Havenia - Privacy Policy

1. Data controller

ORIVYA TECHNOLOGY, publisher of Havenia, is the data controller for the personal data of users of its support, community, and wellbeing service.

GDPR contact: ohavenia@gmail.com

2. Data collected

We collect the information needed to create and operate the account, such as your email address, display name, profile, messages, journals, interactions, notification preferences, technical login data, and information related to donations, payments, and security activity.

Wellbeing data and private content

Journals, questionnaire responses, mood scores, goals, and listening needs may reveal sensitive information depending on what you write. They are processed to provide requested features and apply your visibility settings. Havenia does not diagnose or replace a healthcare professional.

3. Purposes of processing

Your data is used to allow access to the service, secure your account, enforce moderation, manage notifications, facilitate community interactions, process donations or payments, improve service quality, and comply with legal obligations.

4. Legal basis

Processing is based, depending on the case, on contract performance, our legitimate interest, legal obligation, user consent, or the need to protect our interests and those of our users.

5. Recipients and processors

The Supabase project used for authentication, database, and certain storage is located in the eu-west-3 (Paris) region. The nine Cloudflare R2 buckets used by the application are located in WEUR (Western Europe), under the default jurisdiction and Standard storage class. Cloudflare also provides Workers, CDN, and RealtimeKit; Stripe processes payments and Sentry monitors errors. These providers act according to their contractual roles. Hosting regions do not mean that all provider processing remains exclusively within the EEA; any transfers are subject to GDPR safeguards where required.

Community features and calls

Messages, groups, posts, reports, and blocks may be processed to operate the community and protect users. Audio and video calls use Cloudflare RealtimeKit; Havenia does not record them unless a clearly identified feature or legal obligation provides otherwise. Other participants may retain or report content they can access.

Payments, local storage, and security

Stripe receives data needed for payments and subscriptions; Havenia does not store full card numbers. On the web, local storage may maintain sessions and preferences. Sentry may receive technical logs and errors for reliability and security.

6. Retention

Data is kept for the time necessary for the purposes described above, then deleted, anonymized, or archived in accordance with applicable legal obligations and our internal retention policies.

7. Your rights

You may request access to your data, export of your data, deletion of your account, or the exercise of any other right provided by applicable regulations, including from the “Manage my data” screen in the app.

Other rights and complaints

You may also request rectification, restriction, portability, or object to certain processing where these rights apply. You may contact Havenia or lodge a complaint with the CNIL or the authority in your place of residence.

8. Security

We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, alteration, or disclosure.

9. Contact

For any question relating to this policy or your personal data, you can contact the Havenia team using the contact details available in the app or on the website.