Privacy notice · Updated 8 October 2026

Your policies.
Your control.

Your policy vault is stored on your device. Optional AI and subscription payments involve sending specific information to Covera and its service providers, as described below.

Current availability. The local vault works without an AI connection. AI processing and paid checkout remain unavailable until their providers are enabled. Apple App Store and Google Play publication are still pending.

Who is responsible

Covera is operated by Nicki Price Real Estate SL, the controller for personal information received in operating Covera.

Calle Úbeda 6
03193 San Miguel de Salinas, Alicante, Spain
hello@getcovera.app

Tax ID (NIF): B21803580. Registered in the Registro Mercantil de Alicante, hoja A-197341, inscripción 1, IRUS 1000447778910.

Your local vault and backups

Policy documents, entered or extracted policy details, owned items and app preferences are saved in your browser or app storage. Covera has no automatic cloud synchronisation or household sharing. Merely saving a document locally does not upload it to Covera.

You can export a backup in Settings and import it on another device. Backup and recovery files can contain personal information and subscription credentials; keep them private. Covera does not password-protect exported backup files. Browser clearing, device loss or uninstalling can remove local data, so keep a backup you control.

Optional AI: choose before sending

When available, AI requires a paid entitlement and your explicit permission in the relevant screen. Document extraction sends the selected document and filename through Covera to Anthropic. Ask Covera sends your question, language and relevant policy details. Manual entry remains available without sending a document to AI.

Only send information you are entitled to share. Remove medical information, health details and other sensitive information before using AI; use the local manual workflow for those records. The standard AI processing arrangement has not been verified for special categories of personal data.

The Covera API processes AI requests in memory; it does not save document or question contents to its billing file or application logs. Anthropic has its own retention rules: its standard API policy generally deletes inputs and outputs within 30 days, with exceptions for certain services, safety, legal obligations or agreed terms. See Anthropic’s retention policy.

Anthropic processing is subject to its commercial terms and data processing addendum, including safeguards for applicable international transfers. Processing may take place outside the European Economic Area. EU-only processing and zero retention are not part of Covera’s current offer.

Payments, service operation and support

When checkout is enabled, Covera stores the email you enter, provider customer and subscription identifiers, checkout and subscription status, paid-period dates, update timestamps and a hash of your recovery credential. These records let us run billing, check access, recover interrupted checkouts and stop renewals.

Revolut hosts the payment page and handles payment details. Covera does not receive your complete card number or security code. Revolut’s own privacy information applies to its payment service; review it on the hosted checkout page.

Hosting providers process network information such as IP addresses and request metadata to deliver and secure the service. Covera’s application error logs record request method, route and status, rather than document contents. If you email support, we receive your message, contact details and any attachments you choose to send.

We use these data to provide requested services and support, administer the subscription contract, protect the service under our legitimate interests, and meet legal recordkeeping obligations. Optional AI transmission is based on your choice to permit it. You can stop future AI transfers by leaving that permission unselected; this does not reverse processing already performed.

Launch list and visit counts

If you join the launch list on the website, Covera stores your email address, the language you chose, the campaign tag of the link you arrived through (for example “instagram”) and the time you joined. We use it only to send Covera launch news, at most three emails, and delete the list by 31 March 2027 at the latest. We send these emails ourselves or through an email service acting on our behalf. We do not share the list or use it for advertising. The legal basis is your consent: email support to withdraw it at any time and we remove your address.

When you open the website or the web app, your browser tells Covera that a visit happened, with the campaign tag in the link if there is one. When you add your first policy in the web app, it sends one signal that a first policy was added, never the policy itself. For these counts Covera keeps only daily totals: no IP address, cookie, device identifier or browsing history is stored. The phone apps do not send them. We count visits under our legitimate interest in knowing whether our launch reaches people.

Retention and website storage

Local vault data stays on your device until you remove it or its storage is cleared. We retain billing and support records for as long as needed to operate your subscription, resolve enquiries or disputes, and fulfil applicable accounting and legal duties. We delete or minimise records when those purposes end; ask us for the retention information relevant to your records.

The app uses necessary browser storage for your vault, preferences and entitlement. The website’s fonts are served by Covera itself. The app at getcovera.app/app/ never uses analytics or advertising cookies; the optional website statistics described under “Cookies on the website” apply only to the marketing pages.

Cookies on the website

The marketing pages of getcovera.app (not the app at /app/) show a cookie banner. Nothing below is loaded until you choose “Accept all”. If you choose “Only necessary”, only the anonymous daily visit count described above runs. Your choice is stored in your browser for 12 months; change it at any time with “Cookie settings” at the bottom of every page.

Google Analytics (Google Ireland Ltd.) measures which pages are visited, from which campaign or social network, and which buttons are used (for example opening the app or joining the launch list). It sets the cookies _ga and _ga_2B20D59QC9, which last up to 2 years. Google Analytics does not log or store IP addresses; advertising features, Google signals and data sharing with Google are switched off. Google may process data in the United States under the EU–US Data Privacy Framework. See Google’s privacy policy.

Meta Pixel (Meta Platforms Ireland Ltd.) tells us whether people who saw our Instagram or Facebook posts or ads visit the website, open the app or join the launch list, and lets us show our posts again to people who visited. It sets the cookies _fbp (3 months) and, when you arrive from a Meta link, _fbc (3 months). We do not send your name, email or anything you enter in the app to Meta; automatic advanced matching is switched off. Meta is jointly responsible with us for collecting this data and may process it in the United States under the EU–US Data Privacy Framework. See Meta’s privacy policy.

The legal basis for these statistics is your consent. Choosing “Only necessary” afterwards withdraws it and removes these cookies from your browser; it does not affect measurements made before. The information is never combined with the contents of your policy vault, which stays on your device.

Delete data and exercise your rights

In Settings, “Clear all data” removes this device’s saved policies, policy documents and owned items. It does not cancel a subscription, erase exported backups or delete billing records. To remove remaining local preferences and credentials, clear the site or app storage after saving anything you need. Cancel any subscription first, or retain its recovery code so you can manage it later.

To request access, correction, erasure, restriction, portability or to object to processing of information Covera holds, email hello@getcovera.app. We may need proportionate proof of identity or ownership. Some records must be retained where the law requires it. We cannot remotely erase a vault or backup held only on your device.

You can complain to your local data protection authority or Spain’s Agencia Española de Protección de Datos. Your privacy choices do not produce an automated decision about insurance eligibility, pricing or claims: Covera does not make those decisions.

Support

Email hello@getcovera.app for app, billing, recovery or privacy help. Include the issue and device/browser version. Do not email card details, recovery secrets or complete policy documents unless we agree a suitable way to handle them.