Stonehaven Privacy Policy

1. What Stonehaven is

Stonehaven is a personal recovery-tracking companion built by Blue Horizon Labs LLC(“Blue Horizon Labs,” “we,” “us”). It gives you a private, sign-in-only view of your own recovery information — daily symptom check-ins, medication and supplement dose logs, lab and biomarker results as they’re added, your care team’s contact information, your appointments, and educational research material to help you understand your own recovery.

Stonehaven is not a medical device. It does not diagnose, treat, or provide medical advice, and it is not monitored around the clock. If you are experiencing a medical emergency, do not rely on Stonehaven — call 911 or your local emergency number, or contact your care team directly.

2. The information we collect

(a) Health and recovery information you enter — your daily check-ins, medication and dose logs, and any notes you add. This is the core purpose of the app: giving you a place to record and review your own recovery data.

(b) Your email address — used solely as your sign-in identifier for authentication. We do not collect a password; there is nothing to remember or lose.

We do not run advertising or marketing trackers, and we do not use any third-party analytics inside the portal. There is no cookie beyond the one your login session sets.

3. How your information is protected

• Sign-in. Stonehaven sits behind Cloudflare Access, which authenticates you with a one-time PIN sent to your own email address — no password, and only allow-listed email addresses can sign in at all.
• In transit. The site is served exclusively over HTTPS/TLS; there is no unencrypted path to it.
• At rest. Your recovery data is stored in Notion, in a container scoped to you. Stonehaven itself keeps no separate copy — it reads from and writes to that container at the moment you use it, and stores nothing persistent on its own servers.
• No third-party advertising or tracking of any kind runs inside the portal.
• Your information is never sold, and never shared with anyone for marketing purposes.

4. Who can access your data

Only you and Blue Horizon Labs, as the operator of Stonehaven, can access your information — and only your own information; there is no shared or cross-account visibility. Blue Horizon Labs may access your data as needed to operate, maintain, and support the app (for example, to troubleshoot an issue you report). We do not share your information with unrelated third parties.

5. Your data rights

You may request, at any time and for any reason:

• Access — a copy of the information Stonehaven holds about you.
• Correction — a fix to information that is inaccurate or out of date.
• Deletion — removal of your information. Today, deletion is handled directly by contacting Blue Horizon Labs (there is no automated self-service deletion in the app yet); we will confirm what was removed.

To exercise any of these rights, email the address in §8. We will respond promptly and verify your identity before making changes.

6. Data retention

Your recovery data is retained in your Notion container for as long as you use Stonehaven, or until you request deletion. Removing your sign-in access (revoking your email from the allow-list) stops access to the app; it does not by itself delete the underlying data — deletion is a separate request, handled per §5.

7. What Stonehaven is not

• Not a medical device, and not connected to any doctor, hospital, or insurer’s systems.
• Not monitored 24/7 — nobody is watching your check-ins in real time.
• Not a source of medical advice. Everything shown is educational, to help you understand your own recovery and ask better questions — not to replace your care team’s judgment.
• Not a substitute for emergency care. In an emergency, call 911.

We do not claim HIPAA certification or any other formal compliance designation for Stonehaven. We describe, plainly and only, what the system actually does and how it is actually protected — nothing more.

8. Changes to this policy

We may update this policy as Stonehaven changes. The “Last updated” date above reflects the latest version. Material changes to what we collect, who can access it, or how it’s protected will be reflected here before they take effect.

9. Contact

Privacy questions, access/correction/deletion requests, or anything else: support@bluehorizonlabs.ai · Blue Horizon Labs LLC, Albany, NY, USA.