1. Information we collect
Phone number
We collect your phone number to create and verify your account using a one-time password (OTP). Your phone number is your login credential.
Profile information
When you set up your profile, you provide your name and optionally a profile photo, your current city and country, what you do for work, and a one-line bio. All of this is optional except your name.
Location
If you choose to add your location, we store the city, country, and geographic coordinates (latitude and longitude) you provide. We do not track your real-time or GPS location — you manually enter your city and it is stored only if you choose to share it.
Content you post
This includes posts (milestones), comments, reactions, chat messages, and photos you upload to the Memory Vault. This content is visible only to approved members of your covvy.
Push notification token
When you enable notifications, your device provides a push token that we use to send you notifications about activity in your covvies. This is linked to your account and device.
2. How we use your information
We use the information we collect to:
- Create and authenticate your account
- Show your profile to other members of your covvies
- Display your location on the covvy's member map (only if you have set a location)
- Deliver push notifications about activity relevant to you
- Allow you to share and view content within your covvies
We do not use your information for advertising. We do not sell your information to third parties.
3. Who can see your information
Covvey is built around private, invitation-only groups. Your content and profile are only visible to approved members of the same covvy. Nothing you post in a covvy is visible to the general public or to members of other covvies.
The covvy admin can see pending join requests and manage membership. They cannot access your private messages or account credentials.
4. Third parties we use
| Service | Purpose | Region |
|---|---|---|
| Supabase | Database, authentication, and file storage | United States |
| Twilio | SMS delivery for one-time password verification | United States |
| Expo / Apple APNs | Push notification delivery | United States |
These services receive only the minimum information necessary to perform their function. They are bound by their own privacy policies and are not permitted to use your information for other purposes.
5. Data storage and security
Your data is stored on Supabase infrastructure hosted in the United States. We use row-level security policies to ensure that users can only access data they are authorised to see. Connections to our backend are encrypted in transit using HTTPS.
Profile photos and Memory Vault photos are stored in private, access-controlled storage buckets. Signed, time-limited URLs are used to serve photos — they are not publicly accessible.
6. Your choices
- Location: Sharing your location is optional. You can remove it at any time from Profile Settings.
- Notifications: You can mute notifications globally or per covvy from Profile Settings → Notifications.
- Profile photo: Uploading a photo is optional. You can change or remove it at any time.
- Deleting your content: You can delete your own posts, comments, and Memory Vault photos at any time within the app.
- Account deletion: To delete your account and all associated data, contact us at hello@stagspace.lk. We will permanently delete your account, profile, and all content you have posted within 30 days of your request.
7. Data retention
We retain your information for as long as your account is active. If you request account deletion, we will delete your data within 30 days. Some information may be retained for a shorter period in backups before being fully purged.
8. Children's privacy
Covvey is not intended for use by anyone under the age of 16. We do not knowingly collect information from children under 16. If you believe a child under 16 has created an account, please contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Covvey after changes are posted constitutes your acceptance of the updated policy.
10. Contact
If you have questions about this privacy policy or want to request account deletion: