Cove maintain Privacy Policy
Effective Date: 7 July 2026
Last Updated: 8 August 2026
Introduction
We built Cove maintain to help people who have taken GLP-1 medication feel supported, organised, and in control as they move into maintenance, so the progress you worked hard for is something you get to keep.
Using Cove maintain means sharing some information with us and with a small number of trusted service providers that help us run the app. We take that responsibility seriously, especially because some of what you track is sensitive health information.
This Privacy Policy explains what we collect, how we use it, who we share it with, your rights and choices, and how to contact us. We've also included a separate Health Data Privacy Policy at the end, with extra detail about how we handle sensitive health information.
If anything here is unclear, email us at hello@covemaintain.com and we'll explain it in plain English.
Who We Are
Cove maintain is provided by Wolfmark Studio Ltd, based in the United Kingdom. Wolfmark Studio Ltd is the "data controller" responsible for your information under this Privacy Policy.
For any privacy question or request, contact us at hello@covemaintain.com.
Where This Policy Applies
Cove maintain app (iOS): You create an account using Sign in with Apple. Your information is stored securely in our cloud database (Supabase) so you can sync across devices and recover your account if you change or reset your phone. With your permission, Cove maintain can also read certain data from Apple Health.
Website (covemaintain.com): Our website is mainly a marketing and support site. It may use limited analytics to understand traffic and improve the site. We do not design the website to collect health data. If you email us or submit a form, we use that information only to respond to you. Please don't include health details in website forms unless it's necessary.
Key Terms (Plain English)
- Health data: Information about your health that you enter or import into the app, for example your weight, medication details, daily check-ins, habits, and data imported from Apple Health.
- Personal data: Any information that relates to you as an identifiable person, including your account details and your health data.
- Aggregated / de-identified data: Information combined across many users and stripped of details that identify you (for example overall averages or trends), which can no longer reasonably be linked back to you. We do not currently use aggregated health data in this way, but we may do so in the future to understand trends and improve Cove maintain.
What We Collect (and Why)
Account Information
- The account identifier Apple provides when you use Sign in with Apple
- Your email address (this may be Apple's private relay email if you choose to hide your email)
- Your name
Why? So you can log in, sync your data across devices, and recover your account.
Information You Give Us When You Set Up Cove maintain
When you first set up Cove maintain, we ask you a series of questions to personalise your maintenance plan. This includes:
- Your name and, optionally, details like your sex, date of birth, and height
- Details about your GLP-1 medication: which medication you took, your dose, and the date you stopped (or plan to stop). We use this to estimate when the medication clears your system and to tailor your plan. Cove maintain records these details during setup and you can update them if your situation changes (for example when you record your final dose); it does not track your doses over time.
- Your starting weight and preferred weight unit
- Your activity and movement level
- Your primary goal for using Cove maintain
- Your worries or concerns about maintenance (for example weight regain, returning appetite, cravings, emotional eating, or losing motivation)
- Whether weighing in makes you anxious
Why? To personalise your plan, set the right reminders, and give you support that fits your situation.
Information You Track in the App
As you use Cove maintain, we process the information you choose to record, such as:
- Weight entries: your weight over time, with optional notes
- Daily check-ins: for example how your appetite feels, how you'd rate your day, moments of loss-of-control eating, how you slept, and your confidence, along with any free-text notes you write
- Habits: the habits you set and your completion history
Why? To provide Cove maintain's core features, helping you stay organised, see your progress, and feel supported through maintenance.
Apple Health (Optional)
With your permission, Cove maintain can read certain data from Apple Health to support your maintenance plan, limited to:
- Protein and fibre (often from food-logging apps connected to Apple Health)
- Dietary energy (calories consumed)
- Active energy and resting energy (basal energy)
- Sleep
- Body mass
Cove maintain can also write the body weight you log in the app back to Apple Health, so your records stay together. You can turn this off at any time in the Apple Health app under Sharing, or refuse or revoke Apple Health access entirely in your device settings.
