Effective September 6, 2026

Privacy Policy

Coven Haven is designed for intentional discovery, private coven communication, and user-controlled sharing. This policy explains what information we handle and why.

Information we collect

• Account information, including your verified phone number and optional recovery email.
• Profile information you provide, including nickname, bio, age, interests, preferences, location label, photos, and videos.
• Instagram information you choose to verify or import, including your handle and content available from your public profile.
• Discovery decisions, coven membership actions, invitations, votes, reports, blocks, chat messages, calendar events, and shared media.
• Live audio needed to transport a Coven Call. We do not create a call recording as part of the audio-room feature.
• Device, app, diagnostic, and security information needed to operate, protect, and improve the service.
• Anonymous invitation measurements, including a random first-party browser cookie, campaign, device platform, invitation-button activity, and a random app-installation identifier created by Coven Haven. We do not use advertising identifiers or device fingerprinting for this measurement.

Device permissions

Coven Haven may request camera, microphone, notifications, photos or media, location, and contacts access when you use a feature that needs it. Contact access uses the system contact interface; Coven Haven does not upload your address book. You can change permissions in your device settings.

How we use information

We use information to authenticate accounts, verify Instagram ownership, create and rank discovery profiles, form and administer covens, deliver communications and notifications, operate audio and video features, enforce unanimous membership rules, respond to safety reports, prevent abuse, provide support, and improve reliability.

Invitation and beta measurements

When you open a Coven Haven invitation page, we use one anonymous first-party cookie to distinguish repeat visits from different browsers and to count invitation-button selections. The cookie expires after 90 days. The mobile apps create a separate random installation identifier so we can count first launches. These identifiers do not contain your phone number, Instagram handle, hardware serial number, advertising identifier, or precise location. Global Privacy Control and Do Not Track signals disable invitation-page measurement. Apple separately provides aggregate TestFlight public-link views, accepts, installation status, sessions, and crashes under Apple's terms.

How information is shared

We share profile and communication content with other members only as the relevant feature requires. We use infrastructure and processing providers such as hosting, database, blob storage, messaging, image generation, and live-audio vendors to operate Coven Haven. They may process information on our behalf under their service terms. We may disclose information when required by law or necessary to protect users and the service. We do not sell personal information.

Text messaging and consent

Coven Haven uses your phone number to send authentication and account messages that you request. Message frequency varies based on your login and resend requests. Message and data rates may apply. Reply STOP to opt out or HELP for help. We do not use this opt-in to send marketing messages.

All the above categories exclude text messaging originator opt-in data and consent; this information won't be shared with any third parties.

Retention and deletion

We retain account and community data while your account is active and as reasonably needed to operate the service. Collaborative video files are intended as temporary transfer media while a coven video is assembled and distributed, rather than permanent public hosting. Local unfinished drafts and authenticated sessions are not restored through Android backup. You can permanently delete your account from Settings in the app or use our account deletion page if you no longer have the app. Deletion removes account-linked personal data and starts immediate, retryable removal of Coven Haven-hosted media. De-identified aggregate measurements that can no longer be linked to your account may remain.

Your choices

You can edit your profile, disconnect Instagram, adjust discovery and notification settings, block members, leave a coven, revoke device permissions, and request access, correction, or deletion by contacting us. Some information may be retained where legally required or needed to preserve safety and integrity records.

Security and age

We use technical and organizational safeguards intended to protect information, but no online system is completely secure. Coven Haven is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy as Coven Haven evolves. We will post the updated effective date here. Questions and privacy requests can be sent to autonomous@gmail.com.