Havenia – Privacy Policy

1. Data controller

ORIVYA TECHNOLOGY, publisher of Havenia, is the data controller for the personal data of users of its support, community, and wellbeing service.

GDPR contact: ohavenia@gmail.com

2. Data collected

We collect the information needed to create and operate the account, such as your email address, display name, profile, messages, journals, interactions, notification preferences, technical login data, and information related to donations, payments, and security activity.

3. Wellbeing data and private content

Journals, questionnaire responses, mood scores, goals, and listening needs may reveal sensitive information depending on what you write. They are processed to provide requested features and apply your visibility settings. Havenia does not diagnose or replace a healthcare professional.

4. Purposes of processing

Your data is used to allow access to the service, secure your account, enforce moderation, manage notifications, facilitate community interactions, process donations or payments, improve service quality, and comply with legal obligations.

5. Legal basis

Processing is based, depending on the case, on contract performance, our legitimate interest, legal obligation, user consent, or the need to protect our interests and those of our users.

6. Recipients and processors

The Supabase project used for authentication, database, and certain storage is located in the eu-west-3 (Paris) region. The nine Cloudflare R2 buckets used by the application are located in WEUR (Western Europe), under the default jurisdiction and Standard storage class. Cloudflare also provides Workers, CDN, RealtimeKit, and the moderation analysis model (Workers AI); Stripe processes payments on the web, Apple (App Store) and Google (Google Play) process in-app purchases, Expo and Google Firebase deliver notifications, Resend sends emails, and Sentry monitors errors. An embedded YouTube video is only loaded from YouTube when you play it. These providers act according to their contractual roles. Hosting regions do not mean that all provider processing remains exclusively within the EEA; any transfers are subject to GDPR safeguards where required.

7. Community features and calls

Messages, groups, posts, reports, and blocks may be processed to operate the community and protect users. Audio and video calls use Cloudflare RealtimeKit; Havenia does not record them unless a clearly identified feature or legal obligation provides otherwise. Other participants may retain or report content they can access.

8. Automated moderation

Before publication, a word filter rejects clearly abusive content (targeted insults, hate, threats, sexually explicit content, spam links); private messages and listening sessions are not filtered. When content is reported, its text — and only that text — is analysed by a model hosted by Cloudflare (Workers AI) to assess the risk; depending on severity and history, a warning, hiding, or a temporary pause may apply automatically. A ban is always decided by a person on the team. You can appeal a sanction or a rejection from within the app.

9. Payments, local storage, and security

Stripe receives data needed for payments and subscriptions on the web; Havenia does not store full card numbers. For a purchase in the iOS or Android app, Apple or Google processes the payment; Havenia only receives the purchase confirmation (product, transaction identifier, validity dates) to activate your support. On the web, local storage may maintain sessions and preferences. Sentry may receive technical logs and errors for reliability and security.

10. Retention

Data is kept for the time necessary for the purposes described above, then deleted, anonymized, or archived in accordance with applicable legal obligations and our internal retention policies.

11. Your rights

You may request access to your data, export of your data, deletion of your account, or the exercise of any other right provided by applicable regulations, including from the “Manage my data” screen in the app.

12. Other rights and complaints

You may also request rectification, restriction, portability, or object to certain processing where these rights apply. You may contact Havenia or lodge a complaint with the CNIL or the authority in your place of residence.

13. Security

We implement reasonable technical and organizational measures to protect your data against loss, unauthorized access, alteration, or disclosure.

14. Contact

For any question relating to this policy or your personal data, you can contact the Havenia team using the contact details available in the app or on the website.