Privacy Policy
This policy explains what Covevi Labs collects, why it is used, where it is processed, and the choices available to you when you use the 1Anchor website or participate in pre-release app testing.
The short version
Covevi Labs does not sell personal information or use it for third-party targeted advertising. The public website collects only what is needed to operate securely, answer support requests, and send updates you request.
The app is designed to keep household content local-first and synchronized through the household’s Apple iCloud and CloudKit environment. 1Anchor services may still process limited account, invitation, security, and operational information needed to provide and test the service.
This policy applies to 1anchor.app, 1Anchor update communications, support interactions, invitation-help pages, and pre-release versions of the 1Anchor app and related services made available by Covevi Labs. The app is in active development. If a future feature uses information in a materially different way, Covevi Labs will update this policy and provide any additional notice or consent that is required.
When you visit the website, Cloudflare processes connection, request, device, browser, performance, and security information needed to deliver and protect the site. This can include an IP address, requested URL, referring page, timestamps, browser or device characteristics, and abuse-prevention signals. 1Anchor uses Cloudflare Web Analytics for aggregate website performance and traffic measurement.
If you join the 1Anchor updates list, Covevi Labs stores your email address and signup date in a minimal Cloudflare D1 ledger. Resend also processes your email address, delivery status, and unsubscribe status so Covevi Labs can send the updates you requested and honor your preferences.
If you contact Covevi Labs about 1Anchor, we receive the email address, message, attachments, and technical or account details you choose to provide. Please do not email sensitive household content unless it is necessary to resolve your request.
Depending on the app features you use, 1Anchor may process an Apple account identifier, 1Anchor account status, opaque invitation and household identifiers, household membership and authorization records, and device or diagnostic information. Information you or an authorized household member add may include names, relationship labels, schedules, events, tasks, activities, school or learning context, preferences, documents or document metadata, and other household details.
1Anchor requests access to Apple services such as calendars only when you choose a feature that needs that access and grant the corresponding system permission. Selected calendar information may be read to provide connected scheduling features. You can change that permission in your Apple device settings.
Covevi Labs uses information to operate and secure the website and app; authenticate users; deliver invitations and household sharing; synchronize and present household information; provide features you request; answer support questions; send requested product updates; detect fraud, abuse, and service failures; improve reliability; and comply with applicable law.
Covevi Labs does not use household content to build advertising profiles. If 1Anchor introduces a feature that sends private household content to a hosted intelligence provider, it will be identified separately and will require an appropriate disclosure and consent before that transfer occurs.
1Anchor’s commercial architecture is local-first. Household content is designed to be stored on participating devices and synchronized through customer-controlled Apple iCloud and private or shared CloudKit storage. Household members can access shared information according to 1Anchor authorization and Apple sharing controls. Personal information remains private unless it is deliberately shared.
During development and testing, Covevi Labs may operate compatibility services that process limited account, invitation, membership, or operational records. These services are not intended to become the canonical commercial household-content database. Support and diagnostics are designed to rely on service metadata and information a user deliberately provides, rather than routine access to private household content.
Covevi Labs shares information only as needed with providers that help operate the service, under their applicable contracts and privacy commitments:
Covevi Labs may also disclose information when reasonably necessary to comply with law, protect people or the service, investigate abuse, or complete a merger, financing, acquisition, reorganization, or sale of assets. If ownership changes, this policy continues to apply to transferred personal information unless you receive notice of a change.
Covevi Labs does not sell personal information. Covevi Labs does not share personal information for cross-context behavioral advertising and does not use third-party advertising networks on the website or in the pre-release app.
Covevi Labs retains information only for as long as reasonably needed for the purposes described here, including operation, security, recovery, support, legal compliance, and dispute resolution.
Deletion from active systems may not immediately remove information from encrypted backups, security records, or systems controlled by another provider. Covevi Labs will isolate or delete retained copies when reasonably practicable and legally permitted.
Depending on where you live, privacy law may provide additional rights. Covevi Labs may need to verify your identity and authority over a household before completing a request. It cannot directly delete information controlled only by another household member, your Apple account, or another provider, but will explain the available controls.
1Anchor is designed for household use, which can include information about children that a parent, guardian, or authorized household organizer provides and manages. The public website is not intended for a child under 13 to independently create an account or submit personal information. If you believe a child submitted information directly without appropriate involvement, contact Covevi Labs so it can be reviewed and, where appropriate, removed.
Covevi Labs uses administrative, technical, and organizational safeguards intended to protect information. Current measures include encrypted HTTPS connections, Cloudflare network protections, private Apple sharing structures, scoped permissions, security headers, and restricted operational access. No storage or transmission method is completely secure, so Covevi Labs cannot guarantee absolute security.
Covevi Labs and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from your home country. Covevi Labs uses its providers subject to their applicable data-protection commitments.
Covevi Labs may update this policy as the product and legal requirements evolve. The effective date will change when a revision is published. If a change materially affects how Covevi Labs handles information, Covevi Labs will provide additional notice when appropriate.
Questions, privacy requests, and deletion requests may be sent to support@covevi.app. Please use the subject “1Anchor privacy request” and avoid including unnecessary household details in your first message.
Design principles behind the policy
These principles guide implementation. The policy above states 1Anchor’s current commitments.
Architecture starts by asking what 1Anchor actually needs and where it should live. The goal is to minimize unnecessary collection and centralized storage.
Trusted membership, explicit invitations, scoped authorization, and private sharing are designed around a household—not public profiles or open links.
Customer-controlled iCloud and CloudKit are the intended synchronization boundary for household content. 1Anchor does not imply Apple sponsorship or endorsement.
On-device intelligence is preferred where practical. 1Anchor distinguishes local processing from any feature that requires a service or outside provider.
1Anchor will not call itself “zero knowledge,” “100% on-device,” or make other absolute promises that its product architecture and operations cannot support.