Privacy policy

Who we are

Cove is a tool for self-reflection and personal growth. It is not therapy, medical treatment, or a crisis service. Cove is run by Arian Zia, trading as Cove, a sole trader based in the United Kingdom, who is the data controller for your information.

What we collect

• Your account details: your email, your name, and your date of birth (to confirm you are 18 or older). If you sign in with Google, we receive basic profile information from Google.
• What you write in Cove: the beliefs you work on, your reflections, the evidence you log, the identities you choose, your practices, your rehearsal scenes, and the messages in your seeings. Some of this is personal and sensitive, and we treat it that way.
• Payment details: if you subscribe to Cove Pro, our payment provider Stripe handles your card details. We never see or store your full card number. We keep basic billing information such as your subscription status.
• Sign-up protection: when you create an account we use Cloudflare Turnstile to check that you are not a bot. Cloudflare receives your IP address and basic browser information in order to run that check.
• Basic usage data: if you accept analytics cookies, we collect how you move through the app, such as pages visited, clicks, and form interactions. This never includes the content of your beliefs, reflections, or seeings, and you can decline it. See cookies and analytics below.

What we do not do

• We do not sell your data.
• We do not use your reflections or seeings to train AI models.
• We do not use advertising trackers.
• We do not build a marketing or advertising profile of you, and we do not sell or share one. Cove does read what you have written in order to respond to you and to refer back to it later. How that works is described under AI below.
• We do not make automated decisions that produce legal effects for you, or that similarly significantly affect you. Nothing Cove generates changes your legal position, your access to money, credit, employment or services, or your standing with anyone outside the app.

Cookies and analytics

Cove uses a small amount of cookies and similar browser storage. There are two kinds, and only one of them is your choice.

Analytics, provided by PostHog. If you accept, PostHog sets a cookie and a matching localStorage entry to recognise your browser across visits, and records how you move through the app: pages visited, clicks, and form interactions. It never records the content of your beliefs, reflections, or seeings. Analytics needs your consent, so nothing is set and nothing is recorded until you accept. You can decline, and if you decline nothing is stored and nothing is tracked. You can change your choice at any time from settings.

Error monitoring, provided by Sentry. This records technical error reports so we can find and fix problems. It runs without a persistent identifier, sets no analytics cookie, and strips out cookies, request bodies, query strings, and anything that could carry your content before a report is sent. Because it is strictly necessary to keep the app working, it is not part of the analytics choice above.

Who we share it with

We only share data with the services we use to run Cove: Supabase (database), Anthropic (the AI that powers your seeings), Vercel (hosting), Stripe (payments), Cloudflare (bot protection at sign-up), Resend (emails), PostHog (analytics, only if you accept them) and Sentry (error monitoring). Each processes data only to help run the service. Some are based outside the UK, including the US.

We may also share data if the law requires it.

AI, and how Cove reads what you write

Cove is an AI system. A seeing is a conversation with an AI, and its responses are generated automatically.

What Cove does with what you write

We use it to run the product for you, and for nothing else. We do not use your reflections or your seeings to train any model of our own, we do not sell them, and we do not share them with anyone outside the processors listed above.

Cove writes short internal notes about what it noticed in your seeings: patterns, goals, beliefs, emotions, progress and values. They are its own summaries rather than copies of what you wrote. Those notes are read back as background context into your later reflective seeings, and into the engine that writes your daily practices, so what it suggests is grounded in your life rather than generic. They are not loaded into the guided seeing that surfaces the belief underneath. What that seeing does receive is set out under Anthropic below.

When Cove proposes a belief to you during a conversation, it records that proposal alongside the sentence of yours it was drawn from, so we can measure how often it proposes one and whether the quote it relied on was really something you said. This is measurement only. It changes nothing you see, and it is not used to build your beliefs, your identity, or your practices. It holds your own words, and it is deleted with everything else when you delete your account.

Separately, a safety screen checks what you write for signs of acute distress, not only in a seeing but wherever you write something in Cove. That check is used only to show you crisis resources in place of Cove's usual response, and to keep a content-free internal record that it happened. It does not store what you wrote.

What Anthropic processes, and how long it keeps it

To generate replies, Cove sends messages from your seeing to Anthropic, our model provider, over its commercial API. What is sent with them depends on the conversation.

