SheHaven Privacy Policy

SheHaven is built on a Privacy by Design principle. Personal data is protected by row-level security policies, encrypted at rest and in transit, minimised to only what is necessary, and automatically deleted when no longer required.

SheHaven provides venue discovery and referral services only. Bookings, reservations, payments, pricing and availability are managed solely by third-party providers or the venues themselves. When you tap a booking link we record an anonymous referral event (pseudonymous session id, coarse device type, and the venue you were viewing) so we can keep our directory healthy. We never see or store your booking details, payment information or reservation outcomes.

SheHaven is a community app for verified women aged 18 and over. If you need to contact us about your data, please use the contact form below.

To confirm you are a woman aged 18+, we ask for a silent 3-second live video in which you follow a simple on-screen action. We do not ask for a passport, driving licence or any other government ID, and no card is needed to join. The video is reviewed by our admin team, is never shared with third parties, and is permanently deleted as soon as a decision is made. If you join through a Sister Invite, we record which invite was used so we can keep the community safe; we also note how many times the video was recorded, to help spot anyone being pressured. From time to time we may ask a member for a fresh check (for example after a report or sign-in on a new device); Sister Signal, Monitor Me and 999 are never blocked by this.

Every sister completes a short safety awareness guide before the app unlocks. We store on your account whether you completed it, the date and time you did, the version of the guide, and your acknowledgement that SheHaven is not a replacement for 999. We also record, each time you choose to volunteer as a responder to a Sister Signal, that you confirmed the responder safety notice and the timestamp of that confirmation. These are held solely as safeguarding and liability compliance records for as long as your account exists, and are deleted with your account.

Your record of safety awareness is generated in your own browser from your own account data when you tap Download. We do not send it anywhere, publish it, or share it with venues or third parties. Admins can see whether a sister has completed her safety awareness and when, for safeguarding purposes only.

Safety-critical actions — raising or cancelling a Sister Signal, starting or ending a Monitor Me session, admin decisions — are written to an append-only audit ledger. Entries cannot be edited or deleted after the fact, which is what makes them useful if an incident is ever reviewed. They are held for as long as needed for safeguarding and legal purposes and then removed.

One-to-one sister chats are end-to-end encrypted on your device before they leave it. We cannot read them: only your phone and hers hold the keys, which never leave your devices. The conversation itself is kept only on your two phones. Our servers briefly relay the scrambled message until her phone collects it, then it is deleted, and anything uncollected is erased within an hour. Clearing the app's data on your phone removes your copy for good.

You can request a copy of your data, ask us to correct or delete it, or withdraw consent at any time. Contact us and we will respond within 30 days.

If you are in the UK or EU/EEA, you may also complain to your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk). If you are a California resident, you have rights under CCPA including access, deletion and opt-out of sale — we do not sell personal data.

Sisters can only be added by scanning each other's QR code in person. There is no name search, no link sharing, no contact import. This is intentional, it keeps the network real-world and accountable.

You decide who to swap codes with. SheHaven cannot guarantee the safety, honesty or intentions of any other member, even if verified. Use the same care you would use meeting anyone new.

Sister Signals are a community signal, they are not an emergency-services replacement. If you are in immediate danger, call 999 (police, ambulance, fire). For non-urgent concerns the police number is 101. Domestic abuse helpline: 0808 2000 247. On the rail network you can text the British Transport Police on 61016.

If you press the Sister Signal button your IP address and location will be stored for 28 days and then deleted, to aid with any pending police investigations should they arise.

When a Sister Signal is in progress, both sisters can exchange a quick selfie so they can recognise each other on arrival. These photos are end-to-end encrypted in your browser using AES-GCM before upload. The server only ever stores ciphertext and cannot view them; only the two sisters involved in the alert can decrypt them.

Your location is only stored when you choose to share it (for the map and the Sister Signal system). You can turn it off at any time in your profile. "Track me" mode updates your pin while the map is open and stops automatically when you close the map.

Monitor Me lets you set a timer for a journey or activity and optionally share live location with chosen sisters. Location pings are kept only for the duration of the session and are automatically deleted when the session ends or expires. Scheduled check-ins follow the same rule.

Messages and check-ins you post inside a group are visible to the other members of that group. We retain them for the lifetime of the group so members can scroll back. You can leave a group at any time, and a group owner can delete the group, which removes its messages.

If you allow notifications, your device push token is stored so we can deliver Sister Signals, check-in reminders and group activity. We never use push tokens for marketing. You can revoke notifications at any time in your device settings.

Paid plans are handled by Stripe. Card details are entered directly into Stripe and never touch our servers — we only store your Stripe customer ID and your subscription status. See Stripe's privacy policy for how they handle payment data.

We send transactional emails (sign-in, verification outcomes, replies to your contact messages) via our email provider. Non-essential emails include a one-click unsubscribe link and we honour our suppression list. We do not sell or share your email address.

Features like the map, TfL station info, crime insights and safe-haven lookups call third-party APIs from our servers, not from your device. Your personal location is not forwarded to those providers — we query general areas only.

We use a small amount of browser storage to keep you signed in and remember basic preferences. We do not use advertising cookies or cross-site tracking.

You can delete your account from your profile at any time. Deletion wipes your profile, friendships, alerts, encrypted photos, group memberships, push tokens and your Stripe customer link. Some records may be retained briefly in backups or where required by law (e.g. an active police investigation) and are then permanently removed.

SheHaven is strictly for adults aged 18 and over. Accounts found to belong to anyone under 18 are removed immediately.

SheHaven is provided on an "as is" basis. To the fullest extent permitted by applicable law, SheHaven and its operators are not liable for any loss or harm arising from your use of the app, including any interaction with venues, friends or other members.

The locations shown in SheHaven are user-rated and SheHaven does not endorse any individual places or locations. User ratings are down to the individual sister who left them. Offensive, racist or discriminatory comments will be removed and the person's account will be deleted, no refund will be given if they are a paid subscriber.

We may update this policy as the app evolves. The "Last updated" date at the top will change, and for material changes we will notify affected members by email.