Legal

Privacy Policy

Last updated: September 10, 2026

The short version

Cove helps you organize an IVF cycle. Your health information is yours. We do not sell it, we do not use it to target ads, and you can delete it — including uploaded lab PDFs — from Settings in the app. This policy explains what we collect, why, and the choices you have.

Who we are

Cove IVF ("Cove," "we," "us") provides an iOS app (and, where available, Android) and this website. Privacy questions: coveivf@gmail.com.

What we collect

Account information

You can create an account with Sign in with Apple, Google Sign-In, or email. Depending on the method, we receive an identifier and, if you choose to share it, a name and email address. Sign in with Apple lets you hide your email. Google Sign-In is provided by Google; Google's own privacy policy applies to Google's handling of that sign-in.

Health and cycle information you enter

Medication schedules, doses and times, appointments, journal check-ins, hydration, expenses, injection sites, monitoring values, and other records you choose to log. You provide this. We store it so the app can show it back to you and remind you.

Protocol photos, voice, and Blood Work PDFs

• Photos of a clinic sheet: sent to our processing service (Anthropic) solely to draft medication or appointment cards. We ask you to check every value before anything is saved. We do not keep the image after processing, and we do not use your images to train a model.
• Voice: if you add a medication, appointment, or lab by speaking, the recording is sent to our processing service to draft cards for you to review. We do not keep the audio after processing. What we may keep is the structured draft you save (for example, a medication name and time).
• Blood Work PDFs: if you upload a lab report, we store that PDF in a private folder tied to your account so you can keep it with the extracted results. The file is processed (Anthropic) to draft test values for you to review. The PDF remains until you delete that report or delete your account. Account deletion removes the database rows and the stored PDF files.

Information collected automatically

• PostHog (analytics): we use PostHog to understand whether screens load and whether onboarding was completed. It is configured not to collect medication names, doses, lab values, or your email. We identify you in analytics only with an opaque account id, not your name.
• AppsFlyer (install attribution): we use AppsFlyer to understand which link, ad, or partner brought you to the app — for example a creator code or an App Store campaign. This can include a device identifier used for attribution. We do not show ads inside Cove. We do not send your medication schedule, lab PDFs, or journal text to AppsFlyer. We do not sell health information to advertisers.
• Apple Search Ads / App Store attribution: on iOS we may collect Apple's attribution token so we can tell that an App Store campaign led to a download. This is not used to target ads inside Cove.
• Technical data: device type, app version, and crash or error messages needed to operate and secure the service. Push tokens are stored so we can send reminders and occasional product messages you already expect (for example a time-limited offer after a cancelled trial).

What we do NOT do

• We do not sell your personal or health information.
• We do not share your health information with advertisers, data brokers, or social platforms for their advertising.
• We do not show third-party ads inside the app.
• We do not use your health information to target ads.

How we use your information

• To provide the app: build your schedule, send reminders, store and display what you log.
• To run capture features (photo, voice, Blood Work PDF) and show you drafts to review.
• To process subscriptions through Apple (and Google Play where available) and RevenueCat.
• To operate, secure, and improve the service, including measuring which channels bring people to Cove (AppsFlyer).
• To contact you about the product (for example a product update, support reply, or a short-lived offer after a paywall or cancelled trial). You can opt out of non-essential emails in the app where that control exists.

How your information is stored and protected

Account and health data are stored with our cloud provider, Supabase, encrypted in transit and at rest. Blood Work PDFs sit in a private storage bucket that only your signed-in account can read. Access is restricted so that your data is available to your account, not to other users. No method of storage is perfectly secure, but we design the product to keep your information private and under your control.

Your choices and rights

• Delete everything: Settings → Delete account. We permanently delete your account, cycle data, and stored Blood Work PDFs. Deletion is not reversible. Apple or Google may still keep a record of the subscription itself under their rules.
• Access and correction: you can view and edit your information in the app.
• Communications: you can opt out of non-essential emails.
• Lock-screen privacy: you can hide medication names on lock-screen reminders in Settings → Notifications.

Depending on where you live, you may have additional rights (for example under California or European law) to access, delete, or restrict use of your information. Contact coveivf@gmail.com.

Data retention

We keep your information for as long as your account is active. When you delete your account, we delete associated health data and Blood Work PDF files. Protocol-sheet photos and voice recordings are not retained after processing. Short structured logs of a capture session (for example that a photo produced three draft cards) may exist until account deletion. Subscription records held by Apple, Google, or RevenueCat follow their retention rules, not ours.

Sharing with service providers

We use a small number of companies to run Cove. They may process information only to provide their service to us:

• Supabase — hosting, database, authentication, and file storage
• Apple and, where available, Google — sign-in and app-store billing
• RevenueCat — subscription status
• Anthropic — reading protocol photos, voice drafts, and Blood Work PDFs into cards you review
• PostHog — product analytics (no health contents)
• AppsFlyer — install and campaign attribution
• Expo — delivering push notifications
• Resend — sending support email and, when enabled, transactional product email

We do not sell or rent your information to anyone.

Children

Cove is intended for adults undergoing fertility treatment and is not directed to children under 16. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date above and, for material changes, notify you.

Contact

Questions about privacy: coveivf@gmail.com.