Privacy Policy

CoHaven is a co-parenting service operated by Cozy Labs LLC. This notice describes how information is used to provide CoHaven and how to contact us about privacy. Contact: privacy@joincohaven.com.

Depending on the features you use, CoHaven processes account and contact information; household membership and invitations; children’s logistics and care details you choose to enter; schedules, handoffs and reminders; messages and requests; expenses, reimbursements and receipts; documents, photos and other uploads; connected-calendar information; subscription and purchase-verification information; support correspondence; and technical information needed to deliver, secure and troubleshoot the service.

Some content you enter can include sensitive family, health or financial information. CoHaven is intended for parents and caregivers, not for children to manage their own accounts.

We use information to operate the features you request, authenticate users, coordinate household logistics, deliver notifications, verify subscriptions, respond to support and privacy requests, prevent abuse and keep the service reliable. CoHaven is not built to sell parent or child data to advertisers.

Household participants receive the records and actions shared with them through CoHaven’s features. Information marked private is handled separately from shared household history. Consider what you include in a shared message, receipt or document: another participant may keep information they have already received, including copies outside CoHaven.

CoHaven uses providers for hosting, authentication, databases, file storage, email, notifications and purchase verification: Supabase (authentication, database and file storage), Render and Vercel (hosting), Resend (email), Apple (push notifications and App Store purchases) and RevenueCat (subscription verification). If you use cloud-assisted Haven features, the AI provider described below also processes your request.

If you choose cloud-assisted Haven features, your request and the context needed to answer it may be processed by the configured AI provider, which can be Google Gemini or OpenAI. CoHaven asks before using cloud processing, offers separate choices for health information, and lets you turn Haven off in settings. Changes to shared records still need the relevant review or confirmation.

If you connect Google Calendar, CoHaven asks for permission to list your calendars, read events from the calendars you select, and create and manage a separate CoHaven calendar when you turn on export. This does not let CoHaven edit events in your existing Google calendars.

You can disconnect at any time. Disconnecting stops further use of the connection and clears the stored connection and the imported events CoHaven kept. It does not remove events already exported to your own calendar, or records you already shared through other CoHaven features.

CoHaven’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Calendar data for advertising, do not sell it, and do not share it with third parties except as needed to provide the calendar feature you enabled, comply with law, or as part of a security operation. We do not use Google user data to train generalized AI models.

Bank linking and in-app transfers are not currently available. The planned integration uses Plaid to connect a bank account and Astra for authorization, account verification and money movement. If offered, the connection and authorization screens will describe what those providers request. CoHaven would use provider tokens and limited account and transaction information to run the feature you ask for; you would not enter your bank login password in CoHaven’s own forms. Provider processing is governed by those providers’ notices and agreements. We will update this notice before the feature launches.

With your consent at subscription checkout, RevenueCat may send purchase and subscription-delivery information and CoHaven’s refund preference to Apple when Apple reviews a refund request. We do not include household records, child information, messages, documents, or calendar content. You can stop future sharing in the app’s Subscription settings. Apple makes the refund decision.

If you accept marketing cookies on our public website, Meta Pixel and TikTok Pixel receive page-visit information and browser/device data to measure advertising and improve our ads. We do not send household records, child information, messages, documents, or calendar data through these pixels. You can decline or withdraw permission using Cookie preferences. Withdrawing permission stops future pixel events; it does not erase events already received by Meta or TikTok.

CoHaven uses encrypted connections, authenticated requests, account and household permission checks, restricted backend access, and optional two-step verification with an authenticator app. Protect your password and authenticator. No service can guarantee that information will never be accessed or lost, and these measures are not a claim of an independent security certification.

How long information is kept depends on its purpose, the state of the account and household, security needs, settled financial obligations and applicable requirements. You can request account deletion in the app; you have 30 days to change your mind by signing in. Some deletions need review or another step, such as cancelling a subscription first. Contact us if a request is delayed. The 30-day period is not a deadline for every provider, backup or shared record.

Deleting one parent’s account does not delete shared household history that another parent’s account can still access. This depends on whether that account has been deleted, not on its subscription. When every parent account in a household has been deleted, shared household history is reviewed for deletion after 30 days, with limited reviewed exceptions; this review is not automatic permanent deletion. Information held by providers and in backups may follow their own documented schedules.

Deleting your account does not cancel a subscription. Cancel it with the provider you subscribed through, such as the App Store.

You can manage your profile, optional integrations and security settings in CoHaven. You can ask to access, correct, export or delete your information by writing to privacy@joincohaven.com; the rights and exceptions that apply depend on your circumstances and where you live. We verify your identity and the scope of a request without disclosing another household member’s private information. Contact us if you have trouble completing a request or about information kept after deletion.

This page shows the date it was last updated. If we make material changes to features or processing, we will give any notice or choice those changes require.