Privacy

Effective 15 May 2026

About this page

This is the privacy summary for havenlocal.ai — the public website and the Capri web demo it hosts. It is not a policy for the on-device Haven product, which is still being built.

We have tried to describe what is actually true today, not what sounds reassuring. This page will be updated as the product evolves.

What we collect

If you join the waitlist, we collect the email address you submit.

If you use the Capri chat, we keep the messages you send and the replies returned to you in our database, together with a timestamp, the response time, and a status code. Our server logs additionally capture the message text and a one-way hashed and truncated form of your IP address. We do not store the raw IP in our application database or application logs.

During a chat request, your raw IP is briefly seen by Cloudflare Turnstile (a one-time bot check) and by Upstash Redis (a short-lived per-IP rate-limit counter). We use them for bot detection and rate limiting; how each provider handles that information is governed by their own terms and settings.

Every page on the site loads Google Analytics 4, which sets its standard cookies and records page-view events.

What we don't collect

There is no account, no password, and no profile to create. We do not ask for your name, location, phone number, or any identifier beyond the email you choose to share.

We do not read anything from your device. The chat cannot see your photos, your files, your network, or your browser history. It only sees what you type into it on this page.

Where the data goes

The website is hosted on Vercel, which therefore sees every request as part of normal hosting and writes server logs. Those logs include the same chat text described above.

When you chat with Capri, your message and the recent conversation turns are sent to OpenAI for inference. OpenAI processes the request under its standard API terms; we have not enrolled in a custom zero-retention arrangement at this time.

Waitlist emails and chat transcripts are stored in a hosted PostgreSQL database that we operate. Page-view analytics flow to Google Analytics.

We do not sell personal data, and we do not share it with advertising networks or data brokers.

How long we keep it

Waitlist emails are kept until you ask us to remove them, or until we retire the waitlist.

Chat messages and replies are currently kept without a fixed deletion window. We use them to understand how people are exploring Haven and to improve how Capri explains it. We expect to introduce a rolling deletion window as the product matures, and we will note it here when we do.

Server logs and analytics events are retained for the default windows set by Vercel and Google Analytics respectively.

Deletion and contact

To remove your waitlist entry, request deletion of your chat history, or ask anything about this policy, email hello@havenlocal.ai. For chat deletion requests, please share an approximate date and a short phrase from the conversation so we can find it.

A note on local-first

This website and the Capri web demo are cloud services. The Haven product itself is being designed to run locally, in your home, on hardware you control. The two are not the same thing. The AI Disclosure page goes into what that means in practice.