With your permission, Cove maintain may also receive Apple Health updates in the background on your device so your activity rings and trends stay current. Most Apple Health data is processed on your device. Weight you import from Apple Health is stored in your Cove maintain account, and sleep-related scores you save in check-ins may reflect data derived from Apple Health.
Why? To make it easier to see your progress in one place, alongside the rest of your Cove maintain data.
Reminders and Notifications
Cove maintain can send you reminders (for example to check in or weigh in) based on the times you choose. These notifications are scheduled locally on your device. We don't send your reminder content to an external notification service.
Device & Technical Information
We (and our service providers) may automatically collect limited technical information, such as:
- Device type and operating system version
- App version and basic diagnostics
- Crash reports and performance logs (to fix bugs and improve reliability)
- Network and request metadata processed as part of running the service (for example, your IP address may be processed and temporarily logged by our providers for security, abuse prevention, and routing)
Why? To keep the app reliable, secure, and working properly.
Payment & Subscription Information
A subscription to Cove maintain unlocks all of the app's features. Subscriptions are processed by the Apple App Store. We do not receive your full payment card details.
We use RevenueCat to manage subscriptions. This typically includes your subscription status and related purchase details (for example, whether your subscription is active), so the app can unlock its features and help us troubleshoot issues.
When Apple asks us to help resolve a refund request, we (via RevenueCat) may share information about your usage and consumption of purchased content with Apple, so Apple can decide the request. This is subscription and app-usage information, not your health entries.
Analytics
We use analytics to understand how the app is used so we can improve it. We take steps to avoid sending your health entries through analytics tools.
- Firebase Analytics (Google): non-health app interactions (for example screen views, sign-in, subscription, and onboarding events) and basic app context such as app version.
- Firebase Crashlytics (Google): crash reports, performance signals, and technical diagnostics.
- Website analytics (if used): website usage such as pages visited, approximate region, and browser/device info, to measure traffic, not to target ads.
Important: We take steps to minimise data sharing and to avoid sending your health entries (medication details, weight, check-ins, habits, or wellbeing notes) through analytics tools. All analytics data is encrypted in transit.
Legal Bases for Processing (UK/EU GDPR and similar laws)
If you are in the United Kingdom, the European Economic Area, or another region that requires a legal basis for processing, we rely on the following:
- Contract: To provide Cove maintain's core features: creating your account, saving and syncing your data, and delivering subscription features.
- Consent: For optional and sensitive features. Because your health and wellbeing data is "special category" data under UK/EU law, we rely on your explicit consent to process it, and on your consent for Apple Health imports and any non-essential cookies on our website. You can withdraw consent at any time (see Your Privacy Rights).
- Legitimate interests: To keep Cove maintain reliable and secure, prevent fraud and abuse, debug issues, and understand how the app is used (using non-health analytics) so we can improve it.
- Legal obligations: To comply with applicable laws and respond to lawful requests from regulators, courts, or law enforcement.
If you have questions about our legal bases, or want to object to processing based on legitimate interests, email hello@covemaintain.com.
Where & How We Store Your Data
- Your account and the information you enter (setup answers, weight, check-ins, habits, confidence): stored in Supabase, a cloud database. It is tied to your account so you can sync across devices and recover it, and it is protected by access controls and row-level security so you can only access your own data.
- Apple Health data: stays on your device in Apple Health for most data types. Cove maintain only reads the data types you approve. It is not copied to our servers except where you log or import it in Cove maintain (for example your weight), or where a value derived from Apple Health is saved in your check-ins (for example a sleep score). Cove maintain may receive background Apple Health updates on your device to keep your rings and trends current.
- Sign-in: handled by Apple (Sign in with Apple). We never receive your Apple ID password.
- Crash and performance data: Firebase Crashlytics (Google).
- Product analytics: Firebase Analytics (Google).
- Subscriptions: RevenueCat and the Apple App Store.
Some data may be processed by trusted service providers (listed below) to help us operate and improve Cove maintain.
