Privacy

What we promise

• We don't sell your data.
• We don't show you ads or build advertising profiles from your data.
• We don't train AI models on your content. Our AI providers (OpenAI, Anthropic) are bound by their business-tier terms not to either.
• We share only what each partner needs to deliver the service — listed in plain language below.

Who Covly is for

Covly is a group coordination app. Groups can be families, teams, friend circles, or organizations. The same rules apply to every group.

Who sees what

• People on a board see what their role lets them see.
• Items on your Personal board stay private to you.
• Health entries belong to the board where you put them. On a Personal board, only you. On a shared board, board members.
• Nobody outside your board sees anything.

You're in control

• Delete your account any time. Personal data goes within 30 days.
• Download your data as JSON — Settings → Account → Download my data.
• Clear your Kovi chat history any time — Kovi → Clear.
• Change what's on each board, any time.

What we collect

• Account info — name, email, optional profile color, avatar style. (We don't collect phone numbers.)
• Your coordination data — tasks, events, trips, shopping lists, notes, wish cards, polls, and chat messages on the boards you create or join.
• Health info you choose to add — medications, appointments, conditions, allergies, emergency contacts, care team. Only what you enter, and only if you use the Care section.
• Home address & personal facts (optional) — used to give Kovi useful context. Editable any time.
• Payment info — handled by Stripe. We never see your card number; we store your subscription tier and Stripe customer ID.
• Contacts (optional) — if you grant permission, your device contacts are read to suggest people to invite. They stay on your device unless you send an invite.
• Kovi chat history — stored on your profile so it stays in sync across devices. Private to you. Clearable any time.
• Push notification tokens — to deliver reminders and alerts if you've granted notification permission.
• Usage data — aggregated, non-identifying counts (e.g., "this feature was used X times today"). No behavioral tracking, no individual profiling. No third-party analytics SDK.

How Kovi (the AI) handles your data

When you chat with Kovi, three things get sent to our AI provider:

• Your message text.
• A summary of relevant board context — tasks, events, members, preferences, and (if you're asking about Care) health items.
• Recent chat history (the last 10–20 turns).

Providers we use:

• OpenAI — primary, for all standard plans.
• Anthropic — automatic failover when OpenAI is slow, plus dedicated for Enterprise.
• Google AI (Gemini) — available for Enterprise plans with a customer-provided key.

We don't train models on your data, and these providers are bound by their business-tier terms not to either. We log anonymized metadata (timing, token counts) for cost tracking — not the message content.

Health data — extra care

Medications, appointments, allergies, conditions, and other Care entries live in the same private space as the rest of your board, with the same protections. We never sell or train AI on it.

When you ask Kovi a Care-related question (for example, "any interactions in my meds?"), the relevant health items are sent to the AI provider just like any other Kovi turn. They're processed under the same business-tier terms — not used for training, not retained beyond the request.

Covly is a coordination tool, not a doctor or a hospital. For clinical advice, see a clinician.

Where your data lives

Everything is stored in Google Firebase (Firestore + Cloud Storage), hosted on Google Cloud in the United States. Encrypted in transit (TLS 1.2+) and at rest (AES-256). Board access is enforced by server-side rules — only authenticated members can read or write a board's data.

Who we work with

A handful of partners help us run Covly. Each gets only what's needed for its specific job:

• Google Firebase / Google Cloud — authentication, database, storage, hosting, push notifications.
• OpenAI — AI text + premium image generation.
• Anthropic — AI text failover and Enterprise plans.
• Stripe — subscriptions and Kovi pack purchases.
• Resend — transactional email (wishes, RSVPs, board invites).
• Pollinations — free-tier image generation.
• Photon (OpenStreetMap) — place lookups for trip planning.
• Google Maps — embedded map overlays when Kovi shows places.
• Unsplash — stock event cover imagery.

We don't sell your information to anyone.

Why we collect it

• To deliver the service you signed up for — the agreement between us.
• To keep your account secure and the product working — a legitimate interest.
• Only with your consent — for optional things like contact-list import, calendar sync, or product update emails.

How long we keep it

• While your account is active — we keep your data so you can use it.
• If you delete your account — your personal data is removed within 30 days.
• Kovi chat history — clearable any time by you; otherwise retained for the life of your account.
• Limited records may be kept longer if law requires it (for example, billing records for tax purposes).

Your rights

Wherever you live, you can:

• See and export your data — Settings → Account → Download my data (JSON).
• Delete your account — Settings → Account → Delete. Goes within 30 days.
• Correct anything wrong — edit it directly in the app.
• Withdraw consent — revoke notification permission, disconnect Google Calendar, remove any saved API key any time.
• Ask us questions or raise a concern — [email protected].

If you live in the EU, UK, or California, you also have the right to object, restrict, or withdraw consent for certain uses, and to lodge a complaint with your local data protection authority. We do not "sell" or "share" personal information for cross-context behavioral advertising under the CCPA.

Cookies

We use a small number of cookies to keep you signed in and remember your settings. We do not use advertising cookies, and we do not let third parties track you across other sites.

Children

Covly is for users 13 and older (16 in the EU/EEA). Parents and guardians can add children as members of their boards under their own supervision, but children cannot create their own Covly accounts. If you believe a child under the applicable age has an account, email [email protected] and we'll remove it promptly.

International users

If you use Covly from outside the United States, your information may be processed on servers in the United States. We rely on Google's Standard Contractual Clauses and data-processing agreements as transfer mechanisms where required by law (e.g., GDPR Article 46).

Changes to this policy

If we change how we handle your information, we'll update this page and change the date at the top. For significant changes we'll also notify you by email or an in-app notice.

Reach us

Email [email protected] or use Settings → Help inside the app.

Envitek Solutions LLC (Virginia, USA) is the company behind Covly and the controller of your data for the purposes of this policy.