Privacy Policy

Last updated: 18 June 2026

Template notice — this policy is a starting point and not legal advice. Before relying on it, replace the highlighted placeholders and have it reviewed by a qualified lawyer for your jurisdiction.

This Privacy Policy explains how Kova (“Kova”, “we”, “us”), operated by [legal entity name], collects, uses, and protects your information when you use our website and AI coaching application (the “Service”). By using the Service you agree to the practices described here.

1. Information we collect

Account information: your email address and authentication details.
Athlete profile data you provide: your sports, goals, races, weekly schedule, personal records, and health and injury information (for example injury type, severity, recovery status, and pain level).
Conversations: the messages you send to your coach and any text, screenshots, or images you upload (e.g. workout data).
Usage data: basic technical information such as device/browser type and actions within the app, used to operate and improve the Service.

2. How we use your information

To provide personalised coaching and remember your history across conversations.
To operate, maintain, secure, and improve the Service.
To communicate with you about your account, beta access, and updates.

3. AI processing and third parties

To generate coaching responses, the content you submit (including profile and conversation data) is processed by our AI provider, Anthropic (the Claude API). We also rely on trusted infrastructure providers to run the Service, including Supabase (database, authentication, and storage) and our hosting providers Vercel and Railway. These providers process data on our behalf under their own terms and security commitments. We do not sell your personal data.

4. Data storage and security

Your data is stored in Supabase with row-level security so that your records are accessible only to your account. We take reasonable technical and organisational measures to protect your information; however, no method of transmission or storage is completely secure.

5. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time (see “Your rights”).

6. Your rights

Depending on your location (e.g. under GDPR or CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [privacy contact email].

7. Health data

The injury and training information you choose to share is sensitive. We use it only to personalise your coaching experience and never to provide medical diagnosis or treatment. Kova is a fitness coaching tool and does not provide medical advice. Always consult a qualified healthcare professional regarding injuries or medical conditions.

8. Cookies

We use essential cookies and local storage required to keep you signed in and to operate the Service. We do not currently use third-party advertising cookies.

9. Children

The Service is not directed to anyone under [16 / 18] years of age, and we do not knowingly collect data from them.

10. International transfers

Your information may be processed in countries other than your own, including the United States, where our providers operate. We rely on appropriate safeguards for such transfers where required.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above.

12. Contact

Questions about this policy? Contact us at [privacy contact email].