How Long We Keep Your Data
- Account and the data you enter: until you delete it in the app or delete your account.
- Crash and performance logs: retained for a limited period for debugging and reliability, then deleted or aggregated.
- Analytics data: retained only as long as reasonably necessary to understand usage and improve the app.
- Subscription records: retained as long as necessary to manage your subscription and meet legal and accounting obligations.
- Support emails: retained as long as reasonably necessary to help you and keep a record of your request.
When you delete your account, we delete or de-identify your personal data, except where we need to keep limited information to comply with legal obligations, resolve disputes, or enforce our agreements.
Your Privacy Rights
Depending on where you live, you may have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Restrict or object to certain uses
- Withdraw consent at any time
- Not be discriminated against for exercising your rights
You can manage many choices directly in the app's Profile, including deleting your data and deleting your account. You can also email us at hello@covemaintain.com and we'll help.
If you're in the UK or EU: You also have the right to complain to a data protection authority. In the UK, that's the Information Commissioner's Office (ICO) at ico.org.uk.
If you're in the United States: You may have additional rights depending on your state. See United States State Privacy Rights below for the full detail, including health-data protections for Washington and Nevada residents. We do not sell your personal data, and we do not share it for targeted advertising.
Verification and appeals
To protect your privacy, we may need to verify your request before acting on it (for example, by confirming access to your account). If we deny a request, you can appeal by replying to our response or emailing hello@covemaintain.com.
United States State Privacy Rights
This section provides additional information for residents of US states with their own privacy laws, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and others, as well as the consumer health data laws in Washington and Nevada. If there is any conflict between this section and the rest of the policy, this section governs for residents of the relevant state.
Categories of Information We Collect
In the past 12 months, we have collected the following categories of personal information (as defined by California law). We collect these from you, from your device, from Apple (sign-in and Apple Health), and from our service providers.
| Category | Examples in Cove maintain | Do we "sell" or "share" it? |
|---|---|---|
| Identifiers | Name, email address, Apple account identifier | No |
| Personal characteristics | Sex, date of birth, height | No |
| Health information (sensitive) | Medication details, weight, check-ins, habits, wellbeing notes, Apple Health imports | No |
| Commercial information | Subscription status and purchase history | No |
| Internet / device activity | App usage events, crash and performance logs | No |
| Approximate location | General region derived from IP address (we do not collect precise location) | No |
| Inferences | Your personalised maintenance plan | No |
We do not sell your personal information, and we do not share it for targeted or cross-context behavioural advertising. We have not done so in the past 12 months, including for residents under 16.
Sensitive Personal Information
Your health information is "sensitive personal information" under these laws. We use it only to provide and improve Cove maintain's features that you ask for, never to advertise to you or to infer characteristics about you for marketing. Where the law gives you a right to limit the use of sensitive personal information, we already limit ours to these purposes.
Your Rights
Depending on your state, you have the right to:
- Know / access the personal information we hold about you
- Delete your personal information
- Correct inaccurate personal information
- Data portability: receive a copy in a portable format (contact us by email)
- Opt out of sale, sharing, and targeted advertising (note: we don't do any of these)
- Limit the use of sensitive personal information
- Non-discrimination: we won't treat you differently for exercising your rights
- Appeal a decision if we deny your request (Colorado, Connecticut, Virginia, and others)
How to Exercise Your Rights
Use the tools in the app's Profile to delete your data and your account, or email hello@covemaintain.com. You can use an authorised agent to make a request on your behalf; we may ask for proof of their authority and verify your identity before acting. If we deny your request, you can appeal by replying to our response; if you're still unsatisfied, you can contact your state Attorney General.
Opt-Out Preference Signals
The Cove maintain app does not use advertising trackers. Where our website supports it, we treat recognised browser opt-out signals such as Global Privacy Control (GPC) as a valid request to opt out of any sale or sharing for that browser.
