For recent dreams still missing their people, places and things: the dream's transcript and tags, and up to 40 people, places and things from earlier dreams
When you tap "Read it again"	Deepgram or Anthropic	The same as for a new recording, sent again, only for a recording made with that feature on and only while it's on

Only entries recorded with smart features on are ever included. Entries you've let go never are. Your name, email address, account and entry ids, and file names are never sent. Haven's server sends every request, so your device and location aren't shared with these services.

If we ever want to send more than this, use it for something new, or use a different AI company, we'll ask you first. Until you accept, Haven keeps sending only what you agreed to.

Who receives your data

Haven uses a small number of service providers to run the app: cloud hosting and database storage for your account and recordings, an email service for sign-in, invitation and password-reset emails, encrypted backup storage that can't read what it holds, and, if you turn on reminders, your device's notification service. These providers may use your data only to provide their service to Haven, and must protect it at least as well as this policy does. If you turn on transcription, the audio of each new recording goes to Deepgram to be turned into text. If you turn on smart features, the transcript and the details listed above go to Anthropic. We don't share your data with anyone else, except when the law requires it. To find out which providers handle your data, write to privacy@myhavenjournal.com.

Who can see your journal

Haven keeps every account separate: one person can never see another's entries. That separation is enforced by the database itself and tested.

Haven is a small service. Its creator can technically access data stored in Haven's database and recording storage, through the hosting providers' admin tools, and holds the only key that can decrypt Haven's backups. The creator doesn't look at your journal except when you ask for help with your account, to investigate a security problem, or when the law requires it.

How long we keep it, and deleting it

When you delete an entry or your account, it's removed from Haven straight away. Copies held elsewhere are removed on these schedules:

Where: Haven's database and recording storage
What: Everything in your account
Deleted data can remain for: None: removed immediately

Where: Our database provider's daily backups
What: Database rows (not recordings)
Deleted data can remain for: Up to 7 days

Where: Our database provider's logs
What: Email address, IP address, request addresses
Deleted data can remain for: Up to 7 days

Where: Haven's encrypted backups
What: Your account (without your password), entries and recordings
Deleted data can remain for: Up to 38 days

Where: Deepgram
What: Audio, only if you used transcription
Deleted data can remain for: Every request opts out of Deepgram's model training. Deepgram hasn't confirmed its retention period to us in writing, so this policy doesn't state one

Where: Anthropic
What: What smart features sent
Deleted data can remain for: 30 days from when it was sent. Exceptions: up to 2 years if flagged for a usage-policy violation, or longer if the law requires it

Where: Our email provider
What: Your email address and Haven's emails to you
Deleted data can remain for: 37 days (30 days, plus 7 days of backups)

Where: Haven's deletion record
What: Ids and times of deleted items. No content
Deleted data can remain for: 40 days, so a restore can't bring deleted data back

Where	What	Deleted data can remain for
Haven's database and recording storage	Everything in your account	None: removed immediately
Our database provider's daily backups	Database rows (not recordings)	Up to 7 days
Our database provider's logs	Email address, IP address, request addresses	Up to 7 days
Haven's encrypted backups	Your account (without your password), entries and recordings	Up to 38 days
Deepgram	Audio, only if you used transcription	Every request opts out of Deepgram's model training. Deepgram hasn't confirmed its retention period to us in writing, so this policy doesn't state one
Anthropic	What smart features sent	30 days from when it was sent. Exceptions: up to 2 years if flagged for a usage-policy violation, or longer if the law requires it
Our email provider	Your email address and Haven's emails to you	37 days (30 days, plus 7 days of backups)
Haven's deletion record	Ids and times of deleted items. No content	40 days, so a restore can't bring deleted data back

Your consent record (below) is deleted with your account. It isn't in Haven's backups: if Haven ever has to be restored, everyone chooses again, and nothing is sent to an AI service until they do.

Your consent record

When you choose how Haven works, we record your level, the scope version you agreed to (what is sent, what for, and to whom), the wording version you were shown, and when you agreed or withdrew. Every change is kept in a history. You can see all of it in "Export your entries". Only you can read it, and only Haven's consent function can write it: nothing else in Haven can turn smart features on for you.

Each recording is also marked, when it's saved, with whether transcription and smart features were on. That mark never changes, which is how Haven makes sure a recording made while a feature was off is never sent to it.

Your choices and rights

Change your mind: Profile › Smart features. Turning something off applies straight away. It can't undo what was already processed.
Let an entry go (hidden, and never sent to an AI service again), or delete it forever.
Export everything: Profile › Export your entries (a file with your entries, to-dos, tag insights, settings, your consent record, and your recordings).
Delete your account: Profile › Delete account. Everything goes from Haven immediately, and from the places above on their schedules.
Ask us anything, or ask us to correct or delete something: privacy@myhavenjournal.com. Depending on where you live, you may have further rights (for example to object or to complain to a regulator); write to us and we'll help.

Security

Every connection is encrypted. Each person's data is separated by the database itself. Backups are encrypted with a key only Haven's creator holds. Haven is built to keep journal content out of its own logs, and we check them for it. No system is perfectly secure; if something goes wrong that affects your data, we'll tell you.

Children

Haven is for people 18 and older. We don't knowingly collect data from anyone younger. If you believe someone under 18 has an account, write to us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date above and tell you in the app. If a change would send more data, use it for something new, or use a different AI company, we'll ask you first, and nothing changes for you until you accept.

Contact

privacy@myhavenjournal.com

If you email us, we receive your email address and what you write, and use it only to reply. Please don't include journal content in emails.