Privacy policy
Haven processes personal data in line with the General Data Protection Regulation (GDPR). This document describes what data we collect, why, and what your rights are. (Translation for convenience; the Dutch version is authoritative.)
What data we collect
- Account data: username, email address and an encrypted version of your password.
- Content you enter in the app: names and descriptions of assets, photos, reservations, notes, tasks, inventory items and chat messages.
- Technical data: IP address and timestamp of requests, solely for rate-limiting against abuse. These are kept for a maximum of 24 hours.
Why we process this data
- To provide the service: signing in, authorisation and syncing content between members of a shared asset.
- To prevent abuse (brute-force login attempts, spam).
We do not use your data for advertising, profiling or behavioural analysis.
Who we share data with
We don't share your data with anyone outside the service. Content you add to a shared asset is visible to the other approved members of that asset; that's the purpose of the app.
Data is stored on a server in Helsinki, Finland (Hetzner Cloud), within the EU.
Retention period
We keep your data for as long as you have an active account. When you delete your account, your data is permanently removed as described under "Your rights".
Your rights
- Access and correction: via your profile in the app, or by contacting us.
- Deletion: via Settings → Account → Delete account in the app. This removes your account, all assets you founded (including the related notes, tasks, reservations, inventory and chats), and all your tokens. Content on other people's assets remains but is anonymised.
- Don't use the app anymore? Email the address below; we'll delete your account within 30 days.
- File a complaint: with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
Security
Traffic between the app and the server is encrypted via HTTPS (TLS). Passwords are hashed and stored with PBKDF2. Access tokens are random and cannot be derived from account data.
Minimum age
Haven is intended for users aged 16 and over. Don't create an account if you're younger.
Changes
Changes to this policy are announced at the top of this page. Material changes are communicated via email to the address linked to your account.
Contact
For questions or requests: stefan.strijker@outlook.com.