Your relationship,
kept private.
This is the plain-language home for how CoveLink accesses, collects, uses, and protects your information — written so the two of you actually know where you stand.
This Privacy Notice for CoveLink (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
- Download and use our mobile application (CoveLink), or any other application of ours that links to this Privacy Notice
- Use CoveLink. CoveLink is a private, relationship-first app where couples can chat, share photos, and stay connected in one secure space built just for two.
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@covelink.us.
Summary of key points
What personal information do we process?
When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.
Do we process any sensitive personal information?
Some information may be considered “special” or “sensitive” in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process this kind of sensitive personal information.
Do we collect any information from third parties?
We do not directly purchase or acquire information about you from third-party data brokers. We do use third-party service providers to operate the Services — including cloud infrastructure and authentication (Google Firebase), crash and performance diagnostics (Sentry), and advertising (Google AdMob) — and those providers may independently collect device and usage information.
How do we process your information?
We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We process your information only when we have a valid legal reason to do so.
In what situations and with which parties do we share personal information?
We may share information in specific situations and with specific third parties, described below.
How do we keep your information safe?
We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission or storage technology can be guaranteed to be 100% secure.
What are your rights?
Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.
How do you exercise your rights?
The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
What Information Do We Collect?
Personal information you disclose to us
We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- names
- email addresses
- date of birth (yours and, where you choose to share it, your partner’s) — collected so we can send birthday reminder notifications
- a relationship milestone date, such as your anniversary — collected so we can send milestone reminder notifications
- photos, voice messages, and other content you choose to share with your partner in chat (end-to-end encrypted in transit and at rest, so we cannot read it)
Sensitive Information. We do not process sensitive information such as racial or ethnic origin, sexual orientation, or religious beliefs.
Account Access Data. CoveLink currently supports email and password login and does not offer social login providers.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. CoveLink does not request or collect precise geolocation data for core account or messaging features.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version and system configuration information, device and application identification numbers, browser type and version, hardware model, Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server).
- Push Notifications. We may request to send you push notifications regarding your account or certain features, and we store a device push token to deliver them. You may opt out in your device’s settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, device characteristics, operating system, language preferences, and other technical information. It is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
The information we collect includes:
- Log and Usage Data. Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, including device event information such as crash reports.
- Device Data. Information about your computer, phone, tablet, or other device you use to access the Services, such as your IP address, device and application identification numbers, hardware model, operating system, and system configuration information.
- Location Data. CoveLink does not collect precise location data from GPS or similar device-level location services for core account or messaging features.
Third-Party Service Providers. CoveLink relies on the following categories of contracted infrastructure and service providers, under legal and contractual safeguards, to operate the Services:
- Google Firebase / Google Cloud — authentication, database, file storage, and backend hosting
- Sentry — crash and performance diagnostics
- Google AdMob — displays advertising within the app; this provider may collect device and advertising identifiers to serve ads, subject to your device’s operating-system-level advertising and tracking controls
How Do We Process Your Information?
We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts.
- To deliver and facilitate delivery of services to the user.
- To enable user-to-user communications.
- To save or protect an individual’s vital interest, such as to prevent harm.
What Legal Bases Do We Rely On to Process Your Information?
If you are located in the EU or UK, the GDPR and UK GDPR require us to explain the valid legal bases we rely on, including: Consent, Performance of a Contract, Legal Obligations, and Vital Interests.
If you are located in Canada, we may process your information with your express or implied consent, or, in limited exceptional cases permitted by law (e.g., fraud detection and prevention, legal proceedings, or emergencies), without consent.
When and With Whom Do We Share Your Personal Information?
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business.
- Service Providers. We share information with Google Firebase/Google Cloud, Sentry, and Google AdMob as described above, under contract, solely to operate, secure, and monetize the Services.
- Other Users. Content you share within your private couple space is only visible to your paired partner. We do not have public or shared areas visible to all users.
What Is Our Stance on Third-Party Websites?
The Services may link to third-party websites or services not affiliated with us. We do not guarantee the safety or privacy practices of such third parties, and any data you provide to them is not covered by this Privacy Notice.
Do We Use Cookies and Other Tracking Technologies?
CoveLink does not use web cookies (it is a mobile app), but our advertising partner, Google AdMob, may use device-level advertising identifiers to serve ads within the app, subject to your device’s operating system settings (e.g., iOS “Allow Tracking” / Android ad personalization controls). We do not currently use a dedicated analytics SDK. To limit ad personalization, adjust your device’s advertising ID and tracking settings directly, or contact us at support@covelink.us with questions about our advertising practices.
How Do We Handle Account Access?
CoveLink does not currently offer registration or sign-in through third-party social networks, and we do not receive profile data from social providers.
