Privacy Policy.

Who this notice covers

This notice describes how Cove processes personal information when you browse its site, create an account, read or listen, save content, purchase an item where supported, or contact us. Cove operates the reading service described here. Specific service providers may process information on Cove's behalf.

Information we collect

• Account and security: email, username, display name, identity-provider account identifier, account preferences, verification status, session and security events, devices, and optional authenticator or passkey metadata. Password credentials are processed by the configured authentication provider, rather than saved in Cove's reading database.
• Your reading life: personal libraries and shelves, ebook or audio positions, reading and listening sessions, goals and statistics, bookmarks, highlighted passages, private notes, saved definitions, ratings, wishlists, and custom uploads.
• Shopping and community: where enabled, orders, entitlements, subscription state, billing summaries (such as card brand and last four digits), reviews, follows, discussions, and content you choose to publish. Payment processors handle full card credentials.
• Technical information: requests, device or browser information, approximate location inferred from country/IP, security logs, errors, and cookies needed for authentication and preferences.
• Contact requests: the reply address and details you send through our privacy and legal contact form.

How we use information

We process information to create and secure accounts, provide digital content and purchases, synchronize personal libraries and reading positions, save requested highlights and notes, generate reading statistics, support customer requests, prevent abuse and fraud, comply with legal obligations, and improve reliability. Where enabled, recommendations may use reading and storefront interactions; account controls let you manage personalization preferences.

Providers and disclosures

Cove's architecture uses or may use infrastructure and identity services such as Cloudflare (database, files, edge requests, hosted speech recognition), Vercel (website and server execution), Supabase (account authentication when configured), payment providers (when checkout is enabled), email-delivery services, and public content catalogs. These services process information relevant to their functions. We may disclose information when legally required, for fraud and security response, or as part of a properly managed business transition. Community posts, reviews, and deliberately shared library items can be visible to others.

Cove does not intentionally make private reading notes or individual library histories available to advertisers. The site may load necessary third-party resources such as fonts, and those providers may receive browser connection data. Advertising or optional analytics integrations, if introduced, require updated disclosures and relevant choices.

Cookies, personalization, and automated features

Authentication cookies maintain your signed-in session; local device storage can hold reader settings or offline downloads. Operational logs help diagnose problems. You can control personalized recommendations, search personalization, and reading-activity personalization in your account settings, where available. BioSync uses automated speech recognition and EPUB text matching to prepare verified word-to-audio timing; it is not intended to profile people or use private reader notes as transcription prompts.

Retention and security

We keep account and personal-reading records while your account is active or as needed to provide features you request. Deletion requests may be subject to lawful retention, dispute, payment, abuse-prevention, or backup obligations. Operational and contact-request records are retained only as necessary for the purposes described. We use access controls, secure transport, and account verification, but no transmission or storage system is completely risk-free.

Your choices and privacy rights

Where available, you may edit profile information, export your account data, change privacy and marketing preferences, manage sessions or devices, and request deletion from My account. The private reading room also provides ways to delete individual highlights, definitions, and library items. You can submit access, correction, deletion, or privacy-choice requests without an account using the form below. We may need to verify your identity before acting, and some rights vary by location and legal exceptions.

We will not treat you adversely for exercising applicable privacy rights. If applicable law grants an appeal, restriction, objection, portability, or regulator-complaint right, you may exercise it through the appropriate channel. See the Terms for information about public contributions and licensed materials.

Children and international users

Cove does not knowingly permit accounts for children under 13. Please contact us if you believe a child's information was collected. Content licensing and privacy protections vary by jurisdiction; certain international transfers may occur where infrastructure providers operate. We handle requests under applicable law.

Changes to this policy

When we change our data practices materially, we will update this notice and provide notice where required before new purposes apply. Please check the effective date.

Contact us

Send privacy-rights requests, data questions, and legal inquiries through this form, including if you cannot sign into your account. Keep the reference number you receive. We may request additional proof before disclosing or changing account information.