Personal data security, finally accounted for.

Haven shows you where your sensitive data lives, which services you've forgotten, who can see it, and what's worth fixing — across every cloud account and device you use. Everything runs on your computer. We never see your files.

Local-first classification Findings stay in a local encrypted store Visible network log Every action reversible 30 days
The problem, stated plainly

Most people cannot answer four questions about their own data.

A 15-year-old Gmail has 150,000 messages. A decade of Drive has tens of thousands of files. No human will audit that — and yet the sensitive data is all there: tax returns, medical records, plaintext passwords, API keys, driver's license scans. The industry has a name for this in the enterprise. Consumers have nothing.

01

What sensitive data do I have?

How many documents contain your SSN, your driver's license, your bank account numbers, your medical records — actually?

02

Where does it all live?

Spread across Gmail, Outlook, Drive, OneDrive, iCloud, Dropbox, local folders, screenshot archives, and forgotten backups.

03

Who still has access?

Former coworkers. Ex-partners. Defunct vendor accounts. Public links from 2017 and old SSO grants that still work today.

04

What should I actually do about it?

Remediation requires navigating cloud platforms, account deletion pages, and password resets. Haven turns it into one list.

Why deletion matters · Attack surface

Everything you keep is something that can be taken.

Every old tax return, every public link, every account that still has your data is one more thing a breach can reach. Security people call this your attack surface. Haven calls it the stuff you forgot you were still carrying — and helps you put most of it down.

tax · current passwords IDs public link · '17 ex-coworker SSN in email old receipts defunct vendor drive share SSO grant screenshot You your data
11 exposed today 3 truly necessary

You can't protect what you've forgotten you have.

A breach doesn't care how old the file is. The tax return you shared in 2017, the password you emailed yourself, the folder a former coworker can still open — each one is live, reachable, and waiting. The fix isn't more locks. It's having less to lock.

01

See the whole surface

Haven maps every exposed item across your email, drives, and devices — the things you'd never find by hand.

02

Shrink what you don't need

Revoke a stale share, delete a forgotten attachment, cut off old access — each in one reversible click.

03

Keep only what's necessary

What's left is small, known, and yours. If the worst happens, there's simply less of you out there to find.

A smaller surface is the only security gain you keep even after you stop paying attention.

How it works

Three steps. Local-first by design.

Step one

Connect your accounts

Grant Haven read access to Gmail, Outlook, Proton Mail, Google Drive, OneDrive, or iMessage — or point it at the local files on your device. OAuth tokens stay in your system keychain. We never see them.

Step two

Scan on your computer

Detection runs on your computer. For the small number of ambiguous cases that need a second opinion, Haven sends a small, anonymized excerpt for a verdict — more on exactly where that goes below.

Step three

Remediate with confidence

Review findings ranked by severity, then remediate them in a click — archive an email, revoke a share, save a password to your manager. Every remediation is reversible for 30 days, so your posture score climbs as you resolve things and you never have to be afraid to click.

Haven uses purpose-built detection engines designed specifically for finding personal data — not a general-purpose AI sitting in the cloud reading your files.

Inside Haven

A desktop agent that actually shows you what you have.

Everything you've forgotten, ranked by how much it matters.

Your dashboard opens with a single posture score and the handful of things worth fixing today. Filter by source, select in bulk, act with one click — and know that every action has a 30-day undo.

Gmail, Outlook, Proton Mail, Drive, OneDrive, iMessage, and local files
Object-level vs. data-level findings, clearly labeled
Catches account-takeover email forwarding rules
Sharing Audit with one-click bulk revokes
Paraphrased findings — we describe, we don't reveal
Every action reversible for 30 days
See the full interactive tour
Remediations

Find it, fix it — and undo it if you change your mind.

Every action you take on a finding is a remediation. Haven logs each one with a timestamp, the connector, and whether it succeeded — and for 30 days, any remediation is one click from being reversed. That safety net is the whole point: you clean up fast because nothing you do is permanent.

Archive, trash, or label sensitive email — Gmail & Outlook
Revoke public & external share links — Drive & OneDrive
Move a password into 1Password, Bitwarden, or LastPass — then archive the original
Mark a finding resolved for fixes you handle elsewhere
Select many and bulk-remediate from the toolbar
Every remediation logged and reversible for 30 days
Ask Haven · Beta

Ask about your exposure in plain language.

