Haven Desktop and desktop.haven.app

Privacy Policy

Last updated 15 September 2026

Who we are

Haven Holding Company L.L.C, Dubai, United Arab Emirates. Questions to mj@haven.app.

The application

Haven Desktop does not create an account, does not require one and does not transmit your data. Your face measurement, your protected files and your activity record are stored encrypted on your own machine.

Camera frames are processed in memory and discarded. The only images written to disk are the evidence images captured when access is refused, and those stay on your machine.

Usage insights

Once a day, Haven Desktop sends us a small set of counts so we can see how the product is actually used. It is a deliberately short list, and it is worth reading in full because what is not in it is the point.

What is sent:

• A random identifier created on your Mac the first time this runs. It is not your device’s name, not derived from your hardware, and means nothing anywhere else.
• The version of Haven Desktop and the major version of macOS.
• Whether full system protection is switched on, and your check interval.
• How many folders, applications and vault files you protect.

What is never sent: the names of your folders, the identities of your applications, your computer’s name, your username, your email address, your pairing key, and anything whatsoever about your face. Counts travel; identities do not. “Seven applications” tells us something useful about the product and nothing at all about you.

You can switch this off at any time in Settings → Share usage insights. When it is off, nothing is assembled and nothing is sent — the switch is checked before the figures are gathered, not applied afterwards. Your face, your files and your activity record never leave your computer whether it is on or off.

Your Haven ID

From the release that introduces the free trial, Haven Desktop creates a private, device-bound identifier for your Mac. It exists so that a trial can be started and so that any free months you earn by protecting someone else can be credited to you. It is not an account: there is no email address, no password and no name. Please read this section as carefully as the one above, because the word “account” is one we have chosen not to use, and you should be able to see why.

How it works: the first time it runs, Haven Desktop generates a cryptographic key pair on your Mac. The private half stays on your Mac, encrypted under your login keychain, and never leaves. The public half is registered with us, and every later request from your Mac is signed with the private half. There is no token to steal and nothing in a request that names a person.

What is sent, and this is the whole list:

• A random device identifier created on your Mac. Not your device’s name, not derived from your hardware.
• The public half of the key described above.
• That the device is a Mac, and the major version of macOS.
• The version of Haven Desktop.

What is never sent: your computer’s name, your username, your email address, the names of your folders or applications, your activity record, and anything whatsoever about your face.

The Share usage insights switch does not cover this, and we say so in the application: a trial cannot exist without an identifier to attach it to. If you do not want Haven to hold one, do not install the trial. If you later pay for Haven, your payment is attached to this identifier by our payment provider; we do not use your email address as the key to your identity, and we will only ever hold an email address you choose to give us.

This website

What we hold

If you start a trial we store the email address you entered, the date you entered it, which page you started from and which version of the application was current at the time. That is the whole record.

Why

To tell you when your 30 days are ending and how to subscribe. We do this on the basis of the consent you gave at the download prompt.

How long

Until you unsubscribe, or 24 months after your last interaction with us, whichever comes first. After that the record is deleted.

Who else sees it

The record is held in a database operated by Supabase in the European Union, and emails are sent using an email delivery provider. Neither uses your address for anything of their own. We do not sell, rent or share your address with anyone else.

Cookies

This site sets no cookies and runs no analytics or advertising trackers.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to mj@haven.app. Because the record is one email address and a date, we can usually action this the same day. Every email we send carries an unsubscribe link.

Changes

Changes are published here with a new date above.

Contact

Haven Holding Company L.L.C · Dubai, United Arab Emirates · mj@haven.app