Privacy Policy
We keep things simple: we collect what we need to make HAVEN work, we protect it carefully, and we never sell it.
Table of Contents
1. Who We Are
HAVEN is a food social platform developed and operated by Breachora. When this Privacy Policy refers to "we," "us," or "our," it refers to Breachora and the HAVEN mobile application (available on iOS and Android) and website at havenlifestyle.app.
This Privacy Policy describes how we collect, use, store, share, and protect information about you when you use HAVEN. By creating an account or using any part of the HAVEN platform, you agree to the practices described in this policy.
If you have questions about this policy or how we handle your data, you can reach us at breachora@gmail.com.
2. Information We Collect
We collect the following categories of information:
2.1 Account Information
When you create a HAVEN account, we collect:
- Your username and display name
- Your email address
- Your password (stored in hashed form โ we never see your plain-text password)
- Your profile photo (if you choose to upload one)
- Your bio (if you choose to add one)
- Your date of birth (to verify age eligibility โ users must be 13 or older)
2.2 Content You Post
When you create posts on HAVEN, we collect and store:
- Food photos you upload
- Dish name, food score, cuisine tag, restaurant tag
- Ingredients you list
- Scene tag (cozy, date night, solo, etc.)
- Caption text
- The date and time of the post
- The restaurant or location associated with the post
Posts you mark as public are visible to other HAVEN users and may appear in search results. Posts you delete are removed from public view immediately, though they may remain in our systems for a limited backup retention period (see Section 8).
2.3 Activity Data
We collect information about how you use the app, including:
- Posts you like, comment on, save, or repost
- Accounts you follow and accounts that follow you
- Searches you perform within the app
- Restaurants and posts you view in the map feature
- Notifications you receive and interact with
2.4 Device & Technical Information
We automatically collect certain technical information when you use HAVEN:
- Device type, operating system, and OS version
- App version
- IP address (used to estimate general location for map relevance; not stored long-term)
- Device identifiers (for push notifications)
- Crash reports and performance data (to help us fix bugs)
2.5 Location Data
HAVEN requests access to your device's location for the purpose of the Map feature โ to show restaurants near you. See Section 6 for full details on how location data is handled.
2.6 Verification Information
If you apply for individual verification, we collect the information you submit in your verification application. This is reviewed manually by our team and is not shared externally. For business verification applicants, we may collect business name, website, and contact information.
3. How We Use Your Information
We use the information we collect to:
- Operate the platform. Create and manage your account, display your posts, power your feed, and make HAVEN function as described.
- Power the map and discovery features. Use your location (when you grant permission) to show restaurants near you and let you explore what's nearby.
- Enable social features. Show your posts to your followers, generate notifications about activity on your content, and allow users to find you via search.
- Build restaurant pages. Aggregate posts to create community-powered restaurant pages with average scores and top dishes.
- Improve the app. Analyze usage patterns and crash data to fix bugs, improve performance, and build better features.
- Enforce our policies. Detect and address violations of our Terms of Service, including spam, harassment, and prohibited content.
- Process verification requests. Review your application for individual or business verification status.
- Communicate with you. Send push notifications about activity on your posts and profile, and send important account communications (like password resets and policy updates).
We do not use your information to build advertising profiles. We do not serve targeted advertising based on your personal data. We do not sell your information to third parties.
4. Third-Party Services
HAVEN uses certain third-party services to provide core functionality. These services may process your data in the course of providing their services to us.
4.1 Supabase
We use Supabase for backend infrastructure โ including database storage, authentication, and file storage. Your account data, posts, and uploaded photos are stored on Supabase-managed servers. Supabase processes data in accordance with its own Privacy Policy and is compliant with standard data security practices. More information: supabase.com/privacy.
4.2 Google Places API
We use the Google Places API to power restaurant search and the Map feature. When you search for or tag a restaurant, that query may be sent to Google's Places API to retrieve location data. Google processes these queries in accordance with Google's Privacy Policy. We do not send your personal account information to Google Places โ only search queries. More information: policies.google.com/privacy.
4.3 Push Notification Services
We use Apple Push Notification Service (APNs) and Google Firebase Cloud Messaging (FCM) to deliver push notifications. These services require us to send your device token to Apple or Google. Device tokens are used solely for the purpose of delivering notifications.
