Haven app terms and privacy policy

Terms of use

Haven lets you book a doctor to your home for yourself or a relative, see the price before you book, and follow your own eating, exercise and medicines.

• The visit fee and travel fee are shown before you send a request. You pay the doctor in cash once the visit is done; Haven takes no payment in the app.
• A doctor may accept or decline a request. You can cancel until the doctor sets off.
• What you enter (who is seen, symptoms, address) has to be true: the doctor prepares from it.
• Haven is not for emergencies. For trouble breathing, chest pain, loss of consciousness or heavy bleeding, call 115 now.
• Haven may close accounts used for fake bookings, harassing doctors or impersonating someone else.

What Haven collects

Haven collects only what the features you use need:

• Account: name, email, password (stored only as a one-way hash); if you add them, phone, date of birth, gender and photo.
• If you sign in with Google or Apple: your Google/Apple account id, and the email and name they send Haven. Haven never receives your Google or Apple password. If you hide your email with Apple, Haven only sees Apple's relay address.
• Saved addresses: the address, the recipient name and phone, and the pin on the map.
• Each visit: the name, birth year and relation of the person seen, the symptoms you describe, the address and the quoted price; afterwards the visit note, any care plan the doctor sends, and your review.
• Family: name, relation and birth year.
• Nutrition and exercise: the meal photos you scan, your food diary, your goals, your workouts.
• Devices: device name, operating system, app version and IP address of each sign-in; the notification token and language of the phone.
• Location: only when you pick "Current location" or pin an address. Haven does not track your location in the background.
• If you apply to practise: full name, date of birth, licence and documents, portrait, starting point and fees.

Medicines, the daily timetable and health notes about relatives (blood type, allergies, conditions…) stay on your phone and are never sent to the server.

Who can read your data

• A doctor who receives your request sees the name and birth year of the person seen, the symptoms, the ward and the distance. Only after accepting does the doctor see the street address, the pin, the recipient name and phone, and only until 24 hours after the visit ends. For the same window you see the doctor's phone number.
• A visit note can be read only by the doctor who wrote it and the person who booked. The same goes for care plans; the doctor cannot see how far you follow one.
• The comment in a review is read only by the doctor reviewed: without your name, with the month only, and only 24 hours after the visit. Publicly there is only the average score (from 3 reviews) and the most frequent compliments.
• Doctors cannot see your food diary, workouts or scanned photos.
• At Haven, each person has access only to what their job needs. Reading symptoms, visit notes, care plans, review comments, food diaries and workouts takes a separate permission held by a few people. Practice documents are seen only by the people who review applications.
• Lock-screen notifications never contain symptoms, the content of a visit note or the title of a care plan.
• Haven does not sell your data and does not use it for advertising.

Outside services and transfers abroad

Haven uses a few outside services. Most run servers outside Vietnam, so data passing through them is transferred abroad:

• Cloudflare (USA): sits in front of the Haven servers against attacks, and stores photos and documents. Practice documents and meal scans are in private storage, opened only through links that expire within minutes.
• Google Gemini (USA): receives the meal photos you scan to recognise the dish. Only the photo is sent, never your name or email.
• Google and Apple (USA), when you choose to sign in with them: they confirm who you are and tell Haven your email and name. Haven reads nothing else from your Google or Apple account.
• Sentry (USA): receives technical error reports when the server or the app fails (the kind of error, the line of code, the phone model and system version). Before sending, Haven drops the request content and location and masks emails and phone numbers; no screenshots and nothing you typed; symptoms and health data are never sent.
• Expo, Apple and Google: deliver notifications to your phone. They receive only the notification sentence (time, status), no health information.
• Brevo (France): sends sign-up codes and the welcome email; receives your name and email address.

Tapping "Directions" for a restaurant opens Google Maps with the restaurant name and address, and none of your data.

Where it is kept, and for how long

• The original meal photo you scan is deleted after 7 days; the nutrition of that meal stays in your diary. If you allow it on the scan screen, Haven may keep a small copy to improve recognition. The default is no.
• In-app notifications are deleted after 90 days.
• Visit history, visit notes and care plans are medical records and are kept even when you edit a relative or close your account.
• Closing your account: it is locked at once, every sign-in is revoked, upcoming visits are cancelled, and the data on your phone (medicines, timetable, health notes about relatives) is deleted. That email cannot be used to sign up again. What remains on the server is no longer shown anywhere; to have it erased, write to hello@havenmed.vn.

Booking for your family

When you add a relative or book for them, you confirm they have agreed to Haven processing their information as described here, or that you are their parent or guardian. For children, a parent or guardian has to agree.

The name, relation and birth year of a relative are saved to your account so you can pick them when booking. Renaming someone does not change past visits. Health notes about relatives stay on your phone.

Your rights

• See and edit your profile, addresses and family in the app.
• Sign out of a phone you no longer use: Privacy → See signed-in devices.
• Keeping scans to improve recognition: off by default, asked again on every scan.
• Location, camera, photos, notifications: switch them in your phone settings.
• Withdrawing consent: this data is what booking and carrying out a visit needs, so withdrawing means closing the account (Privacy → Delete account).
• For a copy of your data, full erasure or a complaint: write to hello@havenmed.vn.

Medical disclaimer

Haven connects you with doctors whose practice documents Haven has checked. The examination, diagnosis, treatment and advice are those of the doctor who sees you.

Calories Haven estimates from photos, restaurant nutrition figures, suggested exercises and medicine reminders are for following your own health, not a substitute for advice from a health professional. Haven does not prescribe and does not diagnose.

When there are danger signs, call 115 or go to the nearest medical facility. Do not wait for a doctor to accept.

Open-source licences

Haven is built on open-source software. The full list and its licences ship with the released app.