Havyrn Privacy Policy
DRAFT — not legal advice. Written from what the app actually does today. Sections marked [LAWYER REVIEW] need a real lawyer before publishing. [LEGAL OPERATOR NAME — pending LLC formation] is a placeholder for the entity that will operate Havyrn once formed.
This Privacy Policy explains what Havyrn, operated by [LEGAL OPERATOR NAME — pending LLC formation] ("Havyrn," "we," "us"), collects about you, why, who we share it with, and what choices you have.
Havyrn is for people 18 and older, currently offered only in the United States.
1. What we collect
Account information. Your email, a securely hashed version of your password (we never store your actual password), your birthdate (used only to confirm you're 18+ — never shown to anyone, and deleted once your account is permanently removed), your name, and your device's timezone.
Your profile, as other users see it. A photo (once you upload one), your bio, your university/major/minor, your academic standing and graduation year, your job title if you add one, and your discipline.
What you post and say. The text and images of your Logs (posts about where you are with something you're working on), messages you send to connections, and anything you type to Havyrn's in-app assistant.
Tags and scores we figure out from what you write. We don't ask you to pick these from a list — we infer them from your own text, including a score meant to reflect the substance of what you've posted.
Safety records. Reports you file or are the subject of, blocks, and any warnings or sanctions on an account.
Basic technical information. The device/browser and IP address associated with your login sessions, and the IP address recorded at the moment you accept these policies.
2. Why we collect it
To run the core of Havyrn: matching you with people, letting you post and message, keeping the community safe, and operating the service generally. We don't collect any of the above for advertising.
3. Who we share it with
We use a small number of outside companies to run Havyrn. Here's exactly what each one gets:
- Supabase — hosts our production database and stores your uploaded photos and Log images.
- Render — runs our API server. All the data described above passes through Render's infrastructure to reach our database and the services below.
- Anthropic — receives the text of your Logs and assistant messages (to tag and score them), and your bio plus shared tags with another user (to write the short "why you might connect" summary shown on a match).
- OpenAI — receives the text of your Logs and direct messages, to automatically screen for policy violations before they're shown to anyone.
- Voyage AI — receives short pieces of your Log and assistant text to help match them to the right tags, and separately receives the full text of a Log to check whether you're reposting the same achievement more than once.
- Cloudflare — hosts this page and forwards email sent to support@havyrn.com to us.
- Sentry — receives error logs from our background systems (things like matching, grading, and moderation jobs) when something goes wrong. These logs sometimes include an internal ID number for your account, but never your messages, bio, or Log content.
- Google — if "Sign in with Google" is offered and you choose to use it, Google shares your account ID, email, and name with us to verify your identity. This option is not active at launch.
- Expo — if we turn on push notifications for your device, Expo delivers them. We only ever send Expo a push token and a short generic phrase (like "1 new message") — never your messages, bio, or Log content. Push notifications are not active at launch.
We don't sell your data, and we don't share it with advertisers.
4. How long we keep it
- Your account, generally: if you delete it, we keep it paused for 30 days (logging back in restores it), then permanently remove most of it.
- Messages you sent to other people: your conversation with them disappears once your account is deleted. We keep a copy of what you sent — not visible to anyone in the app — so we can review any reports involving it.
- Reports, warnings, and other safety records: kept indefinitely. This is deliberate — it's how we prevent someone who was sanctioned from simply making a new account with a clean slate. This means a report or sanction that names you can outlive your own account deletion, even though your account itself is gone.
- AI-written match summaries and other derived data: kept until your account is deleted, at which point they're removed along with the rest of your account data.
5. Your choices
- Delete your account. [TRUE ONLY AFTER SLICE 3] Available any time from Settings, with the 30-day undo window described above.
- Unblock someone. You can remove a block you placed; it doesn't restore the connection itself, only future matching eligibility.
- Ask us about your data. We don't yet offer an automatic, self-serve download of your data. If you'd like a copy of what we hold about you, email support@havyrn.com and we'll do our best to help manually.
6. Security [LAWYER REVIEW]
We use industry-standard password hashing and take reasonable steps to protect your information. (Placeholder — a fuller security section, and any specific representations about safeguards, should be reviewed by counsel rather than drafted from code alone.)
7. Changes to this policy
[TRUE ONLY AFTER RE-CONSENT ENFORCEMENT — see OPEN_ITEMS #79] If we materially change this policy, we'll ask you to review and accept the new version. Each version is dated, and we keep a record of which version you agreed to.
8. Contact
Questions about this policy, or a request about your data: support@havyrn.com