Privacy Policy

Account. Your email address, and — if you sign in with Google — the name and profile info Google returns. We store which provider you used.

Profile. Gender, age, country and timezone. Gender, age and country decide who you can be matched with, which is why they lock once your profile is complete. Timezone is used only for time-of-day badges. We do not collect a nickname or display name.

Preferences. Your matching filters, languages, interests and chat mode.

Approximate location. During setup we ask an IP-based geolocation service for the country associated with your IP address, so we can pre-fill country. We store the country you confirm, not a live feed of your IP.

Usage. Records of matches — who was paired, when it started and ended, and the chat mode. Each match also keeps a snapshot of the age, gender and country each side was shown, so a report made afterwards can be understood. Your token balance, subscription status, challenge progress and badges.

Reports. If you report someone, we store who reported whom, the category, any details you chose to add, and which conversation it related to.

We don't record or store your conversations. Audio travels directly between you and the other person wherever the network allows, and we don't keep a copy. Text messages in a conversation are relayed live and not stored after it ends.

We don't ask for your real name, we don't use profile photos, and we don't store your payment card details — those go to Paddle, never to us.

We process your account, profile and preferences to perform our contract with you — without them there is no matching. We process match records, reports and moderation data under our legitimate interest in keeping people safe on an anonymous service. We process payment records to meet our legal obligations.

Other users see only your age and country by default — Plus accounts also show gender to a match. Never your nickname (Covo does not use nicknames) or your email.

Our database, authentication and real-time infrastructure run on a managed cloud provider. Paddle processes payments as merchant of record. Google is involved only if you choose Google sign-in. An IP-based geolocation service returns an approximate country from your IP during setup.

A network relay provider carries the calls that need it. Your browser normally connects straight to the other person, but on networks that block that — strict company firewalls, some mobile carriers — the audio is routed through that relay instead. It stays encrypted the whole way and the relay cannot listen to it; what the relay does see is both people's IP addresses and how much traffic passed.

We don't sell your data, and we don't use it for advertising.

Our database and authentication run in the EU (Ireland) region, so your account, profile and match data stays in the European Economic Area.

Some things do leave it. Paddle processes payments and operates outside the EEA. If you use Google sign-in, Google processes that sign-in on its own infrastructure. Our network relay provider operates on a global network, so a relayed call may pass through a location near either participant. Each is covered by the European Commission's standard contractual clauses or an equivalent adequacy decision.

Account, profile, preferences, badges and challenge progress — until you delete your account, then removed immediately.

Match records — 12 months. They're what lets us investigate a report about a specific conversation after the fact.

Reports and moderation decisions — 24 months, or longer where an account is banned and we need the record to enforce it.

Payment and order records — as long as tax and accounting law requires, typically 7 years. These survive account deletion because we aren't permitted to delete them.

Covo stores a sign-in token and your preferences on your own device (browser storage, not advertising cookies). That's what keeps you signed in between visits, and it's strictly necessary for the service to work — so it doesn't require consent, and there's no cookie banner. A checkout you leave unfinished may also sit in session storage until you resume or cancel it.

We don't use advertising cookies, analytics cookies, or third-party trackers. Clearing your browser storage signs you out.

Who you're paired with is decided automatically, using your gender, age, country, language and the filters both sides chose. It affects who you talk to and nothing else — it produces no legal or similarly significant effect, and there's no profiling of you for any other purpose.

If a breach occurs that is likely to risk your rights and freedoms, we'll notify the relevant supervisory authority within 72 hours of becoming aware of it, and tell you directly where the risk to you is high.

Depending on where you live, you can request access to your data, correction, deletion, a portable copy, restriction of processing, or object to processing we base on legitimate interest. Where we rely on your consent for anything, you can withdraw it at any time without affecting what we did before you withdrew it.

We'll respond within one month. We won't charge you for it, and we won't treat you differently for asking.

Access is built in: download a copy of your data from your profile at any time. Deletion is built in: deleting your account from your profile removes your account and the data attached to it. It cannot be undone.

For anything else, email support@covo.chat. If you're in the EU or UK and you're not satisfied with our response, you may complain to your local data protection authority.

Data is encrypted in transit. Access to your rows is restricted at the database level so one account cannot read another's. Balances, entitlements and identity fields are written only by our servers, never by the app on your device.

Covo is strictly 18+. We don't knowingly collect data from anyone under 18. If you believe a minor is using Covo, report the account and we will remove it.

We'll post any update here and change the date above. Material changes will be announced in the app before they take effect.

The data controller is Hossam Foad, an individual (sole trader) in Egypt.

If you are in Egypt, you also have rights under Egypt's Personal Data Protection Law (Law No. 151 of 2020) and its executive regulations.

Privacy questions: support@covo.chat.