Legal

Privacy Policy

Last updated: September 26, 2026

The short version

Cove helps you organize an IVF cycle. Your treatment details stay private, encrypted, never sold, never shared for advertising. You can delete them — including uploaded lab PDFs — from Settings in the app. Cove uses a measurement tool (AppsFlyer) that collects device and campaign data to understand which ads brought you to the app. It does not receive your medications, labs, or journal. This policy explains what we collect, why, and the choices you have.

Who we are

Cove IVF ("Cove," "we," "us") provides an iOS app (and, where available, Android) and this website. Privacy questions: coveivf@gmail.com.

What we collect

Account information

You can create an account with Sign in with Apple, Google Sign-In, or email. Depending on the method, we receive an identifier and, if you choose to share it, a name and email address. Sign in with Apple lets you hide your email. Google Sign-In is provided by Google; Google's own privacy policy applies to Google's handling of that sign-in.

Health and cycle information you enter

Medication schedules, doses and times, appointments, journal check-ins, hydration, expenses, injection sites, monitoring values, and other records you choose to log. You provide this. We store it so the app can show it back to you and remind you.

Protocol photos, voice, and Blood Work PDFs

• Photos of a clinic sheet: sent to our processing service (Anthropic) solely to draft medication or appointment cards. We ask you to check every value before anything is saved. We do not keep the image after processing, and we do not use your images to train a model.
• Voice: if you add a medication, appointment, or lab by speaking, the recording is sent to our processing service to draft cards for you to review. We do not keep the audio after processing. What we may keep is the structured draft you save (for example, a medication name and time).
• Blood Work PDFs: if you upload a lab report, we store that PDF in a private folder tied to your account so you can keep it with the extracted results. The file is processed (Anthropic) to draft test values for you to review. The PDF remains until you delete that report or delete your account. Account deletion removes the database rows and the stored PDF files.

Partner Mode, where available

Partner Mode is optional sharing with one person you invite and confirm. We store your display name, consent, connection, sharing choices, practical tasks, preset support messages and notification preferences. Your supporter can see only the treatment phase and appointments you select, plus support requests and tasks you choose to share. Appointment titles may contain sensitive information; review them before sharing. Journals, visit notes, test results, documents and medication records are not shared.

You can pause sharing or either person can end the connection. New access and notifications stop when sharing is paused, the selected cycle is inactive or the sharing person's subscription expires. Privacy controls remain available. Shared content is not stored permanently on the supporter's device by Cove, but screenshots cannot be recalled. Connection and support records remain on our servers until either associated account is deleted. Push notifications use generic text without treatment details.

Cycle Pal, where available

Cycle Pal is optional. We store the display name, introduction and conversation language you choose, your consent, connections, messages, blocks and reports. Your suggested companion sees your Cycle Pal profile; messaging opens only when both of you accept. Your medication, lab, journal and other treatment records are not automatically shared.

Messages are stored on Cove's servers and are not end-to-end encrypted. Automated text rules may reject some content. Human review takes place after a report; authorized Cove reviewers can inspect the reported conversation and suspend an abusive account. Report notifications sent through Telegram contain a report identifier, not your message text, report reason, name or treatment records.

Ending or blocking a connection stops messaging but does not erase the stored conversation. Deleting either participant's account removes the associated conversation and reports from Cove. We cannot remove screenshots or copies another participant saved themselves. Do not share information you do not want your companion to know.

