One thing to know first: for the people who use an app, the app's owner is in charge of their data, and Apphaven only processes it for the owner. Everything below follows from that.
Apphaven is run by Efficacious, Inc., a Delaware corporation, USA. Contact: privacy@apphaven.com or info@efficacious.io. This policy covers apphaven.com, the dashboard, the agent connector and the apps we host, wherever they're served: on onapphaven.com, on owners' own domains, and on onapphaven-files.com and viaapphaven.com for their files and email.
Owners have an Apphaven account and build apps with their AI agent. App users sign up to an owner's app. For owners, we decide how data is handled and this policy applies to you directly. For app users, the owner of the app decides why your data is collected; we store and process it on the owner's behalf, under our terms with them. Ask the owner about their app; this policy tells you what we do with the data they give us.
Your email address and name, and a password stored only as a hash if you choose password sign-in. For each sign-in, the network address and browser it came from, to keep your account secure. Your apps: the files, configuration, data and email your agent and your app users create, and the files you add for your agent. Your plan and payment status. Payment details are handled by Paddle, our merchant of record; we receive what plan you're on and a receipt, never your card number.
A record of what happens in your account: which agent you connected, each tool it used, when, for which app, and whether it worked, and the requests your apps answer (path, result, time, and who was signed in) for troubleshooting. If your agent sends us feedback, we keep the note with your account and our team reads it.
We keep a private record of the work agents do on Apphaven, to fix problems and improve the service: which tools they used and when, the app involved, what happened and any errors, and parts of an app's files and configuration, filtered to leave out passwords, keys and similar secrets. It doesn't include your app's records, its list of users, the contents of its email or anyone's password. Detailed records are kept for up to 12 months and summaries for up to 24 months. Our operators can look at them; you see summaries for your own apps. Deleting an app or your account takes its records out of use and schedules their deletion.
If you choose Continue with Google, Google shares your account identifier, name, email address, email verification status and profile picture with Apphaven. We store these account details and the authentication tokens Google provides to sign you in and connect Google to your Apphaven account. We use this information to provide and secure your account, under the same retention and deletion rules as your other account information.
We request only basic identity information. Google sign-in does not give Apphaven access to your Gmail messages, Drive files or contacts. We do not sell your Google account information or use it for advertising or AI training. Google's handling of its sign-in service is described in Google's privacy policy. You can also sign in to Apphaven with email.
Whatever the app's owner asked for: at least an email address and name when you sign up, plus anything you enter in the app. Sign-in cookies for that app only, and the network address and browser of each sign-in. Emails the app sends you, kept in the owner's mail log for 30 days so the owner can see what was sent.
To count visits, we record each page you open, the result, the time, your country and whether you were signed in, with a code made from your network address and browser that changes every day; we don't keep the address itself. The app may also record that you signed up, confirmed your address, signed in, or did something the owner counts (such as booking), with a code for you that only works within that app. These records hold nothing you typed. The owner sees totals.
The owner's AI agent may read the app's data for them, including your account and what you've entered; what it reads goes to that agent's provider (such as Anthropic or OpenAI) under the owner's arrangement with them. The owner may also copy the live app's data into its private test version to try a change; passwords aren't copied.
Photos and documents you send an app are kept for its owner like the rest of the app's data. The app decides who can see them, and a link to a file works for anyone who has it, for up to two hours. Photos are rebuilt without their location and camera details before they're kept, usually on your device before they're sent. If an app takes files from people who aren't signed in, Cloudflare Turnstile checks that you're a person, and a cookie remembers that for an hour.
Images on apps are compared automatically with lists of known child sexual abuse material, using Cloudflare's scanning tool. We keep a fingerprint of every file so that one taken down after a report can't be uploaded again anywhere on Apphaven, and after a file is deleted we keep a note of its name, size, who sent it and its fingerprint.
If you report content on an app (at apphaven.com/report or by email), we keep what you send (what it's about, the link, your details and contact, and for some reports your signature) to handle the report, with a coded form of your network address to stop floods of reports. Apphaven's operators see it. The app's owner is told what was removed and why, never who reported it; for a copyright notice, the owner is told what was reported, and their counter-notice is passed to you. Where the law requires, we pass reports to the authorities, such as reports about children to the National Center for Missing & Exploited Children. We keep reports and what was done about them for as long as they may be needed to handle the report or answer a legal claim.
To run your apps, to send the email they ask us to send, to show owners what happens in their apps, to stop abuse, to bill owners, and to fix problems and improve Apphaven. We don't sell data, we don't advertise, and we don't use your data or your app users' data to train AI models.
Your AI agent (Claude, ChatGPT or another) acts in your Apphaven account through a connector you authorize. What you say to your agent stays with that agent's provider under their policy. What the agent reads through Apphaven (your apps' files and data, their users' accounts, logs and emails) goes to that provider too, because that's how the agent works with it. Apphaven doesn't send data to AI providers on its own; an app may, if you set it up to.
A few people at Apphaven can see accounts and their apps' names, plans, domains and usage, the records described above, and a file someone reported, to run the service, help you and handle reports. We record what they change and each reported file they open.
Cloudflare hosts and serves Apphaven and the apps, their files and logs, delivers their email, runs the person check and scans images. Neon hosts the databases, on Amazon Web Services in the United States. Google provides Sign in with Google, if you use it, and our own email. Payments are processed by Paddle.com Market Limited and Paddle.com Inc. as merchant of record, under Paddle's privacy policy. Cloudflare, Neon and Google process data only on our instructions and only to provide those services. Reports about children go to the National Center for Missing & Exploited Children, as the law requires.
We give data to authorities only when the law requires it, and tell the app's owner first unless the law prevents it.
Our databases are in the United States. Cloudflare serves apps and their files from places around the world, so copies of files and some logs are kept outside the US for a while. If you're outside the US, using Apphaven means your data is transferred there.
The dashboard sets a sign-in cookie. Each app sets its own sign-in cookie, only for that app. A test version sets a cookie that proves you're its owner. A form that takes files from people who aren't signed in sets a one-hour cookie after Cloudflare's person check. Apphaven adds no advertising or analytics cookies; an owner's app may add its own, and its own notice should say so.
Closing your account deletes your apps, their databases, their files (after those 30 days) and their users' accounts.
Owners can export their app's data from the dashboard (its files aren't in the export yet), delete apps from the dashboard, and close their account by emailing support@apphaven.com from its address; we close it within 30 days. App users can ask the app's owner to correct or delete their data; if the owner doesn't respond, write to us and we'll help. Depending on where you live you may have further rights (access, correction, deletion, portability, objection); write to privacy@apphaven.com and we'll answer within 30 days.
Apphaven accounts are for people 18 and over. Owners must not build apps that collect data from children under 13.
Encryption in transit everywhere, one database per app, secrets kept out of app files, and sign-in handled by Apphaven rather than by code in the app. No system is perfect; if we learn of a breach affecting you we'll tell you without undue delay.
We'll post changes here with the date, and email owners before a change to what we do with their data applies.