01
Opens with your face
No password to remember, leak or share. Your face measurement stays on your device.
Your presence is the key.
Unlocked is not safe. Haven keeps checking it's still you.
Share privately, and take it back any time.
iPhone and iPad: free to download, with a free plan · Mac: 3 days free, then $4.99/month
Haven Vault for iPhone and iPad · On the App Store
Your photos.
Your rules.
A private home for your photos and videos, and a different way to share them. Sharing a photo shouldn't mean giving up control of it.
- Share on your termsView once, 24 hours, 7 days or until you revoke. Take it back whenever you want.
- Someone else looks? It locks.If another face appears while your shared photo is open, it comes off their screen and you see the event.
- Keep a Copy, only when you chooseOtherwise what you share stays under your control, in their Shared with me.
- Haven CameraTake photos and video straight into your vault. Each one can carry a signed Haven Origin record.
- Stays on your deviceYour vault and face data stay on your iPhone or iPad. Shares are encrypted before they leave it.
Free to download. Your vault, camera, albums and receiving are free; sharing uses free monthly credits. Every new Haven ID starts with 3 days of Premium. Premium is $4.99/month for unlimited sharing. iOS 17.2 or later.
02
Unlocked is not safe
Haven keeps checking it's still you. Step away with a photo or file open, or let a second person stay in view, and it comes off the screen within seconds.
03
See history and alerts
Every approval is logged. If someone else tried, you see an alert with their picture.
APPROVED · YOUOpened Passport.pdf
ALERT · NOT YOUVault access refused · picture kept
ALERT · PROBABLY NOT YOUSomeone else at Bank statement.pdf
Email me High alerts
The evidential layer
An audit history of every action that mattered
Every decision Haven Vault makes is written into a cryptographically bound record. Each entry is sealed against the one before it, so an entry cannot be altered or removed without breaking every entry that follows. The record does not have to be trusted; it can be checked. Haven Desktop keeps the same activity record, and sealing is coming to it next.
Authorisations, refusals, tamper attempts, sessions that ended because the person walked away. Who, what, when. Where a refusal happened, the record holds an image of who was in front of the camera.
It answers the question that actually gets asked after something goes wrong: can you show me?
09:14:02
09:11:47
08:52:19
08:40:55
Illustration of a Haven evidence log. Entries are representative, not real records.
Why this, why now
Access was never the same as authority.
Every login method can now be stolen, faked or shared, and AI has made faking faces and voices cheap. A password tells you something got in. It doesn't tell you who.
Haven is built on a simple premise: prove the user, and keep the proof.
Continually verify the human, record every important action, and flag anything attempted without authority. Something you can count on. And a history log you can audit.
Products
One architecture, wherever the action happens
Each product uses the same two ideas, continually verify the human and keep the evidence, applied to a different place where something important gets authorised.
Haven Vault
On the App StoreiPhone · iPad · Mac
A private vault for photos, videos and files. It opens with your face, covers what's open when you step away, lets you share and take back, and shows you if someone else tried.
Haven Desktop
AvailablemacOS · direct download
Protection for the whole Mac. Screens cover when you leave, protected folders lose read access, and the apps you choose stop taking input until you return.
Haven Enterprise
Contact usIntegration layer
Bind high-value actions in your own systems to a verified person, and give your compliance, risk and support teams a record they can produce to a customer, an auditor or a regulator.
Next: verification for digital asset transactions, checking the human behind a transfer rather than only the key.
Technology
A layer above: we are not a biometric company.
Biometrics are one input, not the product. Haven combines who you are, from on-device face recognition, with how you behave while you are there: whether you are still present, still paying attention, and whether anyone else has appeared. Together they decide, continuously, whether the person in front of the device is still the one who was let in.
What Haven really produces is the record. Every key action is logged with what was done, who did it, and how that person was verified, with the evidence attached. Anything that was attempted but not authorised is flagged as a risk, graded by how sure Haven is, and kept with a picture of who was there. You can go back at any time and see exactly what happened, and when.
The architecture sits above capture and uses the strongest signal available, so it improves as sensing improves and is never tied to one vendor's hardware. The binding of a verified person to a specific action, in a record that is tamper-evident by construction, is the part that is hard to copy.
Haven's protocol stack (Dual-Authenticated Settlement, Owner-Attributed Actions, Social-Gated Biometric Recovery, Blockchain Identity Anchor and Data-Less Continual Authentication) is the subject of provisional patent applications filed with the USPTO in April 2026.
Identity plus behaviour
Face recognition on the device, combined with presence and attention, checked for as long as access lasts.
What, who and how
Each key action records what was done, by whom, and how they were verified, with the evidence.
Risk flags
Anything attempted but not authorised is flagged, graded and kept with a picture of who was there.
Evidence by construction
Each entry is sealed against the last, so the record can be checked rather than trusted. Your face measurement never leaves your device.
Who it is for
The same proof, at three different scales
People with something private
Photos, documents and accounts that should only open for you, on your phone and on the Mac you work on every day. Photos you share with someone and want to be able to take back. And a record of anyone who tried.
Enterprises
When a customer disputes an action, the honest answer today is usually a log your own systems wrote about themselves. Haven lets you show who authorised it, that it was really them, and that the record has not been altered since: evidence you can put in front of a customer, an auditor or a regulator.
Their customers
Confidence that access to their account requires them to be present, and something to point at if it ever is not, rather than being told that because the password was correct, it must have been them.
Where the boundary is
We would rather you held us to what is true
Haven's products are presence-based access control, not anti-spoofing. A convincing image of an enrolled person can sometimes satisfy recognition. When Haven cannot see natural movement, it asks for a movement a still image cannot answer. That is a deterrent, not a defence against someone with your device and a good picture of you.
This is precisely why we build the evidential layer rather than selling the wall. A system that claims it cannot be tested is making a promise nobody can keep. A system that records what happened, in a form that can be checked afterwards, is making one we can.
Get Haven Vault today.
Free on iPhone and iPad · 3 days free on Mac · Face data never leaves your device · Mac App Store