4.4 Note on RevenueCat
HAVEN previously integrated RevenueCat for in-app purchase management. This integration has been removed. HAVEN does not currently offer paid subscriptions or in-app purchases. If this changes in the future, this policy will be updated accordingly.
5. Data Sharing & Disclosure
We do not sell your personal information. We share your information only in the following circumstances:
- Service providers. We share necessary data with the third-party services described in Section 4 to operate the platform.
- Other users. Your public profile, public posts, and follower/following counts are visible to other HAVEN users. Your Food Journal and saved posts are private and never shared.
- Legal requirements. We may disclose information if required by law, court order, or other legal process, or if we believe disclosure is necessary to protect the safety of any person or to address fraud or security issues.
- Business transfers. If Breachora is acquired, merged, or its assets are transferred to another company, your information may be transferred as part of that transaction. We will notify you of any such change via the app or email.
6. Location Data
HAVEN requests "while using the app" location permission to power the Map feature. We use your device's GPS coordinates to:
- Show restaurants near your current location on the map
- Rank search results by proximity when relevant
- Allow you to tag restaurant locations in posts
We do not track your location in the background when you are not actively using the app. We do not store a history of your location over time. Precise coordinates are used to generate nearby restaurant queries in real time and are not retained after the query is resolved.
You can revoke location permission at any time in your device settings. If you revoke permission, the Map feature will not function, but all other features of the app will continue to work normally.
8. Data Retention
We retain your information for as long as your account is active or as needed to provide the service. When you delete content (posts, photos, etc.), that content is removed from public view immediately. Deleted content may remain in encrypted backups for up to 30 days before being permanently purged.
When you delete your HAVEN account:
- Your profile, posts, and activity data are deleted from the platform within 30 days
- Your username becomes available for others to use after deletion
- Aggregated, anonymized data (such as restaurant average scores calculated from your posts) may persist as those scores are statistical aggregates, not tied to your account
- We may retain records required for legal compliance purposes for up to 7 years
9. Security
We take the security of your information seriously. Our security measures include:
- All data transmitted between your device and our servers is encrypted using TLS/HTTPS
- Passwords are stored using one-way cryptographic hashing (we never store or see your plain-text password)
- Database access is restricted and access-controlled through Supabase's row-level security
- Uploaded photos are stored with access controls that prevent unauthorized retrieval
- We conduct periodic reviews of our security practices
No system is perfectly secure. If you believe your account has been compromised, please contact us immediately at breachora@gmail.com.
10. Your Rights
Depending on where you live, you may have certain rights regarding your personal information. Regardless of your location, we offer the following to all HAVEN users:
10.1 Access
You can view all of your posts, your profile information, and your activity within the app at any time.
10.2 Correction
You can update your profile information (username, display name, bio, photo) at any time from within the app.
10.3 Deletion
You can delete individual posts at any time from within the app. You can delete your entire account from Settings โ Account โ Delete Account. Account deletion is permanent and cannot be undone.
10.4 Data Export
You may request a copy of your data by emailing us at breachora@gmail.com. We will respond to data export requests within 30 days. The export will include your account information, post history, and activity data in a machine-readable format.
10.5 Opt Out of Non-Essential Communications
You can manage your notification preferences within the app (Settings โ Notifications). You may also opt out of push notifications entirely through your device settings.
10.6 California Users (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise any CCPA rights, contact us at breachora@gmail.com.
10.7 EEA/UK Users (GDPR)
If you are located in the European Economic Area or United Kingdom, you have rights under the GDPR including the right of access, rectification, erasure, restriction of processing, and data portability. Our lawful basis for processing your data is primarily the performance of a contract (providing the app service you signed up for). To exercise your GDPR rights, contact us at breachora@gmail.com.
11. Children's Privacy
HAVEN requires users to be at least 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that a user is under 13, we will terminate that account and delete the associated data promptly.
If you are a parent or guardian and believe your child under 13 has created a HAVEN account, please contact us at breachora@gmail.com and we will address it immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app and/or by email at least 14 days before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.
Continued use of HAVEN after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact Us
If you have any questions about this Privacy Policy, how we handle your data, or if you wish to exercise any of your rights, please contact us:
We aim to respond to all privacy-related inquiries within 7 business days.