KOVENANTLegal
Privacy Policy
This policy explains what data the Kovenant app and the kovenant.novawebs.eu website process, why, who it is shared with and how you can exercise your rights. If anything is unclear, write to us.
1. Controller
Darío Nahin Lage Navarrete, Dénia (Alicante, Spain). Contact for any privacy matter: aurby.app@gmail.com.
2. What data we process
Before you have an account
Your answers are stored only on your phone, encrypted with AES-256 and with the key kept in the device's secure keychain. They don't leave it until you create an account, with one exception: in the 3AM Mode trial, what you write to Aurby, along with your reason, the area that needs the most work and your why, is sent to the artificial intelligence provider so Aurby can reply. Neither we nor the provider keep it; we only count how many trials happen each day, using hashed identifiers that can't tell us who you are.
Once you create an account
| Category | Data |
|---|---|
| Account | Email address and an internal identifier. If you sign in with Google, we receive your name, email and Google profile picture; we store the email and identifier, and we don't store the picture. If you sign in with Apple, we receive your email (or the private relay address Apple creates if you choose to hide it) and, the first time, your name. |
| Profile | The name or nickname you want Kovenant to call you (optional), your language, and your birth year and month, used only to check that you are 18 or older. |
| The Mirror and your plan | Your answers about your reasons, phone use, sleep, mood, urges, how your money feels at the end of the month and your “why”; your reading result, habit plan, the time you want to put your phone down and the habits you mark as done. |
| Backup of your progress | A backup of your progress (habits and days kept, routines, streaks, shop purchases, items, mantras, Vault notes and the log of your 3AM Mode sessions: type, time and outcome) and your phone model. It saves itself when you leave the app, at most every 30 minutes, so you lose nothing if you change phones or reinstall, and it lets us email you if your streak breaks. The “unsent” draft you write in 3AM Mode never leaves your phone. We only keep the latest backup. |
| Aurby and 3AM Mode | Your conversations with Aurby are stored only on your phone. To reply, each message is sent to the artificial intelligence provider, which does not keep it (see section 5). On our server we only count how many messages you use each month, to apply your plan's limits. |
| Subscription | The plan you choose, its status (trial, active, cancelled), when the trial or paid period ends and an anonymous purchase identifier. We never see or store your card details: payment is handled by Google Play or the App Store. |
| Notifications | Whether you allowed notifications. Reminders are scheduled on your own phone. To tell you about new messages and friend requests we store your phone's notification token, which is deleted when you sign out or when it stops being valid. |
| Friends | Your friend code, the alias and character you choose, and your friendships and requests (sent, accepted or declined). |
| Invites | The invite code you enter, if someone invited you. |
| App usage and errors | Which screens you open and what you do (for example, “habit checked” or “message sent”), linked to your internal identifier, and app crash reports. They never include what you write: not your habits, your messages or your answers. |
Pacts, leagues, friends and chats
If you join a pact or a league, the other members see the alias and character you choose, the days you complete and the applause and cheers you give and receive. In each pact's chat and in your chats with friends (one to one or in groups) we store the messages you write, the episodes you share, your reactions and how far you've read, and only the people in that chat can see them. Nobody can message you until you accept their request or their group invite. Photos you share in a pact are kept in private storage that only its members can access.
To protect the community we also keep who you block and the reports you make or receive, including the reported message. When you report a message, it is emailed to us for review.
App blocking
To cover the apps you pick, Kovenant uses Apple's Screen Time permission. Apple doesn't tell us which apps they are: your phone only keeps encrypted tokens, and all blocking (quick blocks, schedules, daily limits and the shield) happens on your phone. That information never leaves it and isn't stored on our server; we only log usage events without detail, such as “block started” and how many minutes it lasted.
Dictation
If you dictate a message with the microphone, speech recognition is done by Apple (or Google on Android) under their own policy. Kovenant only receives the text and doesn't keep the audio.
Website waitlist
If you join on the home page we keep your email, the type of phone you choose (iPhone or Android), whether you want to try the beta, your language and the date. It is stored in Supabase (Frankfurt, EU) and the website can only add entries: it cannot read the list. For the beta, your email is shared with Apple (TestFlight) or Google (Google Play closed test) only to send you the invitation.
Sensitive data
Some answers about mood and sleep may reveal information about your health, a special category of data under Article 9 of the GDPR. We only process them with your explicit consent, given before you start the Mirror, and only to create and adjust your plan.
Moments of risk
If your answers show you're going through a very hard moment, Kovenant shows you helplines for your country. To know whether that help reaches people who need it, we keep an anonymous daily count (day, country and level) that is not linked to your account and cannot identify you.
