Haven

Privacy Policy

Effective 3 September 2026 · Applies to Haven for iPhone and iPad

Haven collects nothing. There are no accounts, no servers of mine, no analytics, and no third-party software development kits. Everything you record — cycles, symptoms, notes, and the insights Haven generates from them — is created, stored, and read entirely on your own device. I never see it, and I have no technical means of seeing it.

Haven is developed and published by Justin Bloom, an independent developer based in State College, Pennsylvania, United States ("I", "me"). This policy explains what Haven does with information, and — far more to the point for an app of this kind — what it cannot do.

Why this matters more here than in most apps

Reproductive health information is among the most sensitive data a person keeps. Cycle-tracking applications have historically been a poor custodian of it: many transmit intimate records to their own servers, share them with advertising networks and analytics vendors, and hold them in a form that can be sold, breached, or compelled by legal process. Haven is architected specifically so that none of those outcomes are possible. That is not a promise about how carefully I will handle your data. It is a statement that your data is never in my hands to handle.

1. Information collected about you

None. To be specific about each category:

I hold no database of users, because there are no users to hold a record of. I could not produce a list of the people who use Haven if I wanted to.

2. What Haven stores on your device

Everything Haven knows about you is written to Haven's private, sandboxed storage area on your device, and nowhere else. Depending on which features you use, that may include:

• Cycle records — period start and end dates, flow, and the derived cycle history built from them.
• Symptoms and observations — anything you choose to log, such as symptoms, moods, temperature, tests, medication, or intimacy.
• Notes — free text you write.
• Predictions and insights — estimates Haven calculates from your own entries.
• Settings — your preferences, including whether the app lock is enabled and what reminders you have set.

This storage is sandboxed by iOS: other applications on your device cannot read it, and it is not written to your Photos library, your Files app, or any shared location. Deleting an entry deletes it. Deleting Haven from your device deletes all of it.

3. On-device intelligence

Haven uses Apple's on-device foundation model, through the Foundation Models framework built into iOS, to generate summaries and insights from the entries you have made. This processing runs on the silicon in your iPhone. Your entries are not sent to Apple, are not sent to me, are not sent to OpenAI, Anthropic, Google, or any other model provider, and are not sent to a cloud inference service of any kind. No network connection is required for it, and none is made for it.

Nothing you record is used to train any model — mine, Apple's, or anyone else's.

4. Apple Health (HealthKit)

Haven does not read from or write to Apple Health. It does not request HealthKit permissions, and your Haven records are kept separate from your Health app data.

If a future version of Haven offers Apple Health integration, it will be strictly optional, it will require your explicit permission through the standard iOS prompt, and this policy will be updated to describe it before that version is released. Health data obtained through HealthKit would never be used for advertising, never shared with third parties, and never transmitted off your device — commitments that Apple's own App Review guidelines require and that I would hold to regardless.

5. Network activity

Haven does not send your records anywhere, because Haven does not communicate with any server operated by me. There is no backend, no API, no sync endpoint, and no telemetry endpoint. The app functions fully with your device in Airplane Mode, and you are welcome to verify that.

6. Device backups

One honest caveat, because it is the single way a copy of your Haven data can exist outside the device itself. If you have iCloud Backup switched on, iOS includes app data — including Haven's — in your device backup, exactly as it does for your other apps. That backup is held in your own Apple Account, encrypted, under Apple's terms and Apple's control. Neither Haven nor I can read it, and no data is placed there by Haven; it is your device's backup system doing what you have asked it to do.

If you would prefer Haven's data not be included in your iCloud backup, you can exclude it in Settings → [your name] → iCloud → Manage Account Storage → Backups → [your device], where each app can be switched off individually. Please be aware that excluding Haven from backups means a restored or replaced device will not have your history.

7. Legal process and government requests

This section exists because people using an app of this kind reasonably ask about it.

I hold no copy of your Haven data. If I were served with a subpoena, warrant, court order, or any other legal demand for the records of a Haven user, the only truthful response available to me would be that no such records exist and that I have no ability to obtain them. There is no account to identify, no database to query, no backup of yours in my possession, and no key I could be compelled to surrender. That is a deliberate design decision, not an accident of scale, and it is not a property I intend to give up.

