Privacy Policy

Farhaven is a travel-safety app. This policy explains, in plain English, what information the app and the waitlist on this website handle, where it lives, and the choices you have. We wrote it for travelers, not lawyers.

The short version: Farhaven has no account and no login. Almost everything you enter stays on your phone. The app does not run ads, analytics, crash reporting, tracking, or push notifications, and we do not sell your data. Optional visa timer reminders are scheduled by your phone itself and send nothing to us or anyone else. Our website uses privacy-friendly analytics; see "Website analytics (farhaven.app only)" below.

Who we are

Farhaven is published by Limestone Capital LLC (United States), the company responsible for your information under this policy and its data controller.

Contact: support@farhaven.app

Information we handle, and where it is stored

You do not create an account to use Farhaven. The information below is stored only on your device (in the app's local storage), unless a section says otherwise. We do not receive a copy.

• Your location. Used to show safety information for where you are. Your precise position is used on your device, by your phone's own location and map services, to work out which country and city you are in and to show you on the map. When a feature needs an outside lookup (weather, air quality, nearby hazards, transport disruptions, the nearest airport), only an approximate, rounded position — about a 1 km area, not your exact spot — leaves your phone, and only for the service that needs it (see the table below). Apart from your phone's own location services (Apple or Google, depending on your phone), your exact location only leaves your phone in an SOS or Share my location message that you send yourself.
• Passport nationality. Optional. Drives visa and entry rules, including the Entry requirements label on the map. When you look up entry rules, your nationality and the destination country are sent to our visa data provider so it can return the right rules. Our server keeps a shared copy of the answer for up to 60 days, with nothing that identifies you (see "How long we keep information").
• Emergency contacts. Names and phone numbers you add for the SOS feature. They are never sent to us. Stored on your device only.
• Trips. Destinations, dates, and any trip name you add. Stored on your device only. Pre-trip briefings and transport checks send only destination country codes to look up information — never your trip names or dates.
• Saved flights. Flight numbers you save. Stored on your device only; a flight number (and date, if you give one) is sent to our flight-status provider when you look it up.
• Visa timers. The country, entry date, and number of allowed days you enter for a stay. Stored on your device only; your entry date and allowed days are never sent. Choosing a country may look up entry rules for your passport nationality, as described above. If you turn on reminders, they are scheduled on your phone (see "No push notifications" below).
• Checklists and badges. Your checklist progress and the badges you earn. Stored on your device only.
• Preferences. Temperature unit, preferred advisory source, and whether you finished setup. Stored on your device only.
• Saved copies of information. To work offline and avoid repeat lookups, the app keeps copies of information it has fetched — for example travel advisories, public holidays for a country, and the last air-quality reading (for 20 minutes, for your rounded location). Stored on your device only.
• Terms acceptance. Which version of the Terms of Service and Privacy Policy you accepted, and when. Recorded on your device only; we do not receive a copy.

The app does not collect your name, email, contacts list, photos, advertising ID, push notification token, or any device identifier. The only identifier the app creates is a random installation ID used for update checks (see "What leaves your device, and to whom"); it is not linked to you or to any other information in the app.

What leaves your device, and to whom

Farhaven reaches outside services in four ways.

1. Through our data proxy. Most features fetch information through a thin server we operate. It holds our provider keys, forwards the minimum needed (a country code, a rounded location, your passport nationality, or a flight number), and returns the result. Outside data providers receive these requests from our server, not from your phone, so they see our server's address rather than yours. Our server does not build a profile of you. It keeps short-lived shared copies of some answers so it does not have to ask a provider the same question twice; see "How long we keep information".

2. Straight from your phone, to official sources. A few official travel-advice sources are fetched directly by your phone: UK FCDO travel advice on gov.uk (the request names the country you are viewing), the US State Department travel advisory feed on travel.state.gov (the same full list for everyone), and Australia's Smartraveller advice on smartraveller.gov.au (the same full list for everyone, at most once a day; the request names the app, its version, and your phone's operating system version). Because your phone contacts them directly, these government services see your IP address and handle it under their own privacy policies.

3. Straight from your phone, to a recipient you pick. The Share my location and SOS features build a message with your location and hand it to your phone's normal share or text sheet. You choose who receives it. That message uses your exact location because you are sending it to someone you trust — it does not go to us or to any Farhaven server.

4. App update checks. When you open Farhaven, it checks for app updates through our update service provider (Expo), which receives basic technical information to deliver the right update: a random installation ID created by the app, your device platform (iOS or Android), and app version information. Like any online service, it also sees your IP address. No account details, location, passport nationality, or anything else you enter in the app is sent. Expo also uses this information to show us anonymous, aggregate counts of how many installations are running each update.

The services we use and what they receive

We send each service the minimum it needs — most receive only a country code, and your location is always rounded to about a 1 km area (never your exact position) before it leaves your phone.

Public holidays are answered by our server from its own copy of an open-source holiday calendar: only the code of the country you are viewing is sent, and no holiday service receives a request. Tap-water guidance and travel phrases are built into the app, so nothing is sent for them. Spoken pronunciation is synthesised on your device by the operating system (iOS or Android may, per their own settings, download voice data — governed by Apple's and Google's policies).

Some features are not active in the current version (for example, news and push notifications). If we turn any on, we will update this policy first.

