1. Information We Collect

We collect registration data, activation data, personal data, device & usage data, managed user data, monitored communications data, and financial monitoring data.

2. Data Controller and Processor Relationship

You are the data controller of monitored data. OneHaven acts as data processor for the purpose of providing Services.

3. Legal Bases for Processing (EU/UK)

We process data based on consent, contract, legal obligations, and legitimate interests.

4. How We Use Information

We use data to provide and improve Services, deliver alerts, detect fraud, and communicate with you.

5. Sharing and Disclosure

We share data only with trusted third-party service providers (e.g., payment processors, analytics providers, security services). We do not sell personal data.

6. Data Storage & Retention

Data is stored in the United States unless otherwise stated. Monitoring logs are retained only as long as necessary for business, legal, or security purposes before secure deletion.

7. Cross-Border Transfers

When data is transferred outside your country, safeguards such as Standard Contractual Clauses are applied.

8. Children’s Privacy (COPPA & GDPR-K)

Parental consent is required for accounts involving minors. No child may independently create an account.

9. Seniors’ Privacy & Caregiver Management

Enhanced security applies for seniors. Caregivers must verify their authority for managed senior accounts.

10. Individual Users

Individual users may manage their own accounts and monitoring preferences.

11. Your Rights

Depending on location, you may access, correct, delete, restrict, or port your data, or withdraw consent.

12. California-Specific & State Privacy Rights

California residents have rights under the CCPA/CPRA, including: (a) right to know, (b) right to delete, (c) right to opt-out of sale or sharing of personal data, (d) right to limit sensitive data use. Residents of other states (VA, CO, CT, UT) have similar rights. Requests: [email protected]

13. Data Security

We use encryption, monitoring, and audits to protect your data.

14. AI Data Handling

Some Services use AI models to process communications, browsing, and fraud detection data. AI outputs may not be 100% accurate and should be reviewed by caregivers. Personal data is not used to train external AI models except in anonymized/aggregated form where legally permitted.

15. Transparency Commitment

We will notify users of material changes to AI-driven features or privacy practices that affect how monitored data is processed.

16. Data Retention and Deletion

Personal data is retained only as long as necessary for legitimate business or legal purposes. Deletion requests may be submitted by emailing [email protected].

17. Third-Party Links

Our Services may include links to third-party sites. We are not responsible for their practices.

18. Changes to this Policy

We may update this Privacy Policy from time to time. Users will be notified of significant changes as required by law.

19. Contact

Privacy inquiries: [email protected]