8. No sale, no sharing, no advertising

I have never sold, shared, rented, or otherwise disclosed user data from Haven or any other app I publish, and I will not. Haven contains no advertising, no advertising identifiers, no attribution frameworks, no data-broker integrations, and no analytics vendors. For the avoidance of doubt under United States consumer-health-privacy statutes — including the Washington My Health My Data Act and Nevada Senate Bill 370 — Haven does not collect, receive, process, share, or sell consumer health data, and no such data is transmitted from your device by the app.

9. Your rights

Privacy statutes including the EU and UK General Data Protection Regulation, the California Consumer Privacy Act as amended, and comparable state laws give you rights of access, correction, deletion, portability, and objection with respect to personal data that a company processes about you.

I process no personal data about you, so there is nothing for me to disclose, correct, delete, or transfer. In practice, you exercise every one of those rights directly and immediately on your own device: you hold the only copy, you can read and edit any entry at any time, you can export your data, and you can erase all of it by deleting an entry or by deleting the app. No request to me, and no waiting period, is involved. If you would like written confirmation that I hold no data about you, email me at the address below and I will provide it.

10. Purchases

Haven is a one-time purchase. Payment is processed entirely by Apple through the App Store. I never see your payment card, billing address, or Apple Account details. Apple provides me with aggregated, anonymised sales and territory reports that cannot be traced to an individual purchaser.

11. Crash and diagnostic reports

Haven contains no third-party crash-reporting or diagnostics framework. If you have chosen to share analytics and improvements with app developers in Settings → Privacy & Security → Analytics & Improvements, Apple may make anonymised crash reports available to me through App Store Connect. Those reports describe where the code stopped running; they contain no health entries, no notes, and nothing that identifies you. You can switch that sharing off at any time in the same settings screen.

12. Security

Haven's records are stored inside the app's sandbox and protected by iOS Data Protection, which encrypts app data at rest and keys that encryption to your device passcode. Haven can additionally be locked behind Face ID, Touch ID, or your device passcode, so that the app's contents are not visible to someone holding an already-unlocked phone. Biometric matching is performed entirely by iOS; Haven receives only a success or failure result and never has access to your biometric data.

Two things are worth saying plainly. First, none of the above is a substitute for a device passcode — set one. Second, no security measure protects against someone who knows your passcode and has your unlocked device in their hands; if that is a concern in your circumstances, please take it seriously when deciding what to record.

13. Children

Haven is not directed at children under 13 and is not marketed to them. Since Haven collects no information from anyone, it collects no information from children. Nothing recorded in Haven by a user of any age is transmitted off the device or made available to me.

14. International use

Because no data leaves your device, no international transfer of personal data occurs when you use Haven, wherever in the world you are.

15. Changes to this policy

If a future version of Haven changes what the app does with information — for example, by introducing an optional Apple Health integration or an optional encrypted export — this policy will be updated to describe the change before that version is released, the effective date above will be revised, and the change will be noted in the App Store release notes. A change will never be applied retroactively to data recorded under an earlier version. This page is the authoritative, current version of the policy.

Terms of Service

Effective 3 September 2026 · The end-user licence agreement for Haven

These terms are the agreement between you and Justin Bloom governing your use of Haven. Please read section 3 in particular: Haven is a personal record-keeping and general wellness tool, not a medical device, and it must not be relied upon as a method of contraception.

1. The agreement and the parties

Haven is licensed, not sold, to you by Justin Bloom, State College, Pennsylvania, United States ("Developer", "I", "me"). This agreement is concluded between you and me alone, and not with Apple Inc. Apple is not a party to it and is not responsible for Haven or its contents. By downloading, installing, or using Haven, you accept these terms. If you do not accept them, do not use the app and delete it from your device.