Type a question the way you'd say it — "where are my tax documents?", "what's exposed externally?" — and Haven answers from the index it built on your machine. It's search over your findings, not a chatbot: the question is parsed on your device, with no message bodies read and nothing sent to a server.

Plain-language questions, parsed entirely on-device
Retrieval, not generation — Haven reads your findings, never your messages
Tap a suggested question or write your own
Results are the same finding rows you can act on with one reversible click
Try it in the interactive tour
Current connectors

Every place your data actually lives.

Connect a source and Haven scans it on your computer, identifies the sensitive items and exposures hiding inside — old tax returns, plaintext passwords, public shares, account-takeover forwarding rules — and lets you remediate each finding with one reversible click.

Gmail Email
Outlook & Hotmail Email
Proton Mail Email
Google Drive Cloud storage
OneDrive Cloud storage
iMessage Messages
This device Local files
iMessage · on Mac Beta

The most sensitive things you've sent, finally accounted for.

Two optional detectors look for the content that's most damaging if a device is lost, stolen, or used for extortion. Both are off by default, and content involving minors is never flagged.

Detect intimate content — flags sexually explicit messages, text only.
Detect explicit photos — checks image attachments with an image-safety classifier.

Coming soon: iCloud Mail

The trust story, spelled out.

We designed Haven assuming our own cloud could be breached. Even in the worst case, an attacker would find account metadata and anonymous counts — never your files, never your findings, never readable content.

On your device Readable. Yours.
  • Your files

    Scanned on your computer, never uploaded.

  • Your findings

    The list of sensitive items, stored locally and encrypted.

  • Your decryption key

    Derived from your OS keychain. Never leaves the device.

All Haven ever holds Unreadable to us.
  • Your email address

    So you can sign in across devices.

  • Billing info

    Handled by our payments provider.

  • Anonymous usage counts

    Aggregate detection counts and fingerprints — never content, never your findings.

Inside Haven, a Network Activity log shows every outbound request — payload type, destination, timing.
Who Haven is for

Different lives, the same quiet problem.

The same decade of forgotten files and exposed credentials looks different depending on what you stand to lose.

Professionals with a duty of confidentiality

For lawyers & advisors

You hold other people's sensitive data — client SSNs, privileged strategy, financial records. Haven finds where it's exposed across your email and drives, on your own machine, so confidentiality doesn't quietly fail.

Personal security for lawyers
Technical people · founders · engineers

For founders & engineers

API keys in a notes file. Tokens pasted into old emails. A secret shared in Slack two years ago. Haven scans your machine and accounts for the credentials you've left exposed — and helps you rotate or vault them.

What Haven catches
Life transitions · a clean slate

For a fresh start

Before you merge accounts, share a drive, or pass on an old laptop — see everything sensitive a decade of digital life left behind. Old passwords, forgotten documents, things you'd rather not carry forward.

How a scan works
Public figures

For public figures

Preparing for a public role means your old digital life becomes someone else's research project. Haven runs that audit first — privately, on your own machine — so you can close the gaps before anyone goes looking.

Talk to us
Pricing hypothesis · subject to early-user feedback

Simple pricing. Honest trade-offs.

Most new Haven users find dozens of exposed sensitive items in their first scan — old tax returns shared with strangers, plaintext passwords pasted into emails, ID scans sitting in screenshot folders. One critical fix typically pays for a year of Haven.

Prices below are our working hypothesis for launch. First 1,000 paying users will be grandfathered regardless of final pricing.

Individual
Haven for one
$14
/ month
For the person who already has a password manager and a growing sense of unease about their inbox.
  • Unlimited cloud sources
  • Desktop agent (Windows today, macOS coming)
  • 30-day undo on every action
  • Account inventory + Google SSO graph
Family · 5 seats
Haven for households
$24
/ month
For the one person in your household who keeps the digital lights on for everyone else.
  • Everything in Individual, ×5
  • Household posture overview
  • "Help a parent" remediation walk-through
  • Legacy contact / estate planning