Privacy Policy

We collect only what the product needs to work:

• Account information — your email address, display name, password (stored only as a salted hash by our authentication provider), and, if you sign in with Google, the basic profile fields Google returns.
• Household content you enter — household and member names, roles, birthdays or ages, sizes, activities, allergies and dietary notes, calendar events, tasks, notes captured in Capture, meal plans, grocery lists, and caregiver summaries.
• Connected grocery or retailer accounts — if you choose to connect an account with a supported grocery retailer using that retailer's OAuth 2.0 sign-in, we receive and store an access token and refresh token issued by the retailer, an internal connection record, and the scopes you granted. We may also receive your selected store, product search results, and cart contents for the items you ask us to add. We never see or receive your retailer password.
• Search and location context — the search terms you enter and, if you provide it, a ZIP or postal code used to scope results to nearby stores.
• Technical data — basic log data such as IP address, browser type and timestamps, generated automatically when you use the service, used for security and debugging.

We do not collect payment card details. Grocery orders and payments are completed on the retailer's own site or app.

• To provide the service: run your household workspace, calendar, tasks, meals and lists.
• To generate suggestions — meal ideas, product and service recommendations, and parsed items from Capture — using the processors described in section 4.
• To perform actions you explicitly request on a connected retailer account, such as matching a grocery item to a product and adding it to your cart.
• To send the notifications you turn on (task assignments, reminders, invites, "Honey Please Do").
• To secure accounts, prevent abuse, debug problems, and comply with legal obligations.

We do not use your household content to train third-party AI models, and we do not use it for advertising.

When you use private context search, Havennai strips names and sensitive fields before anything leaves the app. Only the non-identifying context you allow — such as a shoe size, an age range or an activity — is included in the outbound query so results are actually useful. You can turn each of those categories off in the in-app Privacy Center, and sensitive fields such as medical and allergy notes are never sent externally.

We share the minimum necessary data with vendors that process it on our behalf under contract. We do not sell personal information to anyone. Rather than naming vendors that may change over time, we describe the categories of providers we rely on:

• Hosting and infrastructure providers — running the site and delivering it to your browser.
• Database, authentication and file storage providers — storing your account and household data securely.
• Email delivery providers — sending only the notifications you enable.
• AI and web search providers — generating meal ideas, parsing free-text notes, and returning public web and recipe results. Only scrubbed, non-identifying text is sent.
• Mapping and location providers — checking that recommended stores exist near the postal code you provide.
• Retailers and grocery services you choose to connect — receiving only the product and cart requests you initiate. Their handling of that data is governed by their own privacy policy.

The specific providers in each category may change as the product evolves. We require every provider to protect your data under contract and to use it only to provide services to us — never for their own advertising or model training.

We may also disclose information if required by law, to enforce our Terms, or in connection with a merger or acquisition (with notice to you).

Connecting a retailer account is always optional and always initiated by you. Tokens issued by a retailer are encrypted at rest using AES-GCM with a server-held key, stored in rows that are unreadable from the browser, and used only by server-side code to fulfill actions you request.

You can disconnect at any time from the grocery screen in the app. Disconnecting deletes the stored access and refresh tokens and the connection record. You can also revoke Havennai's access directly in your retailer account settings; we treat a revoked token as a disconnected account.

All traffic is encrypted in transit with TLS. Data is encrypted at rest by our hosting providers, and third-party tokens receive an additional application-level AES-GCM encryption layer. Access to household data is enforced by row-level security policies so one household cannot read another's data, and secrets and privileged keys are available only to server-side code. No system is perfectly secure, but we work to keep the exposed surface small.

We keep your household data for as long as your account is active. You can delete individual members, events, tasks and lists at any time in the app, and you can request deletion of your entire account and household by emailing [email protected]. We complete verified deletion requests within 30 days, except for limited records we must retain for legal or fraud-prevention purposes. Backups age out on a rolling basis.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to withdraw consent. Residents of California (CCPA/CPRA) additionally have the right to know what is collected and to opt out of sale or sharing — Havennai does not sell or share personal information, so there is nothing to opt out of. Residents of the EEA and UK (GDPR) may also object to or restrict processing and lodge a complaint with their supervisory authority.

To exercise any right, email [email protected] from the address on your account. We will not discriminate against you for making a request.

Havennai is designed for parents and caregivers. Accounts may only be created by adults 18 or older, and children cannot register, sign in, or use the service directly. A parent or guardian may add details about their own children (such as a first name, age, size, activity or allergy) to their household profile; that information is entered by the adult account holder, is visible only to members of that household, and is never used for advertising or profiling. The service is not directed to children under 13, and we do not knowingly collect information directly from children. A parent can delete a child's profile at any time in the app or by emailing [email protected].

We use cookies and browser local storage only for essential purposes: keeping you signed in, remembering whether you are viewing the demo, and storing interface preferences. We do not use advertising or cross-site tracking cookies.

Emails are sent only to addresses entered by a member of your household, and only for the notifications you enable. Every non-essential email includes an unsubscribe link.

Havennai is operated from the United States, and your information is processed there. If you use the service from outside the U.S., you understand that your information will be transferred to and processed in the U.S.

We may update this policy as the product evolves. We will change the "Last updated" date above and, for material changes, notify account holders by email or in-app notice before the change takes effect.

Havennai — [email protected]. We respond to privacy requests within 30 days.