2. Licence granted to you

I grant you a personal, non-exclusive, non-transferable, revocable licence to install and use Haven on any Apple-branded device that you own or control, as permitted by the Usage Rules set out in the Apple Media Services Terms and Conditions, including their provisions for Family Sharing. This licence does not permit you to make Haven available over a network where it could be used by multiple devices at once, except as those Usage Rules allow.

3. Haven is not medical advice and is not a medical device

• Not contraception. Haven must not be used as a method of birth control or as a means of preventing pregnancy. Its predictions are not a fertility-awareness contraceptive method and are not validated as one. If you are trying to avoid pregnancy, use a contraceptive method recommended by a qualified healthcare professional.
• Predictions are estimates. Cycle predictions, fertile-window estimates, and any similar output are statistical projections calculated from the entries you have made. Cycles vary for many reasons — illness, stress, travel, medication, breastfeeding, perimenopause, and underlying medical conditions among them — and these estimates are frequently wrong. They are offered for your interest, not for reliance.
• Not a substitute for professional care. Nothing in Haven is medical advice. Always consult a qualified healthcare professional about your health, your cycle, fertility, pregnancy, contraception, or any symptom that concerns you, and never disregard or delay professional advice because of something Haven displayed.
• Emergencies. Haven is not an emergency service. If you believe you are experiencing a medical emergency, contact your local emergency number or attend an emergency department immediately.

4. On-device intelligence has limits

Where Haven summarises your entries or generates insights using the on-device foundation model provided by iOS, that output is produced by a statistical language model. It can be incomplete, misleading, or simply wrong, and it can present an incorrect statement in confident language. Treat it as a convenience for reviewing what you yourself have recorded, never as a clinical finding or a basis for a health decision.

5. Your data, your responsibility

Your Haven records are stored only on your device. I hold no copy, and therefore I cannot restore anything for you under any circumstances. If your device is lost, damaged, reset, or replaced, if you delete the app, or if you delete an entry, that data is gone unless you have your own backup of it. Keeping backups — through your device backup, through Haven's export feature where available, or both — is your responsibility, and I strongly encourage it for anything you would be sorry to lose.

6. Acceptable use

You agree not to: copy, redistribute, sell, sublicense, rent, or lease Haven; modify, adapt, translate, or create derivative works of it; reverse engineer, decompile, or disassemble it, or attempt to derive its source code, except to the extent that applicable law expressly permits despite this restriction; remove or obscure any proprietary notice; circumvent any security or licensing mechanism; or use Haven in any way that breaks the law of the place where you are.

7. Intellectual property

Haven, its source code, design, artwork, and name remain my property and are protected by copyright and other intellectual property laws. This agreement transfers no ownership to you beyond the licence described in section 2. The records you create in Haven are, and remain, entirely yours; I claim no right or interest in them whatsoever, and — as the privacy policy above sets out — never receive them in the first place.

8. Purchase, refunds, and pricing

Haven is a one-time purchase from the App Store, with no subscription and no recurring charge. All payment, tax, receipt, and refund handling is performed by Apple under the Apple Media Services Terms and Conditions; refund requests must be made to Apple, which decides them at its discretion. I am not able to issue refunds directly. Prices may change for future purchasers; a change never affects a purchase you have already made.

9. Updates, changes, and availability

I may release updates that add, change, or remove features, and I may at some point stop developing or distributing Haven. Nothing in this agreement guarantees that Haven will remain available in the App Store, will remain compatible with future versions of iOS, or will continue to receive updates. If Haven is withdrawn, the copy already installed on your device continues to work for as long as your device and its operating system allow, and your data — which lives on that device — remains yours and remains accessible until you remove it. This page and the legal documents on it will remain published for as long as anyone may still be running the app.

10. Disclaimer of warranties

To the maximum extent permitted by applicable law, Haven is provided "as is" and "as available", without warranty of any kind, whether express, implied, or statutory, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement. I do not warrant that Haven will be uninterrupted, error-free, or free of defects, or that its predictions, calculations, or generated insights will be accurate or reliable. Some jurisdictions do not allow the exclusion of implied warranties, so parts of this section may not apply to you; nothing here limits any warranty or right that the law of your country grants you as a consumer and does not permit to be excluded.

