Privacy Policy

1. Who we are and who is responsible for your data

Havnest is a personal finance application currently in development. The service is operated by:

As the data controller, Péter Gulyás is responsible for deciding how and why your personal data is processed, and for ensuring that processing complies with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Hungarian data protection law.

2. What personal data we collect

At this stage — prior to the public launch of Havnest — the only personal data we collect is:

• Email address — provided voluntarily when you sign up for the launch waitlist on havnest.app
• Signup timestamp — the date and time your registration was recorded
• Source field — a technical label recording that your signup came from the website (not personally identifying)

We do not collect your name, phone number, location, payment details, or any other personal information at this stage. We do not use cookies, tracking pixels, or any third-party analytics tools on this website.

3. Why we collect your data and the legal basis for processing

We collect your email address for one purpose only: to send you a single notification when Havnest becomes publicly available.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR). By entering your email address and clicking "Notify me at launch," you are giving your explicit, freely given, and informed consent for us to contact you at launch. You may withdraw this consent at any time by contacting us at support@havnest.app.

4. How we store your data

Your email address is stored in a secure database provided by Supabase, Inc., hosted on Amazon Web Services (AWS) infrastructure in the EU West (Ireland) region. This means your data does not leave the European Economic Area (EEA).

Supabase is SOC 2 Type 2 certified. AWS holds ISO 27001, SOC 2 Type 2, and PCI-DSS certifications. All data is encrypted in transit (TLS) and at rest (AES-256).

Access to the waitlist database is restricted to the data controller (Péter Gulyás) only. No other person or system has access to this data.

5. How long we keep your data

We will retain your email address only for as long as necessary to fulfil the purpose for which it was collected:

• If Havnest launches, your waitlist record will be deleted within 30 days after the launch notification email has been sent
• If you request deletion before launch, your record will be deleted within 30 days of your request
• If the Havnest project is discontinued before launch, all waitlist data will be permanently deleted within 30 days of that decision

We do not retain personal data beyond these periods for any reason.

6. Who we share your data with

We do not sell, rent, share, or otherwise disclose your personal data to any third party, for any purpose, under any circumstances.

The only third-party system that processes your data is Supabase (as our database infrastructure provider), acting as a data processor on our behalf under a Data Processing Agreement. Supabase does not have permission to use your data for any purpose other than storing it securely on our behalf.

We do not use any email marketing platforms, advertising networks, analytics services, or social media integrations that would receive or process your data.

7. Your rights under GDPR

As a data subject under GDPR, you have the following rights, which you may exercise at any time by contacting us at support@havnest.app:

• Right of access (Article 15): You may request a copy of the personal data we hold about you
• Right to rectification (Article 16): You may request correction of inaccurate personal data
• Right to erasure (Article 17): You may request deletion of your personal data at any time — we will action this within 30 days
• Right to restriction of processing (Article 18): You may request that we limit how we use your data
• Right to data portability (Article 20): You may request your data in a structured, machine-readable format
• Right to withdraw consent (Article 7(3)): You may withdraw your consent at any time; withdrawal does not affect the lawfulness of processing before withdrawal
• Right to object (Article 21): You may object to processing of your personal data

We will respond to all valid requests within 30 days of receipt. We will not charge a fee for exercising any of these rights under normal circumstances.

8. Right to lodge a complaint

If you believe your personal data has been processed in a manner that does not comply with GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Hungary, the relevant authority is:

We would always appreciate the opportunity to resolve any concern directly before you contact the supervisory authority. Please reach out to us first at support@havnest.app.

9. Children's privacy

The Havnest waitlist is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has submitted their data to this waitlist, please contact us at support@havnest.app and we will delete the record immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time, particularly as Havnest moves from the waitlist phase to a full application with user accounts and subscriptions. When we make material changes, we will update the "Last updated" date at the top of this page.

As Havnest is currently pre-launch, the scope of data processing described in this policy is intentionally narrow. A comprehensive privacy policy covering the full application — including user accounts, financial data, household profiles, and subscription billing — will be published before the app launches.

11. Contact

For any questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data, please contact us: