Privacy
Little Haven stores a pen name, a hashed password, and the caregiving notes you choose to write: rules, chores, tracker events, journal entries, check-ins, agreement chapters, and optional chats with Mommy. It does not ask for a legal name.
Data is kept per household. A household is one little and the caregivers she invites. Queries for one haven do not read another. Journal entries stay private unless that entry is marked shared. An export includes only what the signed-in person is allowed to see, and never password hashes.
You can delete your own login. If the little deletes her account, the household and its data are removed. If a caregiver deletes theirs, the little's haven stays.
This launch is private. Registration is invite-only unless the server is explicitly set to open or closed. There is no public directory. Moderation and reporting tools are not built yet. If the haven is later opened to more households, those tools would sit beside the household boundary, not inside someone else's notes.
Mommy, when configured, sends the conversation and a short care context to the language provider named by the server's API settings. If no key is set, Mommy stays quiet and the rest of the haven works.