Information collected automatically

• PostHog (analytics): we use PostHog to understand whether screens load and whether onboarding was completed. It is configured not to collect medication names, doses, lab values, or your email. We identify you in analytics only with an opaque account id, not your name.
• AppsFlyer (advertising measurement): Cove uses a measurement tool (AppsFlyer), a mobile measurement partner, to understand which ads brought you to the app. We do not show ads inside Cove. It may collect device identifiers (including Apple's IDFA only if you allow tracking, Apple's IDFV, and on Android an advertising ID), campaign and attribution data (which ad, link, creator code, or App Store campaign led to an install), and in-app conversion events that are not health data — for example completing signup, viewing a paywall, starting a trial, or subscribing. On iOS this is "tracking" under Apple's App Tracking Transparency (ATT) rules. You will see Apple's prompt, and you can tap Ask App Not to Track. You can also change this later in iOS Settings → Privacy & Security → Tracking. If you decline, we do not use IDFA. Limited Apple install measurement (SKAdNetwork) and non-IDFA conversion events may still run. PostHog (product analytics) is not gated by this prompt. Your treatment details stay private. AppsFlyer does not receive your medications, labs, or journal. Health and treatment data are not shared with AppsFlyer or any advertising partner.
• Apple Search Ads / App Store attribution: on iOS we may collect Apple's attribution token so we can tell that an App Store campaign led to a download. This is not used to target ads inside Cove.
• Technical data: device type, app version, and crash or error messages needed to operate and secure the service. Push tokens are stored so we can send reminders and occasional product messages you already expect (for example a time-limited offer after a cancelled trial).

What we do NOT do

• We do not sell your personal or health information.
• We do not share your health information with advertisers, data brokers, or social platforms for their advertising.
• We do not show third-party ads inside the app.
• We do not use your health information to target ads.

How we use your information

• To provide the app: build your schedule, send reminders, store and display what you log.
• To run capture features (photo, voice, Blood Work PDF) and show you drafts to review.
• To process subscriptions through Apple (and Google Play where available) and RevenueCat.
• To operate, secure, and improve the service, including using a measurement tool (AppsFlyer) to understand which ads brought you to the app.
• To contact you about the product (for example a product update, support reply, or a short-lived offer after a paywall or cancelled trial). You can opt out of non-essential emails in the app where that control exists.

How your information is stored and protected

Account and health data are stored with our cloud provider, Supabase, encrypted in transit and at rest. Blood Work PDFs sit in a private storage bucket that only your signed-in account can read. Access is restricted so that your data is available to your account, not to other users. No method of storage is perfectly secure, but we design the product to keep your information private and under your control.

Your choices and rights

• Delete everything: Settings → Delete account. We permanently delete your account, cycle data, and stored Blood Work PDFs. Deletion is not reversible. Apple or Google may still keep a record of the subscription itself under their rules.
• Access and correction: you can view and edit your information in the app.
• Communications: you can opt out of non-essential emails.
• Lock-screen privacy: you can hide medication names on lock-screen reminders in Settings → Notifications.
• App Tracking (iOS): Cove may ask for permission to track so AppsFlyer can use a device identifier (IDFA) to understand which ads brought you to the app. It is not used for medical care or reminders. You can decline the prompt, or turn tracking off later in iOS Settings → Privacy & Security → Tracking. Declining does not delete your account or your cycle data.

Depending on where you live, you may have additional rights (for example under California or European law) to access, delete, or restrict use of your information. Contact coveivf@gmail.com.

Data retention

We keep your information for as long as your account is active. When you delete your account, we delete associated health data and Blood Work PDF files. Protocol-sheet photos and voice recordings are not retained after processing. Short structured logs of a capture session (for example that a photo produced three draft cards) may exist until account deletion. Subscription records held by Apple, Google, or RevenueCat follow their retention rules, not ours.

Sharing with service providers

We use a small number of companies to run Cove. They may process information only to provide their service to us:

• Supabase — hosting, database, authentication, and file storage
• Apple and, where available, Google — sign-in and app-store billing
• RevenueCat — subscription status
• Anthropic — reading protocol photos, voice drafts, and Blood Work PDFs into cards you review
• PostHog — product analytics (no health contents)
• AppsFlyer — measurement tool for advertising: device identifiers, campaign/attribution data, and non-health conversion events. It does not receive your medications, labs, or journal.
• Expo — delivering push notifications
• Resend — sending support email and, when enabled, transactional product email

We do not sell or rent your information to anyone.

Children

Cove is intended for adults undergoing fertility treatment and is not directed to children under 16. We do not knowingly collect information from children.

Changes to this policy

If we change this policy, we will update the date above and, for material changes, notify you.

Contact

Questions about privacy: coveivf@gmail.com.