A private home
for your people.
Haven is a calm little social app just for the people you love. Share photos, stories, messages and calls — all end-to-end encrypted and peer-to-peer, with no ads and no tracking. Nothing you share ever leaves your circle.
Free, everywhere. Now on the App Store for iPhone, iPad & Mac, on Google Play for Android, on the Microsoft Store for Windows and as a direct download for Linux — no ads, no tracking, no subscription, no in-app purchases. How is it free?
Imagine a family photo album and a group chat that only your people can ever open — with no company in the middle. That's Haven. The keys that lock your moments live on your phone, not on a server. Even we can't read them.
A feed that exists to connect you, not to keep you scrolling.
No likes to chase, no strangers, no algorithm deciding what you see. Just the people you actually know, in a small private circle you control.
- Circles — small private groups for family, close friends, a team. You choose who's in.
- No accounts, no profiles — there's no central database of you sitting in a data center.
- Calm by design — no ads, no tracking, no engagement traps.
“The keys that lock your moments live on your phone, not on a server.”The Haven promise
Photos and stories with a warm, film-style soul.
Share photos and videos with beautiful film-style filters — including a warm Kodak Gold look — and add a song so your moment has a soundtrack, played through each viewer's own music subscription.
- Film-style filters for posts and stories, including a warm Kodak Gold look.
- Music on posts — attach a song, played through each viewer's own subscription.
- Encrypted before it leaves — every photo and video is locked to your circle.
Direct messages, group calls, screen sharing.
Talk in real time with voice and video calls for your whole circle, share your screen, and keep one continuous conversation — all end-to-end encrypted.
- Group voice & video calls with screen sharing built in.
- Nearby sharing — pass things device-to-device even with no internet at all.
- One app, every device — iPhone, iPad, Mac, Android, Windows and Linux.
Everything you'd want, kept private.
Calls, conversations, and a place that's truly yours — across every screen.
We never hold your keys.
The secret keys that unlock your content stay on your own devices — never on a server, never with us. That single fact is what makes everything else on this page true.
The honest version, no fine print.
Here's how Haven keeps your life yours — what stays private, and the honest limits too.
What stays private
- Every post, message, photo, video and call is encrypted on your device before it's sent.
- The secret keys that unlock your content stay on your own devices. We never hold them.
- There's no central account, no profile database, no advertising ID, no analytics.
- Choose your own storage — a relay you run, or your own S3 bucket. We run no storage and hold no credentials.
Where the keys actually live›
In the Secure Enclave on Apple devices, the OS secure store elsewhere. The only way they sync between your devices is Apple's end-to-end-encrypted iCloud Keychain, which we can't read either.
“Your own storage” means a Haven relay you (or a friend) run, or your own S3 bucket (S3/R2/B2) — we hold no credentials for any of it.
The honest limits
- A relay (an optional helper) can see that some encrypted bytes passed through, but never what they say.
- To deliver bytes to you, a relay briefly handles your IP address — never logged, never stored, and never tied to a name, because there isn't one.
- Friends never see each other's IP when a relay is in the path — only the relay does, briefly.
- If someone steals your unlocked, malware-infected device, they have your device. No app on earth fixes that.
What that means for your IP›
A relay handling your IP for a moment is just how the internet works — every app you own does the same thing. The difference is that Haven's relay never logs it, never stores it, and has nothing to tie it to: no account, no name, no email, no phone.
Being precise: while a relay is moving your bytes it does see your app's key — a long random identifier — alongside your IP. It has to check that key, or a stranger could help themselves to your circle's mailbox. It can't read anything with it, and it can't turn it into your name. So the promise is never logged, never sold, never readable — not "never seen".
If you want to hide your IP from a relay entirely, run Haven behind your own VPN, or host your own relay. We looked hard at a built-in onion/Tor mode and decided against it: Tor can't carry the kind of traffic Haven's calls and direct connections need, so it would quietly break them.
Harder to break into, easier to tidy up.
