App Privacy Policy

• No account is needed. Everything in Hope Haven works without signing up. Without an account, your answers, check-ins, journal and everything else stay on your iPhone or iPad.
• Signing in is optional, and so is syncing. If you sign in with Apple, nothing about your health is uploaded until you say yes on a separate screen. You can turn syncing off at any time.
• Some things never leave your device, even if you sync: your safety plan, your trusted contacts, your habits, and the days you looked for crisis support.
• No ads, no tracking, no analytics, no selling. The app contains no advertising or analytics code. We never use your data for marketing and never share it with employers.
• You're in control. You can export your data, delete it from your device, or delete your account and everything in it from inside the app.

Hope Haven is provided by Hope Health and Safety, ВЕЦ Симеоново 999, 1138 Sofia, Bulgaria (ЕИК / Company No. 206834868, VAT BG206834868). We are the data controller for the account data described below.

Contact: office@hopehealthandsafety.com · +359 2 962 8372

Hope Haven keeps your information in the app's private storage on your device. It's encrypted by iOS and can't be read while your device is locked. This includes:

• your check-up answers and results, and a check-up you haven't finished;
• your daily check-ins (mood, sliders and tags);
• your journal pages;
• your safety plan and trusted contacts (names and phone numbers you type in);
• your habits and practices, settings and reminders;
• the days you opened crisis support (kept for 7 days, to offer a gentle check-in).

Journal suggestions are worked out on your device. When you finish a journal page, Hope Haven reads it on your iPhone or iPad to suggest a practice. Your words are not sent to us, or to Apple, for this.

Your device's backups. Like most apps, this information is included in your iCloud or computer backups if those are turned on. That lets you restore it to a new device. Backups follow your Apple settings.

Home screen widget and notifications.The widget shows today's card and whether you've checked in, never your mood, scores or journal. Reminders are created on your device. They never show scores, and with notification previews hidden they show only a general message.

You can sign in with Sign in with Apple. It's the only sign-in option. When you sign in, we receive from Apple:

• a user identifier for this app, and
• your email address, or an Apple private relay address if you choose to hide your email (Apple shares it only the first time).

After you sign in, Hope Haven asks before anything health-related is uploaded. Only if you agree do we store, in your account:

• your finished check-up results (your answers to each question, the questionnaire version, and when you completed it), and a check-up you haven't finished so you can continue on another device;
• with Hope Haven Premium only: your daily check-ins (mood, sliders, tags and time; not the old free-text notes) and your journal pages (the date and the text).

Never synced: your safety plan, trusted contacts, habits, the days you opened crisis support, journal suggestions and themes, settings and sample data.

Your account data is visible only to you: each record is locked to your account at the database level.

• To run your account and sync (contract, GDPR Art. 6(1)(b)).
• Health information such as check-up answers, moods and journal pages is special-category data. We process it only with your explicit consent(GDPR Art. 9(2)(a)), which the app asks for before the first upload. You can withdraw consent at any time by turning off syncing in Settings or deleting your account. Withdrawing consent doesn't affect what happened before.
• To keep the service secure (legitimate interests, Art. 6(1)(f)).

We never use your health information for advertising, marketing or profiling, and never share it with employers.

You pay through Apple and the App Store. We never receive your payment details.

We use RevenueCatto check what you've bought and unlock it. RevenueCat receives your App Store purchase records (which product, when, its price and currency, and whether a subscription is active, renewed, cancelled or refunded) under a random ID created by the app. That ID is not linked to your Hope Haven account, your Apple sign-in or anything about your health. We use the records to unlock what you paid for and to count our sales.

The app also keeps a note on your device of what you've unlocked, so it works offline. We do not store your purchase history on our own servers.

• Supabase hosts the account database and sign-in, in the European Union (Ireland), under a data processing agreement.
• Appleprovides Sign in with Apple and the App Store, as an independent controller under Apple's own privacy policy.
• RevenueCat (United States) processes purchase records under a random ID, as described in section 5, under a data processing agreement.

The app contains no third-party analytics, advertising or crash-reporting code. RevenueCat's code, used only for purchases, is the only third-party code in it.

Account data is stored in the EU (Ireland). If Supabase or one of its sub-processors needs to access it from outside the European Economic Area, for example for technical support, that transfer is covered by the EU Standard Contractual Clauses in Supabase's data processing agreement.

Purchase records are processed by RevenueCat in the United States. That transfer is covered by the EU Standard Contractual Clauses in RevenueCat's data processing agreement.

• On your device: until you delete it. Use Settings > Delete all my data, or delete the app.
• In your account: until you delete it, or delete your account. Settings > Delete accountdeletes your account and everything stored in it straight away, and revokes Hope Haven's Sign in with Apple access. Copies may remain in our hosting provider's encrypted backups for up to 7 days before they expire.
• Purchase records at RevenueCat:for as long as we need them to manage your purchases and keep our accounts. They aren't linked to your account, so deleting your account doesn't remove them. To have them deleted, email us the order ID from Apple's receipt email and we'll ask RevenueCat to delete them.

You can access and export your data (Settings > Export my data), correct it, delete it (Delete all my data and Delete account), restrict or object to processing, and withdraw consentat any time. Journal themes worked out on your device aren't included in the export; ask us if you want them.

For anything else, email office@hopehealthandsafety.com. We'll reply within one month. You can also complain to your data protection authority. In Bulgaria that's the Commission for Personal Data Protection (cpdp.bg).

• iOS file encryption (data is unreadable while your device is locked).
• Sign-in credentials kept in the iOS Keychain.
• Encrypted connections (TLS).
• Database rules that let each account reach only its own data.
• An optional Face ID or passcode lock for the app.

Hope Haven is intended for adults (18+) and is not directed at children.

If we change how Hope Haven handles your data, we'll update this page and its date before the change takes effect. If a change affects what we upload, the app will ask for your consent again.

office@hopehealthandsafety.com · +359 2 962 8372 · Hope Health and Safety, ВЕЦ Симеоново 999, 1138 Sofia, Bulgaria