Washington & Nevada Consumer Health Data
Washington's My Health My Data Act and Nevada's consumer health data law give extra protection to "consumer health data." For Cove maintain, your consumer health data is the health and wellbeing information described in the Health Data Privacy Policy below, which serves as our consumer health data privacy notice. In summary:
- We collect your consumer health data only to provide the features you use, and only with your consent.
- We do not sell your consumer health data. We would never do so without the separate, valid authorisation these laws require.
- We share it only with the service providers needed to run Cove maintain (such as Supabase), under contracts that limit them to serving us.
- You can withdraw consent, and ask us to delete your consumer health data, at any time in Profile or by emailing hello@covemaintain.com.
- We do not use "geofencing" around any healthcare location to track you or send you advertising.
California "Shine the Light"
California residents may ask whether we shared personal information with third parties for their own direct marketing. We do not, so there is nothing to disclose, but you can confirm this by emailing hello@covemaintain.com.
Canada
This section provides additional information for users in Canada, under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial laws such as Quebec's Law 25.
- Consent: We collect, use, and disclose your personal information with your knowledge and consent. Because your health information is sensitive, we rely on your express consent to process it, and you can withdraw that consent at any time (subject to legal or contractual limits) in the app's Profile or by emailing us.
- Purposes: We use your information only for the purposes described in this policy, to provide and improve Cove maintain, keep it secure, and meet our legal obligations.
- Your rights: You can access the personal information we hold about you, ask us to correct it, and ask us to delete it. Quebec residents also have the right to data portability and to be informed about automated decision-making (Cove maintain does not make automated decisions that produce legal or similarly significant effects about you).
- Cross-border transfers: Your information is stored and processed outside Canada, including in the United Kingdom, the European Union, and the United States, by us and by our service providers (such as Supabase, Google, and RevenueCat). This means it may be accessible to courts, law enforcement, and authorities in those countries. We use contractual and other safeguards to protect it.
- Privacy Officer: You can reach the person responsible for privacy at Wolfmark Studio Ltd by emailing hello@covemaintain.com.
- Complaints: If you have a concern we can't resolve, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).
Who We Share Data With (and Why)
We share data with service providers that help us run Cove maintain. They may only use it to provide services to us, not for their own purposes, subject to appropriate contracts and safeguards.
- Supabase: cloud database storage and authentication
- Apple: Sign in with Apple, Apple Health (on-device), App Store subscriptions, and resolving refund requests
- Google (Firebase Analytics & Crashlytics): non-health product analytics and crash reporting
- RevenueCat: subscription management
We do not sell your data.
We do not share your data for targeted advertising.
Support communications
If you contact us, we'll use the information you provide to respond and resolve your issue. If your message includes health details, we treat that information as sensitive and use it only to help you.
Legal requirements
We may disclose information if required by law or legal process (for example, a court order), or if we believe disclosure is necessary to protect rights, safety, and security.
Corporate transactions
If Cove maintain is involved in a merger, acquisition, financing, reorganisation, or sale of assets, information may be transferred as part of that transaction. We'll provide notice where required by law.
International Data Transfers
Cove maintain is operated from the United Kingdom, and some of our service providers (such as Supabase, Google, and RevenueCat) may store or process your data in the United States or other countries. Where we transfer data internationally, we use appropriate safeguards required by law, such as the UK International Data Transfer Agreement (IDTA) and the European Commission's Standard Contractual Clauses (SCCs).
Security
We use reasonable administrative, technical, and organisational safeguards designed to protect your information, including access controls, row-level security so you can only access your own records, and encryption in transit (and, where supported by our providers, encryption at rest).
No method of transmission or storage is 100% secure, but we work hard to protect your information and to improve our safeguards over time.
Children's Privacy
Cove maintain is intended for adults managing their own health and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact hello@covemaintain.com and we'll delete it.
Cookies
Our website may use cookies and similar technologies (such as analytics) to understand site traffic and improve the site. You can control cookies through your browser settings. The Cove maintain app itself does not use advertising cookies.