The big security release. It quietly upgrades how your devices trust each other and how your storage stays under control — automatically, circle by circle, as everyone updates. Nothing to set up, nothing lost.
A stolen device can now be locked out for real
- A device you link no longer has to hold a copy of your master key — each one runs on its own keys.
- So removing a lost or stolen device can cut it off cryptographically — from your circle's content and from the settings and contacts that sync between your devices — not just hide it.
- Your master key stays on one primary device plus your encrypted iCloud Keychain backup, instead of being copied everywhere.
- Everything is still hybrid post-quantum — built to resist tomorrow's quantum computers, today.
How the rollout works, honestly›
This turns on per circle, once every member's devices have updated — an all-present signal, never guessed from silence. Until then a coexistence path keeps un-upgraded devices working exactly as before, so no one is ever stranded and no old message becomes unreadable.
One honest limit stays honest: this shrinks the key's footprint from every device to a single primary you choose. A fully compromised primary is still a full compromise — the fix for that is rolling a new identity, same as before.
Storage that stays under control
- See what's taking space — a cleanup screen lists everything you've downloaded, sorted by size.
- Delete to free space, and the post stays with a placeholder you can re-download anytime — nothing is really lost.
- "Keep on this device" pins anything you never want swept away.
- Set limits by age or size, on your device and on a relay you run — and auto-delete now really removes the media, not just the post.
And a little more polish›
Video is compressed on posting to save space and data. Story styling — including how photos and video are framed — now looks the same on every platform. And we closed a location-metadata leak on video, so nothing about where a clip was taken rides along.
Be the bridge for your circle.
Every Haven app can be a relay: flip “Be your circle's relay” in Settings and your device quietly holds your circle's sealed messages for friends who are offline. No terminal, nothing to install.
What your device is actually doing›
It runs reliably in the background, holding messages that stay end-to-end encrypted with post-quantum cryptography it can never open — your device is a post box, not a reader.
Leave a Mac or desktop app running and your whole circle gets more resilient.
1. Open Haven on a device you leave running
2. Settings ▸ Relays → “Be your circle's relay”
3. Done — friends' apps find it automatically
Prefer a terminal? The standalone relay
curl -fsSL https://wemiller.com/apps/haven/relay/install.sh | sh
haven-relay run --link "haven-relay://circle#…"One command to install, one to go live — for a Pi or server with no Haven app. No ports, no domain, no cloud required.
You're the customer, not the product.
Haven is free on the App Store, Google Play and the Microsoft Store, and a free download for Linux from the latest GitHub release — no ads, no tracking, no subscription and no in-app purchases. Install it, invite your people, and it's yours.
There's no price because nothing here needs one. Haven has no servers to pay for, so there's nothing to sell you and nothing to sell about you. Development is funded directly by the people who find it valuable — by choice, never by default.
How a free app stays free of ads›
Haven makes no money from ads, tracking, or selling your data — it holds no data to sell. No ads, no behavioral tracking, no analytics, no data harvesting.
It's also the only model that works here: Haven runs no central servers of its own to bill anyone for — your content lives on your devices, the push relay is blind and rides a free tier, and any storage relay is one you or a friend host. So there's no monthly bill to cover and nothing to monetise you for. What Haven costs is the time to build it, and that's funded directly by the people who find it valuable.
Support future development
Haven is free — no ads, no tracking, no subscription. If it earns a place in your circle, you can help fund what comes next.
Get Haven on every screen
iPhone, iPad & Mac on the App Store; Android on Google Play; Windows on the Microsoft Store; Linux and Steam Deck straight from the latest release; a tiny relay for a Pi or server.
Loading the latest release…
Android is live on Google Play; Windows is live on the Microsoft Store. The Linux desktop, Steam Deck & relay builds come from the latest GitHub release — real installers, not a preview.
Free on every platform — no ads, no tracking, no subscription. Support future development →
A smaller, kinder internet —
just for your people.
Bring your circle home to Haven.