Haven — Effective date: 1 April 2026 · Last updated: 1 April 2026
Privacy Policy
Haven ("Haven," "we," "us," or "our"), operated by LasyaAitech, provides a mobile application and related services (the "Service") designed to support the mental wellbeing of family caregivers. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have.
Our core promise: What you share in Haven stays yours. We do not sell your personal information, and we do not share it or use it to train AI models without your consent.
By using Haven, you agree to this Privacy Policy. If you do not agree, please do not use the Service.
1. Who we are and how to reach us
- Data controller: LasyaAitech, Hyderabad, Telangana, India
- Privacy contact: privacy@lasyaaitech.com
2. Information we collect
a) Information you give us
- Account information: email address and password (stored only as salted hashes), or your Apple ID identifier if you use Sign in with Apple.
- Caregiver profile (onboarding): who you care for, how long you have been caregiving, your level of support, and your current primary emotion.
- Wellbeing content you create: daily check-in responses, free-text notes, CBT thought records, and Compassion Fatigue Assessment answers. This is sensitive information about your mental and emotional state.
- Support communications: messages you send to support.
b) Information collected automatically
- Device & technical data: device model, operating system version, app version, language, time zone, and crash/diagnostic logs.
- Usage data: screens viewed, features used, check-in frequency, and similar in-app events.
- Push token: a Firebase Cloud Messaging (FCM) token, if you enable notifications.
c) Information from third parties
Subscription & purchase data from RevenueCat and Apple App Store or Google Play. We do not receive or store your full card number.
We do not knowingly collect information about the person you care for. Please avoid entering another person's identifying or health details in free-text fields.
3. How we use your information
- create and secure your account and authenticate you;
- personalise your experience using your caregiver profile;
- generate AI reflections, permission-to-rest messages, assessment interpretations, and mood-trend observations;
- calculate and display your burnout indicators and trends;
- send the notifications you have enabled;
- manage subscriptions, the 7-day free trial, and promo/coupon codes;
- provide customer support, maintain security, and comply with legal obligations.
4. Legal bases (for users in the EEA/UK)
Where GDPR/UK GDPR applies, we rely on contract, consent (for notifications and special-category wellbeing data), legitimate interests, and legal obligation. We process wellbeing data that may be considered special-category data on the basis of your explicit consent.
5. AI processing
Haven uses the Anthropic Claude API to generate supportive, personalised text. Relevant context (such as your check-in answers and caregiver profile) is sent securely to Anthropic for processing at the time you request that feature. We instruct our AI provider not to use your inputs or outputs to train their models. AI output is supportive content only — it is not medical advice, diagnosis, or therapy.
6. How we share information
| Recipient | Purpose |
|---|---|
| Supabase | Database, authentication, and storage |
| Anthropic (Claude API) | AI-generated supportive text |
| RevenueCat | Subscription and trial management |
| Apple App Store / Google Play | Payment processing and store entitlements |
| Google Firebase (FCM) | Push notification delivery |
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
7. Data retention
We keep your information for as long as your account is active. When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain limited records to meet legal, tax, or security obligations.
8. Security
We protect your data with encryption in transit (TLS) and at rest, hashed passwords, row-level access controls, least-privilege database access, and audit logging.
9. Your rights and choices
Depending on where you live, you may have the right to access, export, correct, delete, withdraw consent, object to or restrict processing, and lodge a complaint with your local data protection authority.
To exercise any right, contact privacy@lasyaaitech.com or use the in-app controls.
10. International transfers
We may process and store information in India, the United States, and other countries where we or our providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses.
11. Children
Haven is intended for adults and is not directed to children under 18. If you believe a child has provided us information, contact privacy@lasyaaitech.com and we will delete it.
12. Important: not a medical service
Haven is a self-guided wellness tool. It is not a medical device, not therapy, not a substitute for professional care, and not for emergencies. If you are in crisis, contact your local emergency number or a crisis line in your region immediately.
13. Changes to this Policy
We may update this Policy. If we make material changes, we will notify you in-app or by email and update the "Last updated" date.
14. Contact
Questions or requests? Email privacy@lasyaaitech.com or write to LasyaAitech, Hyderabad, Telangana, India.