Privacy Policy

Last updated: January 19, 2025

Your privacy is fundamental to Haven. We built Haven to protect you, not to exploit your data. This policy explains exactly what data we collect, why we collect it, and how we protect it.

1. Who We Are

Haven is a personal safety platform operated by CM & Co Solutions Ltd. ("we", "us", or "our"), a company registered in Nigeria. Our mission is to make personal safety accessible to every Nigerian.

2. Information We Collect

2.1 Information You Provide

Account Information: Phone number, email address, name when you register
Guardian Contacts: Names and phone numbers of people you designate as guardians
Profile Information: Profile photo, emergency contact details (optional)

2.2 Information Collected Automatically

Location Data: GPS coordinates when you activate location sharing, during SOS alerts, or when using Journey Mode
Audio Recordings: Audio captured during SOS alerts (stored securely as evidence)
Device Information: Device type, operating system, app version
Usage Data: App interactions, feature usage, crash logs

2.3 Information from Mesh Network

When you participate in Haven's mesh network (relaying SOS alerts via Bluetooth):

We collect anonymized relay data to improve network efficiency
We do not store the content of relayed messages on relay devices
Relay devices only pass encrypted data—they cannot read the SOS content

3. How We Use Your Information

Emergency Response: To send your location and alerts to guardians and emergency services during SOS events
Safety Features: To enable location sharing, journey tracking, and threat alerts
Service Improvement: To improve app performance, fix bugs, and develop new features
Communication: To send you important safety alerts and service updates
Legal Compliance: To cooperate with law enforcement when legally required

We will NEVER:

Sell your personal data to third parties
Use your location data for advertising purposes
Share your data with advertisers or data brokers
Access your audio recordings except when needed for emergency response or when you request it

4. Data Sharing

We share your information only in these circumstances:

With Your Guardians: Location and status during emergencies or when you enable sharing
Emergency Services: Location and incident details when you trigger SOS (with your consent or in life-threatening situations)
Service Providers: Cloud hosting, SMS services—bound by strict confidentiality agreements
Legal Requirements: When required by Nigerian law or valid legal process

5. Data Security

We implement robust security measures:

Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
Access Control: Strict role-based access—only authorized personnel can access user data
Secure Infrastructure: Cloud infrastructure with industry-leading security certifications
Regular Audits: Periodic security assessments and penetration testing

6. Data Retention

Account Data: Retained while your account is active, deleted within 30 days of account deletion
Location History: Retained for 90 days, then automatically deleted
SOS Recordings: Retained for 1 year for evidence purposes, unless you request earlier deletion
Anonymized Analytics: May be retained indefinitely for service improvement

7. Your Rights

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data (subject to legal retention requirements)
Portability: Receive your data in a portable format
Objection: Object to certain processing of your data
Withdraw Consent: Withdraw consent at any time (this won't affect past processing)

To exercise these rights, contact us at privacy@gethaven.ng

8. Location Data & Permissions

Haven requires location access to function. Here's how we use it:

"While Using": Location is accessed when the app is open and you're using safety features
"Always": Required for Journey Mode and background SOS—you can disable this anytime
Precision: We request precise location for accurate emergency response

You can revoke location permissions in your device settings at any time, though this will limit Haven's functionality.

9. Children's Privacy

Haven is designed for users aged 13 and above. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your data may be processed on servers located outside Nigeria (e.g., cloud infrastructure). We ensure appropriate safeguards are in place for such transfers in compliance with Nigerian data protection laws.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Haven after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@gethaven.ng
Address: CM & Co Solutions Ltd., Lagos, Nigeria

Questions? We're committed to transparency. If anything in this policy is unclear, please reach out—we're happy to explain.