Legal

Privacy policy

Last updated 7 October 2026

This Privacy Notice for Doccrs Digital Ltd (doing business as Family Haven) (‘we’, ‘us’, or ‘our’) describes how and why we might access, collect, store, use, and/or share (‘process’) your personal information when you use our services (‘Services’), including when you:

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@ourfamilyhaven.com.

Looking for the short version? See how privacy works in Family Haven.

Summary of key points

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using the table of contents below to find the section you are looking for.

What personal information do we process? We process the information you and your family give us when you use Family Haven, such as names, email addresses, age range, saved places, and routines, and information from your device, such as arrivals at and departures from saved places. Learn more in ‘What information do we collect?’.

Do we process any special category personal information? No. We do not process special category information, such as racial or ethnic origin, health, religious beliefs, or sexual orientation. We do process precise location to detect arrivals at and departures from saved places, and children’s personal information with the consent of a parent or guardian.

Do we collect any information from third parties? We receive your name and email address from Google or Apple when you sign in with them, information about children and family members from parents and guardians, and place details from Google Places when you search for an address. We do not buy data or collect information from public databases or marketing partners.

How do we process your information? We process your information to provide and run Family Haven, to send alerts to your family, to keep the app secure and working, to respond to you, and to comply with law. We process your information only when we have a valid legal reason to do so. Learn more in ‘How do we process your information?’.

In what situations and with which parties do we share personal information? We share information within your family group and with service providers, mainly Google and Apple, who help us run the app. We do not sell your information or use it for advertising. Learn more in ‘When and with whom do we share your personal information?’.

How do we keep your information safe? We have adequate organisational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more in ‘How do we keep your information safe?’.

What are your rights? Under UK data protection law, you have rights over your personal information, including the right to access, correct, and delete it. Learn more in ‘What are your privacy rights?’.

How do you exercise your rights? The easiest way to exercise your rights is to use the settings in the Family Haven app or to email us at support@ourfamilyhaven.com. We will consider and act upon any request in accordance with applicable data protection laws.

1.What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, when you set up or join a family, when you use the features of the app, or when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

  • names
  • email addresses
  • contact preferences (such as your notification settings and who receives your low-battery alerts)
  • contact or authentication data (such as your Google or Apple sign-in, and the invite and login codes used to join a family)
  • age range (your date of birth is used on your phone to work out your age range and is not stored; for children, we record whether they are 13 or over)
  • saved places (names and addresses of locations you add, such as home or school)
  • routines (scheduled arrival and departure times)
  • parent or guardian consent declarations (the name a parent or guardian enters when inviting a child, and their confirmation of consent)
  • teen agreements (for children aged 13 to 17: when they agreed to or stopped sharing, and which version of the wording they saw)
  • subscription details (if a parent subscribes to Family Haven Plus: which plan, when it started and renews, and whether it is active. Payment is taken by Apple or Google, and we never receive your card or bank details)

Location and children’s information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following:

  • precise location (used to detect arrivals at and departures from saved places)
  • personal information of children, collected with the consent of a parent or guardian

Sign-in Data. You can register using your existing Google or Apple account. If you choose to register in this way, we will receive certain profile information about you from that provider, as described in the section called ‘How do we handle your social logins?’ below.

Application Data. If you use our application, we also may collect the following information if you choose to provide us with access or permission:

  • Geolocation Information. We request permission to use your device’s location, including in the background, to detect when you arrive at or leave places your family has saved. This happens on your device, and your device’s coordinates are not sent to us, unless you choose to save your current location as a place. See ‘Location Data’ below. If you wish to change our access or permissions, you may do so in your device’s settings.
  • Push Notifications. We request to send you push notifications about your family’s arrivals and departures, check-ins, alerts, and your account. To do this, we store a notification token for your device. If you wish to opt out from receiving these types of communications, you may turn them off in your device’s settings, although you will then not receive family alerts.

This information is used to keep the app working and secure and to fix crashes.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In short: Some information, such as your device type and when you arrive at or leave saved places, is collected automatically when you use our Services.

We automatically collect certain information when you use the Services. This information is needed to provide family alerts, to maintain the security and operation of our Services, and to fix problems.

