Effective Date: January 1, 2026 | Last Updated: February 2026 | Version: 3.0
OUR COMMITMENT TO PRIVACY: MPHaven is committed to protecting your privacy and being transparent about our data practices. This policy explains what information we collect, how we use it, and your rights. We do not sell your personal information.
Quick Navigation:
⚠️ IMPORTANT: While MPHaven is a mental health and wellness app, we treat certain information as sensitive health information, including:
We limit use of this information to providing the app services. We do not share this information with third parties except as necessary to operate the app (e.g., encrypted storage on Supabase servers).
We use your information for the following purposes:
IMPORTANT: MPHaven does not store, process, or have access to your full payment credentials. All payments are handled by PCI-DSS compliant third-party payment processors:
| Processor | Information They Collect | Privacy Policy |
|---|---|---|
| Stripe | Payment card details, billing address, IP address, device information | stripe.com/privacy |
| PayPal | Payment account details, billing address, IP address, transaction history | paypal.com/privacy |
What MPHaven Receives: We receive limited information from payment processors, including:
We do NOT receive full card numbers, CVV codes, banking credentials, or other sensitive payment information.
By making a payment, you agree to the terms of service and privacy policies of these processors. We encourage you to review their policies.
We use the following third-party services to operate the app:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Authentication, database, backend infrastructure | Email, name, hashed password, User Content, usage metadata | supabase.com/privacy |
| Google OAuth | Sign-in authentication (optional) | Name, email (only if you choose Google sign-in) | Google Privacy Policy |
| Stripe | Payment processing | Payment details, billing info, email | stripe.com/privacy |
| PayPal | Payment processing (alternative) | Payment details, billing info, email | paypal.com/privacy |
Our Responsibility: We select third-party service providers that maintain strong security and privacy standards. However, we are not responsible for the privacy practices of these third parties. Your use of their services is subject to their respective terms and privacy policies.
⚠️ IMPORTANT: No method of transmission over the Internet or electronic storage is 100% secure. While we implement industry-standard security measures, we cannot guarantee absolute security. You use the app at your own risk.
Your Responsibility: You are responsible for maintaining the security of your account credentials. Do not share your password with others. Use a strong, unique password.
We retain your information for as long as necessary to provide the app and comply with legal obligations:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account Information | While account is active + 30 days after deletion | Provide service; allow account recovery; comply with legal obligations |
| User Content | Until you delete it or delete your account + 30 days | Provide service; backup recovery |
| Payment Records | 7 years (or as required by payment processor) | Tax compliance; fraud prevention; dispute resolution |
| Support Communications | 3 years after last contact | Customer service; legal compliance |
| Usage Data (Anonymized) | 2 years | Analytics; product improvement |
| Local Storage | Until you clear browser data | Store preferences; disclaimer acknowledgment |
| Backup Copies | 30 days after deletion | Disaster recovery; data integrity |
Deleting Your Data: You may request deletion of your data at any time by contacting privacy@mphaven.com or deleting your account through account settings. We will delete your data within 30 days, except where we are required to retain it for legal compliance (e.g., payment records for tax purposes).
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
| Right | What You Can Do |
|---|---|
| Right to Know | Request information about the categories and specific pieces of personal information we have collected, used, disclosed, or sold about you in the past 12 months |
| Right to Delete | Request deletion of personal information we have collected, subject to certain exceptions (e.g., completing transactions, complying with legal obligations) |
| Right to Correct | Request correction of inaccurate personal information we maintain about you |
| Right to Opt-Out of Sale/Sharing | Opt out of the sale or sharing of personal information. We do not sell or share your data, so no action is needed. |
| Right to Limit Use of Sensitive Information | Limit use of sensitive personal information. We only use sensitive information (health data, precise location) as necessary to provide the app. |
| Right to Non-Discrimination | We will not discriminate against you for exercising these rights (e.g., denying service, charging different prices) |
Residents of the following states have similar rights under their respective state privacy laws:
To exercise any of the above rights, please contact us at: privacy@mphaven.com
What to Include in Your Request:
Verification Process: To protect your privacy, we will verify your identity before processing your request. We may ask for:
Response Time: We will respond to verified requests within 45 days. If we need additional time, we will notify you and may extend by another 45 days.
Authorized Agents: You may designate an authorized agent to make requests on your behalf. The agent must provide proof of authorization.
Regardless of your location, you can:
⚠️ AGE RESTRICTION: MPHaven is not intended for users under 18 years of age. We do not knowingly collect personal information from anyone under 18.
If you are a parent or guardian and believe your child under 18 has provided us with personal information, please contact us immediately at privacy@mphaven.com. We will take steps to delete the information within 30 days.
If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will delete that information as quickly as possible.
U.S.-Based Service: MPHaven is based in the United States and is intended primarily for users in the United States. Our servers are located in the U.S., and your data is stored and processed in the U.S.
International Data Transfers: If you access the app from outside the U.S., please be aware that your information will be transferred to, stored, and processed in the U.S., where data protection laws may differ from those in your country.
European Union Users: If you are in the EU or EEA, you may have additional rights under the General Data Protection Regulation (GDPR), including:
By using the app, you consent to the transfer of your information to the U.S. and processing as described in this Privacy Policy.
Our third-party service providers may use cookies:
Current Status: We do not currently use third-party analytics tools (e.g., Google Analytics). If we add analytics in the future, we will update this policy and provide opt-out options.
Our app does not currently respond to "Do Not Track" (DNT) browser signals. We may add DNT support in the future.
You can manage cookies through your browser settings:
Note: Disabling essential cookies/local storage will prevent the app from functioning properly.
We Do Not Use Automated Decision-Making: MPHaven does not use automated decision-making systems (including AI or algorithms) that have legal or similarly significant effects on you. Any features involving algorithms (e.g., content recommendations) are purely suggestive and do not make decisions affecting your rights.
In the event of a data breach that compromises your personal information, we will:
Notifications will be sent via email to the address on your account and/or through in-app notification.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons.
How We Notify You:
When Changes Take Effect: Changes become effective 30 days after notification. Your continued use after the effective date constitutes acceptance.
Disagreeing with Changes: If you do not agree to the changes, you must stop using the app and may delete your account before the changes take effect.
We encourage you to review this Privacy Policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Privacy Officer: privacy@mphaven.com
Data Protection Inquiries: dpo@mphaven.com
California Privacy Requests: privacy@mphaven.com
EU Data Subject Requests: gdpr@mphaven.com
General Support: support@mphaven.com
Legal Notices: legal@mphaven.com
Response Time: We will respond to privacy inquiries within 7 business days, and requests exercising privacy rights within 45 days.
© 2026 MPHaven. All rights reserved.
This Privacy Policy is proprietary to MPHaven. Unauthorized reproduction or distribution prohibited.