Deleting Your Data
You can delete your data, including deleting your account, from the app's Profile screen. Deleting your account removes your personal data from our systems, except where we're legally required to retain limited information.
To delete Apple Health data Cove maintain has written (such as your weight), you can manage or remove it directly in the Apple Health app.
Need help? Email hello@covemaintain.com.
Changes to This Policy
We may update this policy from time to time. We'll post the latest version at covemaintain.com/privacy. If changes are material, we'll provide additional notice where required (for example, through an in-app notice).
Contact Us
Email us anytime at hello@covemaintain.com.
Cove maintain does not provide medical advice, diagnosis, or treatment. Always consult your healthcare provider before making any medical decisions.
Cove maintain Health Data Privacy Policy
Last Updated: 7 July 2026
This Health Data Privacy Policy supplements our main Privacy Policy and explains how we handle sensitive health information. Under UK and EU law, your health data is "special category" data and receives extra protection.
What Counts as Health Data in Cove maintain
Health data includes information you enter or import about:
- Details about your GLP-1 medication that you provide during setup (which medication, dose, and the date you stopped or plan to stop), which you can update if your situation changes
- Body weight and weight history
- Daily check-ins (appetite, day rating, loss-of-control eating, sleep, and confidence), plus any wellbeing notes you write
- Your worries or concerns about maintenance
- Habits you track
- Data you choose to import from Apple Health, limited to protein, fibre, dietary energy, active energy, resting energy, sleep, and body mass
How We Store Health Data
Your health data is stored securely in our cloud database (Supabase), tied to your account and protected by access controls and row-level security, so that only you can access your own records. Most Apple Health data stays on your device. Weight you import from Apple Health is stored in your Cove maintain account, and sleep-related scores you save in check-ins may reflect data derived from Apple Health. Cove maintain may receive background Apple Health updates on your device (with your permission) to keep your rings and trends current.
Where Health Data Comes From
We collect health data from:
- You, when you set up Cove maintain and when you enter information in the app
- Apple Health, if you choose to enable Apple Health import (protein, fibre, dietary energy, active energy, resting energy, sleep, and body mass). Some of this data may originally come from other apps you connect to Apple Health (for example food-logging apps).
Cove maintain only reads the Apple Health data types you approve, and you can revoke that access at any time in your device settings.
Why We Use Health Data
We use health data to:
- Provide Cove maintain's core features
- Personalise your maintenance plan (for example, estimating when your medication clears your system)
- Help you track your progress and feel supported through maintenance
- Display Apple Health trends alongside your Cove maintain data when you enable that feature
- Improve app reliability and security
- Comply with legal obligations
We rely on your explicit consent to process your health data. You can withdraw that consent at any time by deleting the relevant data or your account, or by contacting us.
We do not use your health data for targeted advertising.
We do not sell your health data.
How We Share Health Data
We share health data only in limited circumstances:
- Service providers necessary to operate the app, for secure storage, syncing, authentication, and reliability (for example Supabase).
- Support, only if you contact us and the information is needed to resolve your issue.
- Aggregated, de-identified data, which in the future we may use to understand trends and improve Cove maintain. We do not currently share health data in this form. Where we do so, it cannot reasonably be linked back to you.
- Legal requirements, if required by law or a similar legal process.
- Corporate transactions, if Cove maintain is acquired, merged, or reorganised, with notice where required.
We do not send your health entries (medication details, weight, check-ins, habits, or wellbeing notes) to analytics tools such as Firebase Analytics.
Your Rights Over Health Data
You have the right to:
- Access your health data
- Correct your health data
- Delete your health data
- Withdraw consent at any time
Most of these actions can be done directly in the app's Profile. If we deny a request, you can appeal by emailing us. If you're still unsatisfied, you can contact your data protection authority (in the UK, the ICO) or, in the US, your state Attorney General, depending on where you live.
Contact: hello@covemaintain.com
© 2026 Wolfmark Studio Ltd. All rights reserved. Cove maintain is a GLP-1 maintenance companion and does not provide medical advice, diagnosis, or treatment.