The information we collect includes:

  • Log and Usage Data. Log and usage data is service-related, diagnostic, and performance information our servers automatically collect when you use our Services and which we record in log files. This log data may include your IP address, device information, the date and time of requests to our servers, and error reports (sometimes called ‘crash dumps’). We use Firebase Crashlytics to receive crash reports, which include your device type, operating system, and the state of the app at the time of the crash.
  • Device Data. We collect device data such as your device model and manufacturer, operating system and version, app version, a random identifier for each installation of the app, your device’s notification token, and your IP address.
  • Location Data. With your permission, Family Haven uses your device’s location, including in the background, to detect when you arrive at or leave places your family has saved. This happens on your device. Only the arrival or departure event (which place, and when) is sent to our servers. Your device’s coordinates and your movements between saved places are not sent to us or stored. The one exception is when you add a place and choose ‘Use my current location’: your current location is then saved as that place’s location. You can turn off location access at any time in your device’s settings, but arrival and departure alerts will then stop working.
  • Battery and app status. Your phone checks its battery level on the device. Only whether your battery is low (15% or below and not charging) or has recovered (above 30%) is sent to us, never the exact percentage. We use this to send optional low-battery alerts to the family members you choose. We also record whether location sharing is on, paused, or working, and when your device last reported, so your family knows when arrival alerts may be delayed.

Information collected from other sources

In short: We receive limited information from Google and Apple, from other members of your family, and from Google Places.

We receive your name and email address from Google or Apple when you sign in with those services. Parents and guardians may provide information about their children and other family members, such as names, age range, saved places, and routines. When you search for an address, we receive place details from Google Places.

We do not buy information about you, and we do not collect information from public databases, data brokers, or marketing partners.

2.How do we process your information?

In short: We process your information to provide Family Haven, send alerts to your family, keep the app secure and working, respond to you, and comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.Retention: For as long as you have an account. When you delete your account, your account information is permanently deleted 24 hours after your request. Parent or guardian consent records are kept for as long as the child’s account exists. The agreements of children aged 13 to 17, including each time they agree or stop sharing, are kept while the child is in the family.
  • To send arrival and departure alerts (based on your consent). We use your device’s location to detect when you arrive at or leave saved places and notify your family. For children under 13, a parent or guardian gives this consent. Children aged 13 to 17 give their own consent as well as their parent’s. You can withdraw it at any time by pausing sharing in the app or turning off location access in your device’s settings, and children aged 13 to 17 can stop sharing at any time in Settings.Retention: Arrival and departure records are deleted after 30 days.
  • To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.Retention: Records of arrivals, departures, check-ins, and routine alerts are deleted after 30 days. Saved places are kept until they are deleted or the family is deleted. Routines are kept until they are deleted or the account they belong to is deleted. Device information is kept until the device is signed out or removed from the family.
  • Saved places and routines. We store the places and routines your family sets up so we can send alerts and check whether scheduled arrivals and departures happen on time.Retention: Places are kept until they are deleted or the family is deleted. Routines are kept until they are deleted or the account they belong to is deleted.
  • Routine alerts. We alert parents when a family member misses a scheduled arrival or departure.Retention: Alert records are deleted after 30 days.
  • To enable user-to-user communications. We share check-ins you send, and alerts about you, with your family members.Retention: Check-ins and alerts shared with family members are deleted after 30 days.
  • To send low-battery alerts (based on your consent). If you turn this on, we tell the family members you choose when your battery is low. You can turn it off in Settings.Retention: We keep the time of your most recent alert only until your battery recovers above 30%, so that your family is not alerted repeatedly.
  • To provide Family Haven Plus. If a parent subscribes, Apple or Google confirm the subscription to us so we can turn on Plus for the whole family, and pause extra places and routines if it ends.Retention: Until the family is deleted.
  • To let parents manage their children’s accounts. Parents can set what their children can change, export their data, and delete their accounts.Retention: Until the child’s account is deleted.
  • To keep alerts reliable. We check whether each family member’s device is still reporting and whether location sharing is on. We also remove notification settings from devices that are no longer in use.Retention: Until the device is signed out or removed from the family.
  • To respond to user enquiries and offer support to users. We may process your information to respond to your enquiries and solve any potential issues you might have with the requested service.Retention: For up to 12 months after your request is resolved.
  • To send administrative information to you. We may process your information to send you account notices, such as when a family member is removed, an account deletion is requested, or our terms and policies change.Retention: Account notices are sent as notifications and are not stored separately. Records shown in the app’s activity history are deleted after 30 days.
  • To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including preventing misuse and fixing crashes.Retention: Crash reports are kept for up to 90 days. Security and server logs are kept for up to 30 days.
  • Account deletion. When you request account deletion, your account and data are permanently deleted.Retention: Deleted 24 hours after the request.
  • To save or protect an individual’s vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.

4.When and with whom do we share your personal information?

In short: We share information within your family group and with service providers who help us run Family Haven. We do not sell your information.

Your family. Family Haven shares information only within your family group. Members can see each other’s names, arrivals at and departures from saved places, check-ins, and whether location sharing is on. Parents can also see their children’s saved places, routines, and devices. Anyone you share an invite code with can see your family’s name and your first name before they join. Your information is never visible to people outside your family.