In every conversation, the earlier messages of that conversation are sent with each new one so it can continue.

The guided seeing, the one that surfaces a belief, also receives Cove's short summaries of your earlier guided seeings and, before your first one, your onboarding conversation. Once you have a belief you are working on, it receives that one belief and what you said about how it operates in your life. It does not receive the internal notes described above, your other beliefs or your identity sentence.

Reflective seeings and rehearsals receive the internal notes described above, your active beliefs with one line you said about each, your identity sentence and the life areas you linked it to, and your current practices with how recently you have done them.

Testing conversations receive your beliefs with one line you said about each, your identity sentence, Cove's summaries of your earlier testing conversations, and entries from your record: what you expected, how sure you were, what happened, things you said in earlier testing conversations, how many practices you have marked done, and the statements you have made about who you are becoming.

When Cove writes a practice for you, it sends the belief you are working on, your identity sentence, the life area the practice is for, the goal you gave us, recent internal notes, and your other practices with how they have been going. When it writes a daily observation, it sends dated entries from your record and nothing else. When a seeing ends, the conversation is sent again so Cove can write its summary and its internal notes, and once more so Cove can work out whether it holds a new belief or a change to your identity. Your existing beliefs and identity sentence go with it, so Cove can tell what is new. Shorter requests send the same kinds of thing: your identity sentence and one belief when Cove writes your daily question, your identity sentence and your beliefs when it links a belief to your identity, and your beliefs, identity sentence and practices along with what you type when you ask Cove for help in the moment. Safety screens receive only the text being checked.

Cove does not send your name, email address, date of birth or payment details to Anthropic.

Under Anthropic's commercial terms, Anthropic does not use what you write or what the model writes back to train its models. The exception in its policy is content a customer explicitly submits as feedback. Cove has no feedback control and submits none. Anthropic's policy is at privacy.claude.com.

Anthropic's published policy for its commercial API is to delete inputs and outputs from its systems within thirty days. That policy has exceptions. If content is flagged as a possible breach of Anthropic's usage policy, Anthropic may keep the flagged inputs and outputs for up to two years and related safety classification scores for up to seven years. Anthropic may also keep data where the law requires it. Cove has not arranged a different retention period with Anthropic, so this published policy is the one that applies to what Cove sends.

This is separate from what Cove keeps. Your seeings and your record stay in Cove's own database until you delete them or your account, as described in the next section, whatever Anthropic's schedule is.

How long we keep it, and deleting your data

We keep what you write until you delete it or delete your account. There is no automatic expiry, and we should be plain about why rather than leave you to assume: a seeing from your first week is still there in your second year because the record building up over time is the point of the product, and deleting it after a fixed period would take the thing you came for.

Technical rate-limiting records become eligible for deletion twenty four hours after they are written, and are cleared routinely rather than on a fixed schedule.

You can delete your account at any time from the settings page. When you do, we permanently erase your beliefs, reflections, seeings, practices, rehearsal scenes, predictions, the internal notes described above, and the rest of the content you created in Cove, and we cancel any active subscription.

Two things are kept. We keep the minimal billing records the law requires us to hold, which for UK tax purposes is six years. And we keep a small number of content-free operational records: that a safety screen fired, that a wellbeing check was answered, and that a trial-ending email was sent. None of these contains anything you wrote. Deletion of your content is permanent.

Your rights

You can ask to see your data, correct it, delete it, or object to how we use it. You can delete your account and edit your details yourself in settings; for anything else, email us at AZMARKETINGUK@outlook.com and we will handle it. If you are ever unhappy with how we have handled your data, you can contact the UK's Information Commissioner's Office at ico.org.uk.

Children

Cove is for adults 18 and over only. We ask for your date of birth at sign-up and do not allow accounts for under-18s.

Availability

Cove is not currently available to residents of Washington and Nevada in the United States, while we complete some region-specific work. Our crisis resources page is available everywhere, including from those states.

Security

We take reasonable steps to protect your data, including access controls so only you can reach your content, and keeping your personal content out of our logs and monitoring tools. Traffic to Cove is encrypted in transit. No service is perfectly secure, but if a breach affects you, we will let you know.

Changes

If we make significant changes to this policy, we will let you know by email or in the app.

Contact

Questions about your data? Email AZMARKETINGUK@outlook.com.