Privacy Policy

The short version

Stedhaven exists so your voice reaches your family someday. Trust is the entire product, so our data practices are simple and we state them plainly:

• We never sell your personal information, your recordings, or your children’s information.
• We never use your recordings or your family’s information for advertising, or to train AI models — ours or anyone else’s. Ever.
• We don’t do voice identification. Your recordings are messages, not biometrics. We do not create voiceprints and will not permit voice-based identification from your content.
• Your recordings are yours — encrypted, exportable to storage you control, and yours to keep whether or not you’re paying us.
• We may send you marketing about our own products, and you can opt out at any time. We never let anyone else advertise to you.
• The people you record for are never our users. You tell us about them; they tell us nothing.

The rest is detail.

1. Who we are

The Service is operated by Hypera Ventures, Inc. (“Stedhaven,” “we,” “us”), a Delaware corporation, which runs the Stedhaven app and stedhaven.com.

1509 Avenida de Nogales, San Clemente, CA 92672
support@stedhaven.com

2. What we collect

From you, the account holder

• Email address, received when you sign in. Sign-in is currently available through Apple, Google, or a one-time code sent to your email — in these cases we receive an authentication token, never a password. If we later offer email-and-password sign-in, we would store only a cryptographic hash of your password, never the password itself.
• Shipping name and postal address, if you receive a physical product.
• Membership and purchase status — whether a payment succeeded, which plan you hold, when it renews. We never receive or store card numbers.
• Device and usage data — device type, OS version, app version, IP address, and crash reports.
• Product analytics events describing actions taken in the app, such as that a recording was saved. Event data describes actions, never content. We do not analyze the audio of your recordings for analytics.

You can begin recording before creating an account. If you do, that content is held in an anonymous session on your device and linked to your account when you sign in.

About the people you record for, from you

You tell us about your recipients — usually your children, but a recipient can be any family member or person you choose. For each one:

• A first name and date of birth.
• Optionally, a photo you choose to add.
• A security question, hint, and answer you write, used to verify access later. This is required before anyone can reach that recipient’s archive. We store only a cryptographic hash of the answer — the answer itself is never stored on our servers and cannot be recovered by us or anyone else.

Recipients do not provide us anything. When a recipient is a child or other minor, you confirm you are their parent or legal guardian when you enter this information.

Your content

Voice recordings you make, and the details you attach to them — titles, recipients, categories, and availability rules such as “on a coin scan,” “at a certain age,” or “on a date.”

During access by a recipient

When someone you’ve designated reaches an archive, we process what they enter — a code, a first name, a date of birth, and the answer to your security question — solely to verify access at that moment. Submitted birthdays and security answers are not logged.

From visitors to our website

Our website, stedhaven.com, uses cookies and similar technologies to understand how people find and use it, and to measure our advertising.

• Standard web data — pages visited, referring site, approximate location from IP address, device and browser type.
• Advertising and analytics tags, currently the Meta pixel. These help us understand which ads bring people to the site and let us show ads to people who visited but didn’t sign up.
• Hashed contact details. If you enter an email address on our website, it may be converted into an irreversible cryptographic hash and sent to Meta so they can tell whether a visit came from one of our ads. We do not send your actual email address, and the hash cannot be reversed back into it.

You can control this. Use our cookie controls, enable Global Privacy Control in your browser — we honor it — or use your browser’s own tracking protections.

None of this happens in the app. The Stedhaven app contains no advertising trackers, and nothing about your recordings, your family, or your archive is ever shared with an advertising platform.

What we deliberately do not collect

Your contacts, your precise location, your photo library, advertising identifiers in the app, or anything directly from your children. The app contains no advertising trackers.

3. Where your information lives

On your device. Recordings and their details are stored locally so the app works offline. Credentials are stored in the iOS Keychain.

On our servers. Recordings and their details sync to our cloud infrastructure, encrypted at rest and in transit. This is the durable copy. Our servers are located in the United States.

In storage you control, at your direction. You can export your complete archive to your own Google Drive, or have a download link emailed to you. When you do, we transmit your content because you told us to. What happens in your own storage is governed by that provider and by you.

4. Service providers

We share information only with providers who help us operate the Service, under contracts limiting their use of it to providing services to us.

We may also disclose information if required by law, to protect rights and safety, or in a corporate transaction — and any successor takes user content subject to the promises in this policy and in our Terms: no sale, no advertising use, no AI training.

5. How we use information

• To provide the Service — store, encrypt, back up, sync, and deliver your recordings; run memberships; make and ship physical products.
• To personalize — suggest prompts and time features using details you gave us, such as a child’s age.
• To communicate — service messages you need, and marketing about our own products. See the next section for exactly what falls into each and how to opt out of marketing.
• To keep the Service safe — security, fraud prevention, rate limiting, and debugging.
• To comply with law.

