Privacy Policy

1. Who we are

KOVA ("KOVA", "we", "us", "our") operates a mobile-first traveler community network organized around Coves — invite-based communities run by Creators. This Privacy Policy describes how we collect, use, store, share, and protect your information when you use the KOVA website, app, and related services (together, the "Service").

2. Information we collect

We collect the following types of information:

• Account information: name, email address, password, authentication provider details, and profile photo you provide at signup or when editing your profile.
• Profile information: rig type, travel style, interests, bio, and other optional fields you choose to share with Cove members.
• Location information: approximate latitude and longitude when you enable location sharing for the map. You may also set a manual city pin if you prefer not to share device location.
• Usage and activity information: Cove memberships, event registrations, RSVPs, waitlist entries, sub-event sign-ups, messages, announcements, group chat links you join, and interactions with other members.
• Device and log information: IP address, browser or device type, operating system, app version, crash logs, and dates/times of access. This is used for security, support, and service improvement.
• Payment information: when you register for paid events, our third-party payments partner processes your payment details. We do not store full payment card numbers on KOVA servers.
• Communications: messages you send through the Service, support requests, and email or in-app communications with KOVA or Cove Creators.

3. How we use your information

We use your information to:

• Provide and operate the Service, including the map, Coves, events, and messaging.
• Show you nearby members of Coves you belong to and power proximity-based features.
• Run events, manage registrations, waitlists, sub-events, and attendance.
• Send announcements, event updates, and transactional messages.
• Enable direct messaging between members who share at least one Cove.
• Deliver messages to other members you interact with within the KOVA platform.
• Process payments and manage event logistics and refunds.
• Keep the Service secure, prevent abuse, enforce our Terms, and comply with legal obligations.
• Improve the Service and develop new features.

4. How we use your location

Location is a core part of KOVA. When you enable location sharing or set a manual pin, we use that information to:

• Place your pin on the map and show you other members in approximate proximity.
• Power "Friends Nearby" and proximity alerts within your Coves.
• Help event hosts and Creators plan gatherings and communicate regional updates.

We do not share your exact GPS coordinates with other members. By default, other members see an approximate location or proximity indicator. You can toggle Off-Grid at any time from the map or Settings to stop sharing your location, or update your pin to a different city or region. Location is not used to track you continuously in the background.

5. Who can see your information

Your information is shared only in the following ways:

• Your Cove members: profile and approximate location are visible to members of Coves you belong to. Direct messages are available only to members who share a Cove with you.
• Cove Creators: can see aggregate membership, event registration, and attendance data for their Cove, and can manage invites, announcements, and events.
• Event hosts: can see registration lists, sign-ups, and contact information needed to run their events.
• Service providers: we use trusted third parties for hosting, database, authentication, storage, mapping, payments, analytics, and email delivery. These providers process data only on our behalf and under contractual protections.
• Legal compliance: we may disclose information if required by law, court order, or legal process, or if necessary to protect the safety, rights, or property of KOVA, our members, or others.

We do not sell your personal information. We do not share your personal information with third parties for their own direct marketing purposes.

6. Cookies and similar technologies

We use cookies and local storage to keep you signed in, remember your preferences (such as map auto-recenter), and understand how the Service is used. Authentication tokens are stored securely in your browser or app. You can control cookies through your browser settings, but disabling them may affect your ability to sign in or use some features.

7. Your choices and rights

You have control over your information:

• Location: enable, disable, or set a manual pin at any time from the map or Settings. Off-Grid mode stops location sharing with other members.
• Profile: edit or remove your profile photo, bio, rig, travel style, and interests from Settings or your profile page.
• Notifications: manage push, email, and in-app notification preferences from Settings.
• Account deletion: delete your account from Settings. On deletion, we remove your profile and location data from active systems. Some records tied to events, payments, or moderation may be retained in a minimized form for operational, financial, or legal reasons.
• Access and portability: depending on your jurisdiction, you may have the right to request access to or a copy of the personal information we hold about you.

8. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we remove your profile and location data from active systems within a reasonable time. We may retain certain information longer where necessary for legal compliance, fraud prevention, dispute resolution, payment records, or enforcing our Terms. Aggregated or de-identified data may be retained indefinitely.

9. Security

We use administrative, technical, and physical safeguards to protect your information, including encryption in transit, access controls, row-level security policies, and rate limiting. No online service is completely secure, and we cannot guarantee absolute security. If you believe your account has been compromised, change your password and contact us immediately.

10. International data transfers

KOVA is hosted on Lovable Cloud infrastructure. Your information may be stored and processed in the United States or other countries where our service providers operate. By using the Service, you consent to these transfers. We rely on appropriate safeguards, such as standard contractual clauses, where required by law.

11. Children's privacy

KOVA is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have collected information from a child, please contact us and we will delete it promptly.

12. Changes to this Privacy Policy

We may update this Privacy Policy as the Service evolves. If we make material changes, we'll notify active members through the app or by email. Continued use of KOVA after the updated policy takes effect means you accept the changes. The effective date at the top of this page shows when the policy was last updated.

13. State privacy rights

Depending on where you live, you may have additional rights under state privacy laws, such as the right to know, delete, correct, or opt out of certain sharing of your personal information. To exercise these rights, contact us using the information below. We will verify your identity before fulfilling your request.

14. Contact us

For privacy questions, data requests, or to report a privacy concern, contact the KOVA team through your Cove Creator or the in-app support link. We will respond to inquiries in a reasonable timeframe.