3. Why we use it and legal basis
- Providing the service: creating your account, calculating your reading, building your plan and saving your progress. Basis: performance of a contract (Art. 6(1)(b) GDPR) and, for health data, your explicit consent (Art. 9(2)(a)).
- Emailing your sign-in code. Basis: performance of a contract.
- Managing your subscription and trial. Basis: performance of a contract.
- Replying when you talk with Aurby and in 3AM Mode with artificial intelligence. Basis: performance of a contract and explicit consent.
- Pacts, leagues and chat: showing your progress and messages to the members of your pacts and leagues. Basis: performance of a contract.
- Moderation of pact content: filtering offensive words, reviewing reports and applying blocks. Basis: legitimate interest in keeping a safe space (Art. 6(1)(f)) and complying with app store rules.
- Improving the app and fixing bugs with usage and error data that never includes what you write. Basis: legitimate interest (Art. 6(1)(f)). You can object by writing to us.
- Telling you about the launch and inviting you to the beta if you join the waitlist, and about key Kovenant dates (such as New Year's Eve or the start of a season). Basis: your consent (Art. 6(1)(a)), which you can withdraw in one click with the unsubscribe link in every email.
- Emailing you if you have an account: during your first days (welcome and how to get the most out of it), if your streak breaks, two days before your free trial ends and on key dates such as New Year's Eve or the start of a season. At most one a day. Basis: legitimate interest in helping you use the service you signed up for (Art. 6(1)(f) GDPR and Art. 21.2 of the Spanish LSSI) and, for the trial-ending notice, performance of the contract. You can unsubscribe in one click from any email.
- Security and abuse prevention. Basis: legitimate interest (Art. 6(1)(f)).
- Legal obligations, such as tax. Basis: legal obligation (Art. 6(1)(c)).
We don't sell your data, use it for advertising or build commercial profiles, and we never use what you write to train artificial intelligence models, ours or anyone else's.
4. Google user data
If you sign in with Google, Kovenant only requests the basic openid, email and profile scopes and uses that information solely to identify you and create or restore your account. We don't access your Gmail, contacts, files or any other Google account data, we don't transfer this information to third parties except our authentication provider (Supabase) to sign you in, and we don't use it for advertising. Kovenant's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Who we share it with
Only with providers we need to run Kovenant, acting as processors under contract and on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | Servers in Frankfurt (EU) |
| Resend | Sending your sign-in code email (email address only) and internal report alerts | Sent from Ireland (EU); US-based company |
| Sign in with Google, if you choose it | EU and US | |
| Apple | Sign in with Apple, if you choose it, and delivery of notifications on iPhone | EU and US |
| Expo | Sending new-message notifications (notification token and the notification text) | US |
| RevenueCat | Subscription status (anonymous identifier, no payment data) | US |
| OpenRouter | Routing your messages to Aurby to the AI model that replies. We only use providers that don't store messages or use them for training | US |
| PostHog | App usage analytics (without the content of what you write) and visits to this website: how many visits, which link they come from and whether someone signs up. On the website it uses no cookies and stores nothing in your browser, and every visit is anonymous. | EU |
| Sentry | App crash reports, without personal data | Germany (EU) |
| Vercel | Hosting this website (technical access logs) | EU and US |
Google Play and the App Store process payment data as independent controllers under their own policies.
6. Transfers outside the EU
Where a provider processes data in the United States, the transfer relies on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.
7. How long we keep it
- Account data and the backup of your progress, for as long as your account is active. We only keep the latest backup.
- If you delete your account, we erase your data within 30 days; backups are overwritten within 90 days.
- Data we must keep by law (such as tax records), for the legal period and restricted.
- Pact chat messages, until 30 days after the pact ends. If you leave the pact or delete your account, your messages are deleted right away.
- Pact photos, until you delete them or your account.
- Reports, for as long as needed to keep the community safe and at most 12 months after they are resolved.
- Waitlist emails, until you unsubscribe or at most 12 months after launch.
- The log of emails sent keeps only an encrypted fingerprint of your address (not the address), so we never send you the same one twice.
- Anonymous counts cannot identify you and may be kept.
- Data stored only on your phone is removed when you uninstall the app.
8. Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data, and withdraw consent at any time without affecting prior processing. Write to aurby.app@gmail.com from your account email; we reply within one month. To delete your account, follow these steps.
If you believe we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD) or your local authority.
9. Minimum age
Kovenant is only for people 18 and over. If we find that an account belongs to a minor, we delete it.
10. Security
We encrypt data on your phone, all communications are encrypted in transit (TLS) and the database enforces row-level access rules so each person can only read their own data and, in pacts and leagues, what their members share.
11. Changes
If we change this policy in a meaningful way, for example when adding a new provider or push notifications, we'll let you know in the app before the change applies.