Privacy Policy

Last updated: April 2026

1. Data We Collect

KOVA collects only the data required to provide coaching recommendations:

• Health data: HRV, heart rate, sleep, body composition, and workout data from Apple Health (read only)
• Training logs: workout sessions, sets, reps, and weights you enter
• Nutrition logs: meals, macronutrients, and micronutrients you enter or log via camera/voice
• Biometric inputs: manual entries for HRV, recovery score, and sleep when automatic sync is unavailable
• Supplement logs: compound/supplement names, doses, and timing you enter
• Athlete profile: age, height, weight, goals, injury flags, and training experience you provide during onboarding
• Genetic data: DNA file uploads (AncestryDNA/23andMe) — stored locally on your device
• Bloodwork data: lab results you upload — stored locally on your device
• Coaching briefs: AI-generated recommendations stored locally for continuity

2. How We Use Your Data

Your data is used exclusively to generate personalized coaching recommendations via the Anthropic Claude API. Each coaching request sends your recent training history, biometrics, and profile to Claude's API. No personally identifiable information (name, email, address) is sent. No data is retained by Anthropic beyond the scope of individual API calls per Anthropic's data usage policies.

3. Data Storage

All data is stored on your device using Apple's SwiftData framework. If you have iCloud enabled, data may sync across your devices via Apple's CloudKit service, subject to Apple's privacy policy. We do not operate our own servers for storing your personal data.

4. Third-Party Services

• Anthropic API: coaching brief generation — aggregated data sent per-request, not stored
• Apple HealthKit: biometric sync per your permission grants (read only)
• Apple CloudKit: optional iCloud sync via your Apple ID
• Oura API: ring data sync (sleep, HRV, recovery) via OAuth2 — per your authorization
• Withings API: body composition sync via OAuth2 — per your authorization
• Ultrahuman API: ring data sync — per your authorization
• Google Calendar (optional): upcoming events for schedule-aware coaching
• Passio Nutrition AI: food recognition for meal logging — image processed on-device

5. Data Sharing

We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes. Data sent to the Anthropic API is subject to Anthropic's API data usage policy.

6. Your Rights

You can delete all app data by deleting the app from your device. To revoke HealthKit access, go to Settings → Health → Data Access & Devices. To disconnect wearable integrations, use the Integrations screen within KOVA Settings.

7. Children

KOVA is not directed at children under 13. We do not knowingly collect data from children under 13.

8. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the "Last updated" date above and within the app.

---

Contact

For privacy questions: hello@kovaascent.com