kovaaWho we are
kovaa is made by kovaa sport LLC, an Arizona company ("kovaa", "we"). This policy covers the kovaa app for iPhone and Apple Watch, your kovaa account, and this website, kovaasport.com. Questions about privacy go to privacy@kovaasport.com.
Your kovaa account
You create an account with Sign in with Apple. Apple gives us an ID for your account and an email address. If you choose Hide My Email, the address is a private relay that forwards to you, and we never see your real one. We use the email only for messages about your account, such as a security notice or a change to this policy. We don't send marketing email.
The account lets you restore your plan on a new iPhone and connect a Garmin. kovaa still builds and adjusts your plan on your iPhone, and the app works offline. Changes are copied to your account when you're back online.
What kovaa uses, and where it's kept
kovaa needs information about you and your training to build and adjust your plan.
| Information | Why kovaa uses it | Where it's kept |
|---|---|---|
| Your answers in setup: name, birth year, sex, height and weight, experience, races, the days and hours you can train, pool and equipment access | To size your plan, set heart-rate and pace estimates, and schedule sessions | On your iPhone and in your account |
| Health screening answers and injuries you report | To keep the plan safe, for example by pausing a sport when something hurts | On your iPhone and in your account |
| Thresholds (FTP, threshold pace, CSS, threshold heart rate) and training zones | To set every session's targets | On your iPhone and in your account |
| Your plan, its history of changes, and notes and effort ratings you add | So the plan can adapt and show you why it changed | On your iPhone and in your account |
| Workouts kovaa records or imports: time, distance, laps, heart rate, pace, power and the route, which is precise location | To match workouts to your plan and measure your training load | On your iPhone and in your account |
| Overnight signals: sleep and its stages, heart rate variability, resting heart rate | To judge how ready you are each morning | On your iPhone and in your account |
| Other Apple Health data kovaa reads (see Health data) | To build the records above | In Apple Health. kovaa reads it on your iPhone and doesn't upload it. |
| Garmin data, if you connect a Garmin (coming soon, see below) | The same as your Apple Watch data, plus sending workouts to your Garmin | On our servers and on your iPhone |
| A notification token for your iPhone | So we can wake the app quietly when new Garmin data arrives | In your account |
kovaa doesn't upload your Apple Health database. It reads what it needs on your iPhone and uploads only its own records: each workout, as kovaa stored it, and one row of overnight signals per night.
Apple Health
kovaa reads health and fitness data from Apple Health only with your permission, and writes back only the strength sessions you log and how hard each workout felt. Health data is used only to plan and adjust your training and to back up your kovaa account. It is never used for advertising or marketing, never sold, never used for data mining, and never shared with third parties except the hosting provider that stores your account, the AI provider that answers the cloud coach if you turn it on, and Garmin, which receives the heart-rate, pace and power targets in your planned workouts if you turn on workout import (see Who handles your data). It is not stored in iCloud. You can change kovaa's access at any time in Settings › Privacy & Security › Health › kovaa. The full list is on the Health data page.
Garmin Connect (coming soon)
Garmin Connect support is coming soon. This section describes how it will work. Connecting a Garmin is optional. When you connect, Garmin asks you which permissions to give kovaa:
- Activities. Garmin sends each activity you record: its summary, laps, per-second data and the original FIT file.
- Health. Garmin sends your daily and overnight data: sleep, heart rate variability, resting heart rate, Body Battery, stress, VO2 max, respiration, pulse oximetry, skin temperature, steps and body composition, depending on your device.
- Workout import. kovaa sends your planned workouts for the next four weeks to your Garmin Connect calendar, so they appear on your watch.
Garmin sends this data to our servers, and your iPhone downloads it from there. We store a sign-in token for your Garmin account in an encrypted vault on our servers. The app can't read it. We keep Garmin's original messages for 30 days so we can reprocess them if something goes wrong, then delete them. Activities and FIT files stay in your account until you delete them or delete your account. Garmin data is used only to run kovaa for you. It isn't shared with anyone else, except the AI provider if you turn on the cloud coach.
You can change the permissions on Garmin's side at any time, or disconnect in You › Devices & data › Garmin. Disconnecting removes kovaa's planned workouts from your Garmin calendar, tells Garmin to stop sending data, and deletes the sign-in token. Activities already imported stay in kovaa, because they're part of your training history. You can delete them, or your account, at any time.
What kovaa sends to Garmin
If you turn on workout import, kovaa sends your planned workouts to Garmin. Each one includes its name, date, sport, steps and targets, such as pace, heart rate or power. The targets come from your training zones. The purpose is to put your plan on your Garmin calendar and watch. kovaa's servers send the workouts through Garmin's Training API using the access you gave when you connected. You choose whether to allow this on the Garmin permission screen, and kovaa asks again before the first workout is sent. Once Garmin has the workouts, it handles them under the Privacy Policy for Garmin Connect and Compatible Garmin Devices. If you aren't allowed to upload data to your Garmin Connect account, for example because of an employer's or organization's rules, don't turn on workout import.
AI Transparency Statement
kovaa uses AI in two places, only to explain your training to you. Neither one sets your plan. Every change comes from kovaa's training rules and asks for your approval. kovaa makes no decision about you with legal or similar effect. We don't use your data, including Garmin data, to train or improve any AI model.
- On-device coach. The short coaching sentences in the app are written on your iPhone by Apple Intelligence, when it's available. It reads the day's facts kovaa has already worked out, such as your readiness, your session and recent workouts. Nothing it reads or writes is sent to us or to Apple.
- Cloud coach. kovaa may also offer a cloud coach that writes longer explanations and answers questions about your plan. It's off unless you turn it on in You › Coach. When it's on, your question and the parts of your plan, workouts and readiness needed to answer it are sent through our servers to Anthropic, which runs the AI model. Anthropic uses them only to answer, doesn't use them to train its models, and keeps them only briefly under its own terms.
Garmin data and AI. Neither coach uses data from your Garmin, or results worked out from it, until you agree. kovaa explains what each one reads and asks for your consent first. Without it, the app shows plain written explanations instead. You can withdraw your consent at any time in You › Coach, and the coaches stop using Garmin data straight away. We'll update this statement when the law, Garmin's policies or the way kovaa uses AI changes.
Who handles your data
We don't sell or rent personal data, and we don't share it for advertising. These companies process it on our behalf, only to run kovaa:
- Supabase hosts your account, its database and its files in the United States.
- Apple provides Sign in with Apple, App Store payments and the notifications that wake the app. Apple tells kovaa only whether your subscription is active. If you've chosen to share app analytics or crash reports with developers in your iPhone's settings, Apple may share anonymous diagnostics with us under Apple's privacy policy.
- Garmin (coming soon), only if you connect it, as described above.
- Anthropic, only if you turn on the cloud coach.
We give information to authorities only in response to valid legal process, such as a subpoena or court order, and we'll tell you first unless the law forbids it. If the company is sold, your data transfers under this same policy, and we'll tell you before it does.
Security
Data is encrypted in transit between your iPhone, our servers and Garmin, and encrypted at rest on our servers. Each account can read only its own data. Your session is kept in your iPhone's Keychain.
Other ways data leaves your iPhone
- When you choose to. If you export a workout or your data, or share a route or a file, it goes where you send it. Shared routes can hide the area around your home.
- To your Apple Watch. Your next seven days of workouts are scheduled in Apple's Workout app on your own Watch.
- Email. If you email us, we receive what you send and use it only to reply. We keep support emails for up to two years, then delete them.
How long we keep it
- Your account data stays as long as your account exists. When you delete something in the app, it's deleted from your account too.
- Garmin's original messages: 30 days.
- Support emails: up to two years.
- After you delete your account, copies can remain in our hosting provider's encrypted backups for up to 30 days, until those backups are replaced.
This website
kovaasport.com doesn't use cookies, advertising, analytics or tracking, and it loads nothing from other companies' servers. Our hosting provider, Vercel, processes standard request data (such as IP address and browser type) to deliver and protect the site, and keeps it briefly in server logs.
Your choices
- Export. In the app, go to You › Export all data for one ZIP with your plan and every activity as a FIT file. You can also export single workouts.
- Delete your account. You › Account › Delete account deletes your account and everything in it from our servers, disconnects Garmin if you connected it, and erases kovaa's data from your iPhone and Watch. Workouts in Apple Health stay there, because they belong to Health. Your subscription is billed by Apple and is canceled separately in your Apple Account settings.
- Garmin (coming soon). Change permissions in Garmin Connect, or disconnect in You › Devices & data › Garmin.
- Cloud coach. Turn it on or off in You › Coach.
- Health access. Turn any Apple Health permission on or off in Settings › Privacy & Security › Health › kovaa.
- Notifications. Turn them off in Settings › Notifications › kovaa.
Your rights
Depending on where you live, you may have the right to access, correct, delete or move your personal data, to object to or restrict how it's used, and to withdraw consent. You can do most of this in the app: export your data, edit your details, disconnect Garmin, turn off the cloud coach, or delete your account. For anything else, email privacy@kovaasport.com and we'll respond within 30 days. You can also complain to your local data protection authority.
If you're in the European Economic Area or the United Kingdom: we use your training details to provide the service you signed up for, and we use health data only with your explicit consent, which you give when you allow Apple Health or connect a Garmin and can withdraw at any time. Your data is stored in the United States. Transfers to our processors are covered by their standard contractual clauses. Plans are built automatically from your data, but you approve each change, so you aren't subject to automated decisions with legal or similar effect.
If you're in California: we don't sell or share personal information as the CCPA defines it, and we don't use sensitive personal information for anything other than providing kovaa.
Consumer health data
Some states, including Washington, Nevada and Connecticut, have laws about consumer health data. This section is kovaa's consumer health data privacy policy under those laws. It summarizes the rest of this page.
- What we collect. The categories in the table above: your setup answers and health screening, thresholds and zones, your plan and notes, workouts and routes, overnight signals such as sleep, heart rate variability and resting heart rate, and the readiness, training load and threshold estimates kovaa works out from them. If you connect a Garmin, the data listed under Garmin Connect.
- Where it comes from. You, Apple Health on your iPhone with your permission, and Garmin if you connect it.
- Why we use it. To build and adjust your training plan, show you your training and readiness, and back up your account. Nothing else.
- Who we share it with. Only the processors listed under Who handles your data, and Garmin if you turn on workout import. We have no affiliates. We don't sell it.
- Your rights. You can see, export, correct and delete it in the app, and ask us for a list of the third parties we've shared it with. You can withdraw consent by turning off Apple Health access, the cloud coach or Garmin. For anything else, email privacy@kovaasport.com and we'll answer within 30 days. If we refuse a request, you can appeal by replying to our answer, and you can complain to your state attorney general. We won't treat you differently for exercising these rights.
kovaa asks before it collects health data, and asks again, separately, before sharing any of it with the AI provider. Deleting your account deletes your health data from our servers and our processors, and from backups within 30 days.
Children
kovaa isn't intended for children under 16, and we don't knowingly collect information from them. If you believe a child has created an account, email us and we'll delete it.
Changes to this policy
If we change how kovaa handles data, we'll update this page and the date above, and tell you in the app before a change takes effect.
Contact
kovaa sport LLC, Arizona, United States. Email privacy@kovaasport.com.
Garmin, Garmin Connect and Body Battery are trademarks of Garmin Ltd. or its subsidiaries.