Privacy Policy

Your household data is yours. This policy explains, in plain language, what Haivenly collects, how we use it, and the promises we make. We have kept the legalese to a minimum.

What we collect

Account information: your name, email address, and any household members you invite.

Your household data: the items you track, recipes you save, shopping lists, messages, tasks, calendar events, meal preferences and receipts you scan. Receipts include the store, items and prices on them.

Usage and device data: basic information about how you use Haivenly, so we can keep it running and make it better.

AI processing and your agreement

With your explicit permission, Haivenly uses Anthropic (Claude), Microsoft Azure and Supabase to process your messages, relevant household context, receipt photos and text, items, recipes, meal preferences, and task or project text. This supports receipt reading, request understanding, suggestions and text search. AI is part of Haivenly’s core service. We collect your explicit agreement during account creation, before AI processing begins. Signing in does not ask you to agree again. AI processing is also described in our Terms and Conditions, available with this policy in Settings. You can stop using Haivenly or delete your account in Settings. This policy and the Terms and Conditions remain available to existing accounts.

Anonymous knowledge sharing

Haivenly improves its shared product catalog from what households buy, without identifying anyone. Sharing is on by default for new households. A household admin can turn it off at any time in Settings → Privacy.

What we share: how an item’s name is printed on a receipt at a store chain (for example, an abbreviated product name), the product it matches, its package size, and the prices paid. When we match a printed name to a store’s own public product listing, that match is added to the catalog for every household. Other naming, matching and package facts learned from household purchases are published only after at least three distinct sharing households agree. Prices can come from a single sharing household and are published by store chain and month. Once enough households share prices in an area, we may also show prices for that area, such as a ZIP code. We never publish prices for a specific store location.

What we never share: your account or household identity, receipt photos, the rest of your receipt (your other items, totals, store location or when you shopped), private household references or precise purchase times. We do not sell personal information.

Turning sharing off stops future sharing and removes your household’s past prices: we recalculate each published price from the households still sharing and delete any price no other household supports. Anonymous naming, matching and package facts already published remain after you stop sharing or delete your account. The signup AI agreement and anonymous sharing are separate choices.

Data security

We protect your information with encryption, secure infrastructure, and regular reviews.

Your rights and account deletion

Start deletion in Settings → Profile, or from the signup completion screen. We remove account identity, private records, raw receipt evidence and private images. Shared household purchases, tasks, recipes and calendar events may remain for other members with your attribution removed. Shared authored text may remain. You choose a responsible adult for a surviving household; the last responsible adult explicitly confirms household deletion and removal of managed children without another household. Shared ownership in a household you previously left passes to an existing eligible adult.

Access ends when deletion is accepted. Cleanup retries automatically if a service is unavailable. Historic private conversation records whose ownership was already detached follow their existing retention window of up to 24 hours. Deletion stays pending until cleanup finishes.

A limited cleanup record exists during retries; its personal details are removed at completion. The anonymous status credential expires after 30 days. For privacy, access, export or correction requests, contact hello@haivenly.app.

Changes and how to reach us

If we ever make a meaningful change to how we use your data, we will tell you first. If you have any questions, email us at hello@haivenly.app.