Privacy Policy

Kova is made and operated by Fayeed Pawaskar ("we", "us"), an individual developer. Questions about this policy or your data can be sent to privacy@liftwithkova.app.

Pose tracking runs entirely on your device. Your camera video, images and body points (pose landmarks) are never uploaded, never stored on our servers, and never seen by anyone.

If you turn on saving session video, it is saved to your Photos library and stays on your device.

The first time you open Kova, the app creates an anonymous account for you, identified by a random user ID, through Google Firebase Authentication. You do not need to give a name or email to use Kova.

If you choose Sign in with Apple or Google, we receive your name and email address. With Apple, you can hide your email by using Apple's relay address.

We store the following in Google Firebase (Cloud Firestore), linked to your account:

• Onboarding answers: your name, experience, goals, schedule, focus areas, equipment, coaching preferences, and any health-related answers you choose to give. These can include injuries, conditions such as pregnancy, postpartum or recent surgery, and an optional free-text injury note.
• Practice history: which routines and poses you did, durations, form scores, rep counts, corrections, how the session felt, and optional reflection notes.
• Your subscription status and the number of sessions you have completed.

We use this to run the app, keep your practice safe (for example, keeping unsuitable poses out of your plan), adapt future sessions, and sync across your devices.

The AI coach is off unless you agree to it in the app. If, and only if, you give that consent, Kova sends your onboarding answers, notes you write, and summaries of your practice to our server. Camera data is never sent. Our server passes this information to:

• Anthropic (Claude models, accessed through OpenRouter), to write your plans, reports and spoken coaching lines.
• TypeSafe (Jev), to read your notes for soreness, pain and safety signals.

We ask OpenRouter to route only to providers that do not retain your data or train on it. We do not allow these providers to use your data for anything other than generating your response.

You can decline or withdraw consent in Settings at any time. Every feature keeps working on your device without the AI coach.

Purchases are processed by Apple. RevenueCat manages your subscription status and receives your anonymous user ID, purchase history and basic device information. We never see your payment card details.

When the app crashes, we receive a crash report through Firebase Crashlytics with the device model, OS version and app state. Crash reports are not linked to your account.

With your permission, Kova writes finished practices to Apple Health as mindful-movement workouts, and reads workouts so it can show your practice alongside your other training.

Health data read from Apple Health stays on your device. It is never sent to our servers, never used for advertising or marketing, and never sold or shared.

• Reminders are local notifications scheduled on your device.
• Casting to AirPlay or Chromecast uses your local network only.
• The instructor voice runs on your device. Voice files are downloaded from our server (Cloudflare), which sees only a normal web request.

We do not sell your personal data, show ads, track you across other apps or websites, or use your data for advertising.

We use these service providers:

• Google Firebase, for authentication, the database and crash reports.
• RevenueCat, for subscriptions.
• Cloudflare, for our API server and voice downloads.
• OpenRouter, Anthropic and TypeSafe, for the AI coach, only with your consent.

Your data may be processed in the United States and other countries where these providers operate.

We keep your data while your account exists.

• To delete everything, go to Settings > Account > Delete account, or Settings > Data & privacy > Delete everything. This permanently deletes your account, all synced data and everything on your device, and revokes Sign in with Apple.
• To get a copy of your data, go to Settings > Data & privacy > Export my data.
• If you cannot access the app, email privacy@liftwithkova.app to request deletion.

Subscriptions are managed by Apple and must be cancelled in your App Store account settings. Deleting your account does not cancel a subscription.

You have the right to access, correct, delete and export your data, to withdraw your consent, and to complain to a data protection authority under the GDPR and UK GDPR. California residents also have the rights given to them by the CCPA/CPRA.

To use any of these rights, email privacy@liftwithkova.app. We respond within 30 days.

Kova is not directed to children under 13 (under 16 in the EEA and UK), and we do not knowingly collect their data.

We will post any changes to this policy here and update the date at the top. Material changes will also be announced in the app.

For anything about privacy, email privacy@liftwithkova.app.