11. Limitation of liability

To the maximum extent permitted by applicable law, I will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of data, loss of profits, loss of goodwill, or business interruption, arising out of or relating to your use of or inability to use Haven, on any theory of liability, even if I have been advised of the possibility of such damages. My total aggregate liability arising out of or relating to Haven and this agreement will not exceed the amount you actually paid for the app.

Nothing in this agreement excludes or limits my liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded or limited. If your country's consumer law gives you rights that this section conflicts with, that law prevails to the extent of the conflict.

12. Indemnity

You agree to indemnify and hold me harmless from any claim, demand, loss, or expense, including reasonable legal fees, arising from your unlawful use of Haven or your breach of these terms. This does not apply to claims arising from my own acts or omissions.

13. Maintenance and support

I am solely responsible for providing any maintenance and support for Haven, to the extent that I offer it — support is provided on a best-effort basis by email at the address in the contact section below. Apple has no obligation whatsoever to furnish any maintenance or support services for Haven.

14. Warranty failure and product claims

In the event of any failure of Haven to conform to any applicable warranty, you may notify Apple, and Apple will refund the purchase price to you. To the maximum extent permitted by applicable law, Apple has no other warranty obligation whatsoever with respect to Haven, and any other claims, losses, liabilities, damages, costs, or expenses attributable to a failure to conform to a warranty are my sole responsibility.

I, and not Apple, am responsible for addressing any claim by you or any third party relating to Haven or your possession and use of it, including: product liability claims; any claim that Haven fails to conform to an applicable legal or regulatory requirement; claims arising under consumer protection, privacy, or similar legislation; and any third-party claim that Haven or your possession and use of it infringes that third party's intellectual property rights. Investigation, defence, settlement, and discharge of any such intellectual property infringement claim is my sole responsibility.

15. Legal compliance

You represent and warrant that you are not located in a country subject to a United States Government embargo or designated by the United States Government as a "terrorist supporting" country, and that you are not listed on any United States Government list of prohibited or restricted parties.

16. Third-party terms

You must comply with any applicable third-party terms of agreement when using Haven — for example, the terms governing your wireless data service and the Apple Media Services Terms and Conditions.

17. Apple as third-party beneficiary

Apple Inc. and its subsidiaries are third-party beneficiaries of this agreement. Upon your acceptance of these terms, Apple has the right — and is deemed to have accepted the right — to enforce this agreement against you as a third-party beneficiary of it.

18. Governing law and venue

This agreement is governed by the laws of the Commonwealth of Pennsylvania, United States of America, without regard to its conflict-of-laws rules, and by applicable United States federal law. You and I agree that the state and federal courts sitting in Centre County, Pennsylvania have exclusive jurisdiction over any dispute arising out of this agreement. If you are a consumer resident in the European Union, the United Kingdom, or another jurisdiction whose law grants you the right to bring proceedings in your local courts and to the protection of your local mandatory consumer law, this section does not deprive you of that right or that protection.

19. General

If any provision of this agreement is held unenforceable, that provision will be limited or severed to the minimum extent necessary and the remainder will continue in full force. My failure to enforce any provision is not a waiver of it. You may not assign this agreement; I may assign it in connection with a transfer of the app. Together with the privacy policy above, this agreement is the entire agreement between you and me concerning Haven, and it supersedes any earlier understanding on the subject.

20. Changes to these terms

I may revise these terms when the app changes or when the law requires it. The revised terms will be published on this page with a new effective date and will apply to your continued use of Haven from that date. Material changes will be noted in the App Store release notes for the version they accompany.

Contact

Postal enquiries and legal notices may be directed to Justin Bloom, State College, Pennsylvania, United States; write to the address above first and I will provide a full postal address.

Haven is an independent application published by Justin Bloom. Apple, iPhone, iPad, iOS, iPadOS, App Store, Face ID, Touch ID, Apple Health, and HealthKit are trademarks of Apple Inc., registered in the United States and other countries. Haven is not affiliated with, endorsed by, or sponsored by Apple Inc.