Privacy Policy

Kove is operated by David Mitchell, a sole proprietor based in Kentucky. When this policy says "Kove," "we," or "us," that's who it means. You can reach us at privacy@koveapp.com.

When you create an account: your email address and display name.

When you use Kove: photos, videos, captions, and comments you post; interactions you make (likes); and basic usage data like your IP address, browser type, and device — collected automatically by our hosting infrastructure.

When you subscribe: your billing details, processed by Stripe. We never see or store your card number — Stripe handles that entirely.

We do not collect location data. We do not track you across other websites.

To run the service: showing your posts to the people you've invited, and nothing else.

To send emails you'd expect: invite notifications, new-post alerts, and billing receipts — sent via Resend.

To process payments: subscription billing via Stripe.

To understand how the product is used in aggregate: usage analytics via PostHog. We use this to make Kove better. We do not build individual behavioral profiles.

We use these third-party services to run Kove. Each receives only the data they need to do their job:

• Supabase — database and file storage (hosted on AWS infrastructure) • Stripe — payment processing • Resend — transactional email delivery • PostHog — product analytics • Vercel — web hosting

We do not sell your data. We do not share your content or personal information with advertisers, data brokers, or any party not listed above. We may disclose data if required by law or valid legal process.

We do not sell your data. We do not show you ads. We do not use your photos, videos, or captions to train AI models — ever. We do not share your content with anyone you haven't invited. We do not analyze your photos for any commercial purpose.

Photos and videos are stored in private, access-controlled storage buckets on Supabase (AWS). Files are never publicly accessible — every image or video is served through a short-lived signed URL that expires after one hour.

Honest answer to "can Kove see my photos?": technically yes — your content lives on our servers, and Kove-as-operator and our infrastructure providers have access to raw files. We never look at, analyze, or use your content. Unlike free apps, we have no business reason to — you pay us. That's the whole relationship.

Kove does not provide end-to-end encryption. If you need E2E encryption, Kove is not the right tool.

You can delete any post or comment at any time. Deleted content is removed from our storage within 30 days.

If you cancel your subscription, your account data (posts, media, comments) is retained for 30 days, then permanently deleted. There is no recovery after that window. If you want to keep your photos, download them before cancelling.

To request deletion of your account or data at any time, email privacy@koveapp.com.

Kove is for people 18 and older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at privacy@koveapp.com and we will delete it.

Kove is intended for users in the United States. We do not specifically target users in the European Union or other jurisdictions with separate data protection frameworks.

If we make material changes to this policy, we'll notify you by email before they take effect. The "effective date" at the top of this page will always reflect the current version.

Questions about this policy or how we handle your data: privacy@koveapp.com