Vendors, Consultants, and Other Third-Party Service Providers. We share your data with third-party service providers who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organisation apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct.

The third parties we may share personal information with are as follows:

  • Sign-in with your third-party accounts: Google account and Apple Account
  • Cloud Computing Services: Google Cloud Platform
  • Functionality and Infrastructure Optimisation: Cloud Firestore and Cloud Functions for Firebase
  • User Account Registration and Authentication: Google Sign-In, Firebase Authentication, and Sign in with Apple
  • App Performance Monitoring: Firebase Crashlytics
  • App Testing: Google Play Console and TestFlight
  • Push Notifications: Firebase Cloud Messaging and Apple Push Notification service
  • Website Hosting: Vercel, which hosts our website and runs its forms
  • App Security and Abuse Prevention: Firebase App Check
  • Address Search and Maps: Google Places API and Google Maps
  • Subscriptions and Payments: Apple App Store and Google Play
  • Website Forms: Resend, which delivers messages sent through the support and account deletion forms on our website to our support inbox

We also may need to share your personal information in the following situations:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • When we use Google Maps Platform APIs. When you search for an address, the text you type is sent to the Google Places API to find matching places. It is not stored. When you save a place, we store its name, address, and coordinates. On Android, saved places are shown on a Google Map. These APIs do not receive your device’s location. Your use of Google Maps features is also subject to Google’s Terms of Service.

5.Do we use cookies and other tracking technologies?

In short: Neither the Family Haven app nor our website uses cookies, advertising trackers, or analytics tools.

The Family Haven app does not use cookies, advertising trackers, or analytics tools. We do not show advertising and do not allow third parties to track you in the app. We use Firebase Crashlytics to receive crash reports so we can fix problems.

Our website does not use cookies, advertising trackers, or analytics tools either. If you choose a colour theme on the website, that choice is saved in your browser’s local storage so the site remembers it next time. It stays on your device, is not sent to us, and you can clear it at any time in your browser’s settings. Our website is hosted by Vercel, which also runs its support and account deletion forms. Like most websites, it keeps standard server logs, such as your IP address and the pages requested, to keep the site running and secure. These logs are kept for [VERCEL LOG RETENTION PERIOD].

6.How do we handle your social logins?

In short: If you sign in with Google or Apple, we receive your name and email address from that provider.

You can sign in with your Google or Apple account. When you do, we receive your name and email address from that provider. If you use Apple’s ‘Hide My Email’, we receive a private relay address instead. We do not receive your contacts, friends list, or other account information.

We will use the information we receive only for the purposes that are described in this Privacy Notice. Please note that we do not control, and are not responsible for, other uses of your personal information by Google or Apple. We recommend that you review their privacy notices to understand how they collect, use, and share your personal information.

7.Is your information transferred internationally?

In short: Your family’s data is stored in the United Kingdom, but some of the services we use process data in the United States.

Your family’s data is stored in the United Kingdom (London). Some services we use, including Google sign-in and authentication, push notification delivery, crash reporting, and address search, are operated by Google and Apple and may process data in the United States and other countries. Our website is hosted by Vercel, and messages sent through its forms are delivered by Resend. Both may process data in the United States.

The United States may not have data protection laws as comprehensive as those in the United Kingdom. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.

Standard Contractual Clauses: We protect your personal information when it is transferred by using the European Commission’s Standard Contractual Clauses, supplemented by the UK International Data Transfer Addendum, in our agreements with our third-party providers. Google is also certified under the UK Extension to the EU-U.S. Data Privacy Framework (the ‘UK-US data bridge’). These safeguards require recipients to protect personal information originating from the UK in accordance with UK data protection law. Google’s data processing terms, which include these clauses, are available here: https://firebase.google.com/terms/data-processing-terms. Apple processes data for Sign in with Apple and push notifications under its own data protection terms. Further details can be provided upon request.

8.How long do we keep your information?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. The retention period for each purpose is set out in ‘How do we process your information?’. In summary:

  • Arrival, departure, check-in, and routine alert records are deleted after 30 days.
  • Saved places are kept until they are deleted or the family is deleted. Routines are kept until they are deleted or the account they belong to is deleted.
  • Your account is kept until you delete it, and is permanently deleted 24 hours after your request.
  • Crash reports are kept for up to 90 days, and server logs for up to 30 days.
  • Support emails are kept for up to 12 months after your request is resolved.
  • Subscription details are kept until the family is deleted.
  • Teen agreement records are kept while the child is in the family.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9.How do we keep your information safe?