We do not sell personal information, use your content or your children’s information for advertising, use your content to train AI or machine-learning models, build voiceprints or biometric identifiers, or make automated decisions with legal or similarly significant effects about you.

6. Marketing communications

We send two different kinds of message, and the difference matters.

Service messages

These are part of the Service you’re paying for, and you receive them as long as you have an account:

• Receipts, billing notices, and trial reminders
• Order confirmations and shipping updates for physical products
• Download links you requested, such as an export of your recordings
• Security and account notices, including sign-in alerts and changes to these policies

Service messages are not marketing and cannot be unsubscribed from while you hold an account. If you no longer want them, you can delete your account.

Marketing

We may send you promotional messages about our own products, features, and offers. This may include:

• Email, sent to your account email address and sometimes addressed to you by name
• Print — promotional material included in a physical shipment, such as an insert in a coin package, and occasional direct mail to the shipping address you gave us

To do this we use your name, email address, and postal address. We never share this information with other companies so they can market to you, and we never sell it.

How to opt out

• Email: use the unsubscribe link at the bottom of any marketing email, or email support@stedhaven.com. Every promotional email we send includes a working unsubscribe link and our postal address. We honor unsubscribe requests promptly and in all cases within 10 business days, as US law requires.
• Print and direct mail: email support@stedhaven.com and ask us to stop. We’ll remove you from future print mailings.

Opting out of marketing does not affect your account, your recordings, or the service messages described above.

A note for the future

We currently operate in the United States, where an opt-out model is permitted for commercial email. If we expand to other countries, stricter rules may apply — including opt-in consent in Canada, the United Kingdom, and the European Union. We will update this policy and our practices before operating in those markets.

7. Retention and deletion

• Your content is kept as long as your account exists — including if you stop paying. Your archive remains yours and retrievable. See our Terms.
• Deleted recordings enter a recovery window of approximately 30 days, then are permanently deleted.
• Deleting your account permanently deletes your archive and personal information, subject to the recovery window, backup rotation, and any legal retention obligations. This is irreversible. Export first.
• Payment and order records are kept as long as law and accounting require.
• Marketing list data is kept until you unsubscribe.

A note on long retention. This product exists to preserve recordings for years or decades. Your content is not ephemeral. We do not delete recordings because a membership lapsed, a payment failed, or an account went unused. If your membership ends, your archive stays — you can still sign in, listen, and export it, and your family can still reach it with a coin and your verification details. What stops is making new recordings.

We delete your content only when you delete it, or when you delete your account.

8. Your rights and choices

Depending on where you live — including under California’s CCPA/CPRA — you may have the right to know what we collect, access it, correct it, delete it, opt out of any “sale” or “sharing,” and not be discriminated against for exercising these rights.

We do not sell personal information.

Some state laws treat the use of advertising cookies for cross-context behavioral advertising as “sharing.” The advertising tags on our website fall into that category. To opt out, use the site’s cookie controls or enable Global Privacy Control in your browser, which we honor. Nothing about your recordings, your family, or your archive is ever involved.

To exercise any right, email support@stedhaven.com. We may need to verify your identity first.

In the app, at any time, you can export your archive, delete individual recordings, delete your account, and manage notification and email preferences. You can also opt out of marketing at any time — see the Marketing communications section above.

9. Children’s privacy

The Service is for adults 18 and over. Children cannot create accounts, and we do not knowingly collect personal information directly from children.

Information about a child — a first name, a date of birth, and optionally a photo — is provided by you, their parent or legal guardian, for the Service’s family features. Recipients may also be adults, in which case this section does not apply to them.

Access to an archive may be used by your child, including while they are a minor, using the verification details you configured as their parent — a code, their first name, their date of birth, and the answer to a security question you wrote. During that process we handle only what is needed to verify access at that moment.

If you believe a child has provided us information directly, contact us and we will delete it.

10. Security

Recordings are encrypted in transit and at rest. Database access is controlled by row-level security, with additional protections on sensitive fields. Security answers are stored only as cryptographic hashes and cannot be read by us. Credentials on your device are stored in the iOS Keychain. Card data never touches our servers.

We take these measures seriously, but no system is perfectly secure and we cannot guarantee absolute security. Your ability to export your own copies means your archive never depends solely on us.

If a breach affects your personal information, we will notify you as required by law.

11. Where we operate

We operate from the United States, and the Service is currently offered in the United States only. All information is stored and processed in the United States.

12. Changes

We will post updates with a new effective date and give notice of material changes before they take effect. The core promises in “The short version” will never be weakened by an update.

13. Contact

Hypera Ventures, Inc.
1509 Avenida de Nogales, San Clemente, CA 92672
support@stedhaven.com