Privacy Policy

• Parent account information: your name, email address, mobile phone number, and password (hashed by our authentication provider, Clerk).
• Kid profiles you create: your child's first name and age. We do not collect their last name, birthday, address, school, or biometric data.
• Platform activity you connect: when you link a platform (Roblox, Discord, YouTube, etc.), we receive the metadata that platform's parent API provides — usernames, contact events, session summaries. We do not receive or store your child's raw messages.
• Conversations you paste for analysis: anything you enter into the "Analyze a conversation" feature is sent to our AI classifier (Anthropic Claude) to be assessed. We do not keep the conversation. We keep the classifier's conclusion — a severity, a category, a plain-English summary, and a short list of paraphrased indicators — plus, at most, the four specific messages that triggered the alert. Those messages are hidden until you choose to open them, they are deleted after 90 days, and we record each time they are opened so your child can see it when they are old enough to have their own view. We never share anything across households.

When you provide your mobile number during signup and check the SMS consent box, you agree to receive urgent safety alerts and weekly digest notifications from HavenKids via SMS.

• We do not share, sell, rent, or transfer your mobile number to any third party for their marketing or promotional purposes. Your number is used solely to deliver HavenKids service messages.
• Message frequency varies based on detected activity on your child's connected platforms. Weeks with no urgent events, you receive only the Sunday digest. Weeks with detected safety-critical events, you may receive multiple urgent alerts.
• Message and data rates may apply — standard SMS charges from your mobile carrier apply to messages we send you.
• You can opt out any time by replying STOP to any HavenKids message. You will receive one final confirmation SMS and no further messages. Reply HELP for support information.
• SMS is delivered by Twilio Inc. under our registered A2P 10DLC brand and campaign. Twilio processes the delivery on our behalf and does not use your number for any other purpose.

• Run the safety-classification pipeline that flags urgent, watch, and info-level events on your child's timeline.
• Deliver the alerts and weekly digest you asked for, via the dashboard, SMS, and email.
• Send account-related messages (verification codes, security notices).
• Improve the classifier's accuracy — we may use anonymized, aggregated verdict statistics (e.g., "how often does the model flag isolation patterns"). We do not use your kid's conversations to train third-party AI models.

• Clerk — authentication and account management
• Neon — Postgres database hosting
• Vercel — application hosting
• Anthropic — AI classifier (Claude)
• Twilio — SMS delivery

You can mute any contact, for any child, at any time. A muted contact is skipped before anything is analyzed — no AI call is made, no verdict is produced, nothing is stored, and no alert can be generated from them at any severity. There is no exception and no override.

We are not here to monitor your child's friendships. We are here to watch strangers' access to your child. Your weekly digest lists everyone you have muted and how long they have been muted, so the list stays current — that is a reminder, not a warning.

Conversations are never retained — they are assessed and discarded in the same request. The only message content we hold is the handful of messages that actually triggered an alert, and those are deleted automatically after 90 days.

Alerts and platform activity are retained for as long as your account is active. When you delete your account, all personally identifiable data is removed within 30 days. You can request earlier deletion at any time by emailing us.

You can access, correct, export, or delete your data at any time by emailing adensler@hotmail.com. If you are a California, Virginia, or Colorado resident, you have additional rights under state privacy law and we honor those requests within 45 days.