Privacy
What Haven keeps, and who sees it.
A plain-language summary for owners, property teams and residents. It describes Haven TV as it works today, during the pilot.
What we collect
Haven collects what it needs to run resident services in a building. These are the main records it keeps, grouped by where they come from.
About residents
- Email address, first and last name, and a password, stored as a one-way hash.
- The unit and building they live in, set up by the property team.
- Repair requests: category, urgency, the description they type, whether staff may enter, status and the staff note when it's done.
- Parcel records: carrier, arrival and pickup times, and where to collect it.
- Rewards points, managed by the property team.
About staff
- Work email, phone number and role.
- Password, stored as a one-way hash, and an authenticator app setup if they choose one.
- A log of actions taken in the dashboard.
About the TV box
- Which property it belongs to, its model, software version and when it last checked in.
- Whether updates installed, and technical events such as connection errors.
- If a building shows sponsored spots on the home screen: which spot was shown, to which unit, and when.
Kept only on the TV
- The weather city and units, the chosen background and the last app opened.
- The resident's sign-in, stored encrypted on the box.
How we use it
- To run the services. Repair requests go to your staff's queue, and residents see the status on their TV. Parcel records tell residents what's waiting at the desk.
- To sign people in and keep accounts safe. Invitations and sign-in codes are sent by email or text message.
- To keep the boxes working. Box details and update results help us spot problems and deliver new versions.
- To count sponsored spots. Where a building shows them, Haven records that a spot was shown. Every unit gets the same set; Haven doesn't record clicks or use residents' interests to choose them.
Who can see it
- Residents see their own unit's repair requests and parcels on their TV. A TV can't ask for another unit's information.
- Your property team sees resident information in the staff dashboard, by role. Maintenance staff work the repair queue and don't see parcels. Front-desk staff handle parcels. Only supervisors manage resident access, TV boxes and staff accounts, and resident access and boxes are limited to the properties they're assigned to.
- Outside services do one job each: an email service and a text-message service deliver invitations and sign-in codes, and a forecast service supplies weather for the city chosen on the TV.
Pickup codes appear on the TV only when a resident asks for one. They aren't saved, and they can't be captured in screenshots or screen recordings.
Where it's kept
- Resident, staff, request and parcel records are kept on the Haven server, not on the TV.
- The TV talks to the Haven server only over encrypted HTTPS connections.
- Passwords are stored as one-way hashes, never as plain text. Sign-in and security logs leave out passwords, codes and full sign-in details.
- Haven's data on the box is left out of Android backups and device transfers.
- Haven's TV app doesn't use a camera or microphone.
Still being decided: where Haven will be hosted after the pilot, and how long records are kept once a resident moves out or a building leaves Haven. This page will say so when it's settled.
Your choices
- Use the TV without signing in. Wi-Fi, settings and installed apps work without a Haven account.
- Sign out at any time. "Sign out / Prepare for next resident" clears Haven's access and household information from the box. It doesn't sign you out of your own apps.
- Choose what the TV remembers. The weather city and background are yours to change.
- Ask about your information. Your property team manages your access and is the first place to ask. How to see, correct or delete records will be set out in the full policy.
Contact
Questions about this page, or about information Haven holds?
Contact details coming soon