In short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. These include access rules that limit each person to their own family’s data, checks that requests come from the genuine Family Haven app, and limits on how often certain actions can be performed. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10.What are your privacy rights?

In short: Under UK data protection law, you have rights that allow you greater access to and control over your personal information. You may review, change, or delete your account at any time.

Under the UK GDPR and the Data Protection Act 2018, you have certain rights. These include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; (iv) if applicable, to data portability; and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information, including processing based on our legitimate interests. You can make such a request by contacting us by using the contact details provided in the section ‘How can you contact us about this notice?’ below. We will respond within one month.

We will consider and act upon any request in accordance with applicable data protection laws.

If you are unhappy with how we have handled your personal information, you can make a complaint directly to us. This is in addition to the rights you have under the UK General Data Protection Regulation and the Data Protection Act 2018.

How to contact us:

What happens after you complain

  • We will acknowledge your complaint within 30 days of receiving it.
  • We will investigate without unjustifiable or excessive delay.
  • We will keep you informed of progress and explain the outcome.

If you are not happy with our final response, you can refer your complaint to the Information Commissioner’s Office, the UK supervisory authority.

Withdrawing your consent: If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. You can do this in the app by pausing location sharing, by stopping sharing if you are aged 13 to 17, or by turning off low-battery alerts in Settings, by turning off location access in your device’s settings, or by contacting us using the contact details provided in the section ‘How can you contact us about this notice?’ below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Account Information

If you would at any time like to review or change the information in your account or delete your account, you can:

  • Log in to your account settings and update your user account. You can delete your account in the app under Settings, then Leave or delete.
  • Contact us using the contact information provided.

When you ask us to delete your account, we permanently delete your account and personal information 24 hours after your request. This includes your profile, your activity records, your devices, and your routines. Places you saved for your family stay with the family, with your name removed. If you are the only parent in a family, the family and its data are deleted too. Crash reports and server logs expire on their own schedule, described in ‘How long do we keep your information?’.

If you have questions or comments about your privacy rights, you may email us at support@ourfamilyhaven.com.

11.Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (‘DNT’) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Family Haven does not track your online browsing activities. At this stage, no uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

12.Children and families

Family Haven is designed for families, including children. Children under 18 can only join a family when a parent or guardian invites them. When creating an invite for a child, the parent or guardian confirms that they are over 18 and are the child’s parent or guardian, and gives consent for Family Haven to collect the child’s location to send arrival and departure alerts to their family. If the child is 13 or over, they are also asked to agree for themselves the first time they open the app, after being shown what their family will see. Their arrivals and departures are not shared until they agree. They can stop sharing at any time in Settings, and their family will see that sharing is off. The same applies if a parent switches a child to the Teen profile.

When anyone signs up, we ask for their date of birth to work out whether they are under 13, 13 to 17, or an adult. We keep only that age range on the phone, not the date of birth. For children, we also record on our servers whether they are 13 or over, so that we know to ask for their own agreement.

Parents can see their children’s arrivals at and departures from saved places, check-ins, saved places, routines, devices, and whether location sharing is on. Parents decide which settings their children can change. Any parent in the family can export a child’s data from the child’s profile in the app, and the family owner can delete a child’s account.

Children aged 13 and over can also contact us directly at support@ourfamilyhaven.com to exercise their own data protection rights, including asking for a copy of their information or asking us to delete it.

We do not use children’s information for advertising or marketing, we do not sell it, and we do not build profiles about children.

13.A short guide for kids and teens

Family Haven lets your family know when you get to or leave places you’ve saved together, like home or school. It does not show anyone a map of where you are, and it does not share where you go between those places.

Your family can see when you arrive at or leave a saved place, and when you send a check-in. At the top of every screen in the app, you’ll see a message that tells you whether your family can see when you get to your places. If sharing is paused or location is turned off, the message tells you that too. If you’re 13 or over, you decide whether to turn sharing on. Nothing about where you go is shared until you agree, and you can turn it off at any time in Settings.

We keep records of your arrivals and departures for 30 days, and then we delete them.

If you have questions or are worried about anything, talk to your parent or guardian, or email us at support@ourfamilyhaven.com.

14.Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated ‘Last updated’ date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we will notify you either by prominently posting a notice of such changes in the app or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15.How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at support@ourfamilyhaven.com or contact us by post at:

Doccrs Digital Ltd
18 Sorrel Street
Gloucester GL2 9RP
United Kingdom

Registered in England and Wales, company number 16338795.
ICO registration number: [ICO REGISTRATION NUMBER].

16.How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, use the settings in the Family Haven app or email us at support@ourfamilyhaven.com.