How Long Do We Keep Your Information?
No purpose in this notice will require us to keep your personal information for longer than 30 days after the account becomes idle for free users, or 3 months after the account becomes idle for paid, premium, and lifetime users. An account is treated as idle after 12 months without activity, based on the account’s last-seen timestamp. When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it, consistent with our automated account-cleanup process.
How Do We Keep Your Information Safe?
Messages and media you exchange with your partner are end-to-end encrypted, so we cannot read their contents. However, no electronic transmission or storage technology can be guaranteed 100% secure, and we cannot guarantee that unauthorized third parties will never defeat our security measures.
Do We Collect Information From Minors?
By using the Services, you represent that you are at least 18 (or the equivalent age of majority in your jurisdiction). If we learn that personal information from a user under 18 has been collected, we will deactivate the account and delete the data.
What Are Your Privacy Rights?
You can exercise these rights, or withdraw consent, by contacting us at support@covelink.us. EEA/UK residents may also complain to their local data protection authority; Swiss residents may contact the Federal Data Protection and Information Commissioner.
Account Information. You can review or update your account information in-app at any time, or request account termination by emailing support@covelink.us. We may retain limited information after termination to prevent fraud, troubleshoot, or comply with legal requirements.
Controls for Do-Not-Track Features
We do not currently respond to Do-Not-Track (DNT) browser signals, as no uniform technical standard for DNT exists yet. If one is adopted, we will update this notice accordingly.
Do United States Residents Have Specific Privacy Rights?
Categories of Personal Information We Collect (past 12 months):
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Name, email address, online/device identifiers, IP address | YES |
| B. Records under CA Customer Records statute | Name, contact information, employment, financial information | NO |
| C. Protected classification characteristics | Gender, age, date of birth, race, national origin, marital status | YES — date of birth only, for birthday reminders |
| D. Commercial information | Transaction/purchase history, financial details | NO |
| E. Biometric information | Fingerprints and voiceprints | YES — device-level Face ID/Touch ID app-lock only; raw biometric data never leaves your device |
| F. Internet or network activity | Browsing/search history, interactions with ads | NO |
| G. Geolocation data | Device location | NO |
| H. Audio, electronic, sensory, or similar information | Images and audio recordings | YES — photos and voice messages you share in chat, end-to-end encrypted |
| I. Professional or employment-related information | Job title, work history | NO |
| J. Education information | Student records | NO |
| K. Inferences drawn from collected personal information | Profiles or summaries of preferences | NO |
| L. Sensitive personal information | — | NO |
We retain Category A (Identifiers), Category C (date of birth), Category E (device-level biometric app-lock, never transmitted to us), and Category H (chat photos/voice messages, encrypted) for as long as the user has an account with us, subject to the retention schedule in Section 8.
Will your information be shared with anyone else? We disclose personal information to our service providers (Google Firebase/Google Cloud, Sentry, Google AdMob) under written contract. We have not sold or shared personal information with third parties for a business or commercial purpose in the preceding twelve (12) months, and we will not do so in the future.
Your Rights include the right to know, access, correct, delete, obtain a copy of, and non-discrimination for exercising rights over your personal data; and, depending on your state, the right to opt out of targeted advertising, sale of personal data, or profiling.
How to Exercise Your Rights: Contact us at support@covelink.us. We may need to verify your identity before processing your request, and an authorized agent must provide signed proof of authorization.
Appeals: If we decline to act on your request, you may appeal by emailing support@covelink.us; if denied, you may complain to your state attorney general.
California “Shine the Light” Law: California residents may request, once a year and free of charge, information about categories of personal information we disclosed to third parties for direct marketing purposes in the preceding calendar year, by writing to support@covelink.us.
Do Other Regions Have Specific Privacy Rights?
Australia and New Zealand. We process your information under the Privacy Act 1988 (Australia) and Privacy Act 2020 (New Zealand). You may request access to or correction of your information by contacting support@covelink.us, or complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
Republic of South Africa. You may request access to or correction of your information via support@covelink.us, or complain to The Information Regulator (South Africa) at enquiries@inforegulator.org.za.
Do We Make Updates to This Notice?
The “Last updated” date at the top reflects the current version. Material changes will be communicated via a prominent notice or direct notification.
How Can You Contact Us About This Notice?
Email us at support@covelink.us.
How Can You Review, Update, or Delete the Data We Collect From You?
You may have the right to request access to, correction of, or deletion of your personal information, and to withdraw consent, subject to applicable law. Submit requests via a data subject access request or by emailing support@covelink.us.
Questions about your privacy?
Reach out any time and our team will help with account, data, or privacy requests.
✉ support@covelink.us