The Farhaven waitlist

This section covers the waitlist form on farhaven.app, not the app itself. If you join the waitlist, we collect only your email address. It is sent to and stored with Kit (kit.com), the email provider we use for the waitlist, and Kit handles it under its own privacy policy. Kit emails you a link to confirm your subscription; if you don't confirm, you are not added to the list. Occasionally Kit may ask you to complete a security check (provided by Google reCAPTCHA) to block spam sign-ups.

We use your email address only to send you Farhaven launch updates. We do not sell it, share it with advertisers, or use it for anything else. Like most email providers, Kit may record whether our emails are delivered, opened, or clicked.

You can unsubscribe at any time using the unsubscribe link in any email we send, or by emailing support@farhaven.app. Kit keeps your address until you unsubscribe or ask us to delete it.

Website analytics (farhaven.app only)

We use Vercel Web Analytics to understand how visitors use our website, farhaven.app. It collects aggregated information such as pages viewed, referring site, country, and device/browser type. It does not use cookies and does not identify individual visitors. This data is processed by Vercel Inc. in the United States. Our legal basis is our legitimate interest in improving the website. This applies only to the farhaven.app website. The Farhaven mobile app does not use Vercel Web Analytics.

What we do not do

• No ads today. The current version shows no advertising. If we add an ad-supported free tier later, we will update this policy and ask for any consent the law requires before any ad tracking happens.
• No analytics, crash reporting, or tracking. The app contains no analytics, crash-reporting, advertising, or tracking tools, and we do not use cross-app tracking identifiers.
• No push notifications. We do not send push notifications from our servers, and the app does not create a push token. Visa timer reminders are different: they are local notifications that your phone schedules itself, only if you turn them on for a timer, and no data leaves your device to create or show them. You can turn them off for each timer in the app, or for all of Farhaven in your phone's settings.
• No accounts. The app has no sign-up, login, or user profile, so nothing we hold about your app use is linked to you.
• No selling or "sharing" of personal information in the sense used by California law.

How long we keep information

Information stored on your device stays there until you delete it or remove the app.

Shared answers on our server. To keep lookups fast and within our providers' limits, our server keeps a copy of some answers in a cache run by Upstash: visa and entry rules for a passport nationality and destination for up to 60 days, flight-status and airport-delay answers for 5 minutes to 6 hours, public Canadian and Australian travel advice for up to 30 days, and public news headlines for up to 12 hours. Each copy is shared by every traveler who asks the same question, is stored under a scrambled (hashed) key, and has no user, device, or IP address attached. Cached news headlines are public articles and contain no personal data.

Abuse protection. To protect the service from abuse, our server briefly creates a one-way, salted hash of your IP address to count requests. The hash cannot be reversed to reveal your IP address, changes every few minutes so it cannot be used to track you over time, is not linked to any other data, and is automatically deleted within about 15 minutes. We do not store your IP address.

Hosting records. Our server runs on Expo's EAS Hosting service. When the app contacts our server, the hosting provider automatically records technical information about each request: the time, the address requested (for example, which feature and country), the response status, your IP address, the approximate country and region derived from the connection, the app type, and how long the request took. Your location, passport nationality, and flight details are sent separately from the address, so they are not included in these records. These records are kept for 7 days. Expo's privacy policy also applies to this information.

Our own server code does not record your location, passport nationality, flight details, or IP address, and keeps no identifier beyond the short-lived request-count hash described above; its diagnostic logs contain only details such as country and airport codes and whether a lookup worked.

Deleting your information

Because your information lives on your device:

• Delete individual items in the app — remove a trip, a visa timer, an emergency contact, or a saved flight, or clear your passport and country in Settings.
• Delete everything by uninstalling Farhaven. That removes all app data from your device.
• Shared answers in our server's cache are not linked to you, so we cannot pick out yours; they expire on their own (see "How long we keep information").
• Waitlist email. Unsubscribe using the link in any Farhaven email, or email support@farhaven.app and we will delete your address from Kit.
• Questions or requests? Email support@farhaven.app and we will help.

Your privacy rights

Limestone Capital LLC is the data controller for the personal information described in this policy. Wherever you are, including the EU and UK, you can email support@farhaven.app to make a privacy request, such as access, deletion, or objection to processing.

If you are in the UK or EU (UK GDPR / GDPR)

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Because your data is stored on your device and we hold no account, you can exercise most of these rights directly in the app (see "Deleting your information"). Our legal bases are performing the service you asked for and our legitimate interest in providing travel-safety information; we rely on your consent for device location access and for sending waitlist emails. To make a request, email support@farhaven.app. You may lodge a complaint with your local data protection authority.

If you are in California (CCPA / CPRA)

You have the right to know what personal information is collected, to delete it, to correct it, and to opt out of its "sale" or "sharing." We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising. We will not discriminate against you for exercising your rights. To make a request, email support@farhaven.app.

Children

Farhaven is intended for travelers aged 13 and older and is not directed to children under 13. In some countries, the minimum age for consent to data processing is higher (for example, 16); where that applies, the local minimum age governs. We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided information, contact support@farhaven.app and we will delete it.

International users and data transfers

Farhaven is operated from the United States, and the services above are located in various countries. Using the app involves transferring information to the United States and to those services. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

Security

We keep provider keys off your device and behind our proxy, send only the minimum information needed, round your location before it leaves your phone for outside lookups, and store shared answers under scrambled keys. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy as the app changes. When we do, we will change the "Last updated" date above and, for significant changes, provide a more prominent notice in the app.

Contact

Questions about this policy or your information: support@farhaven.app

Limestone Capital LLC, United States.