havenSECURITY, IN PLAIN ENGLISH
A private home for your money.
Protected in transit
Haven uses HTTPS to encrypt information travelling between your device and our services.
A household boundary
Our servers check membership and roles before providing records. Private accounts and their activity stay restricted to their owner in Haven. Hosting operators have technical database access to run the service.
Your sign-in, strengthened
Use a unique password and add an authenticator in Account security. Platform administration requires multi-factor verification. An optional Haven passcode adds a second lock after sign-in.
AI is your choice
Havi sends context to OpenAI only with household-owner consent. Turn sharing off in Settings to stop new calls and scheduled check-ins. Private accounts are excluded.
Bank passwords stay away
Haven never asks for your bank password and cannot move money. Customer bank feeds are not available yet. Manual balances and CSV imports are available.
Where records live
Cloudflare hosts the service and household records across its global network. Supabase handles authentication in Singapore. Other providers may process information overseas. Read our privacy policy for the details.
Report a security issue
Email info@havenwealth.au with a description and safe reproduction steps. Never send passwords, card numbers or financial records. We do not claim independent certifications or completed external security audits.
If there is a data breach
We investigate, contain and assess suspected breaches. If a breach is likely to cause serious harm, we notify affected people and the OAIC as required by the Notifiable Data Breaches scheme.
Read the privacy policy