Covenant privacy policy

Last updated: 6 October 2026

About this policy

This policy explains how Covenant collects, uses, stores, discloses and deletes personal information. It is written to meet the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who we are

Covenant is a private app for Christian couples. It is operated from Australia ("Covenant", "we", "us"). The name and ABN of the operating business will be added to this policy.

Privacy contact: 1c619foundrylabs@gmail.com

What Covenant is, and what it is not

Covenant is a tool for two adults to talk, pray, plan and remember together. It supports the communication, understanding and community a relationship depends on. It does not replace any of them.

Covenant is not therapy, counselling or medical advice. It is not an emergency service and it does not monitor anyone for danger. It does not tell anyone what God wants. If you need urgent help, see the section on safety below.

What we collect and why

We collect information in three ways: what you give us, what your use of the app creates, and what your phone sends so that the app can work.

Account information

Your email address and your account identifier, to create your account and sign you in.
The name you choose to show your partner (your display name).
Your sign-in details. You sign in with your email address.
An optional profile photo.
A record that you confirmed you are an adult, a record that you continued past the privacy summary on the About you screen, and your choice about AI processing, each with the wording version and the date.

What you write and choose in the app

Check-in words and notes. You choose up to two words for each area, and you may add a private note.
Things you raise, your private drafts, and any reflections you write.
Topics, talks and agreements you make with your partner.
Journal entries, prayers, memories, milestones and goals.
Photos you add to a memory, with any caption, description or place name you type.
Messages and requests you send to your partner in the app, such as raised topics, talk notes and time proposals.

This content can reveal your religious beliefs and information about your health and wellbeing, such as how you have been feeling. Australian privacy law treats religious beliefs and health information as sensitive information. We collect it only because you choose to enter it, and we use it only to run the app for you. When you continue past the About you screen, the app records that you continued past its privacy summary.

You decide what is private and what is shared. Each item shows who can see it.

Information from your phone

A notification token, if you allow notifications, so that we can send reminders to your phone. It is stored against your device.
The app version and phone type, which the app needs to work.
Calendar availability, if you choose to use calendars on your phone or set your availability yourself. If you use phone calendars, the app reads them on your phone to find when you are busy. It sends your busy times, the date range they cover, information about whether the calendar read succeeded and permission is available, and your preferred times. Event titles, places, attendees and notes stay on your phone. If you set availability yourself, the app sends your preferred times and the date range they cover without reading your phone calendars. When you accept a time with your partner, the app can add it to your own calendar.
Your time zone, which About you reads from your phone so that weeks and times work correctly.

Information we do not collect

Your GPS position. The app does not read your phone's location and does not ask for permission to do so. The place field on a memory is text you type if you choose to, and the app does not turn it into a map or a position.
Contacts, the details of your calendar events, or your microphone. The app lets you choose existing photos with the system photo picker and does not use your camera.
Advertising or tracking identifiers. We do not run advertising or tracking.
Behavioural analytics. The app does not record which screens you visit or how long you stay.

Crash reports

Covenant does not use a crash-reporting service in this release.

No artificial intelligence

Covenant does not use artificial intelligence to read, summarise or respond to what you write. If that changes, we will update this policy and ask for your consent before it starts.

What your partner can and cannot see

This is the most important part of the policy, so we say it plainly.

Your partner can see your display name and profile photo.
Your private drafts, journal, notes, prayers and check-in answers that you keep private are visible only to you. Your partner cannot see that they exist.
When you complete a check-in, you choose what may appear in the shared view. Your partner sees only the words or summaries you approved, and only when both of you have finished.
The app provides previews when you share relationship content. Calendar availability is shared when you enable it and can be refreshed while sharing remains enabled. Your partner can see your shared busy times. Once you share something, your partner can see it, and a copy or a screenshot they have taken cannot be recalled.
Your partner is not asked to approve, and is not told about, your decision to delete your account or to end the pairing.

Location

Covenant never reads or shares your GPS position. Two things can still say where you are, and you should know about them. A place you type into a memory is seen by anyone you share that memory with. The time zone recorded for your couple is readable by both partners' apps. We are changing the app so that a time zone is never shared with a partner, and we will update this policy when that change is released.

Photos have hidden details removed

Photos can carry hidden information, including the place where they were taken. When you add a photo, our servers remove that embedded information, including any location, from the copy that is kept and shared, and the original is then scheduled for removal. Before you share a photo, the app reminds you to check the picture itself for places, addresses or signs, because removing hidden details does not change what is visible in the image.

Who else handles your information

We use service providers who handle information on our behalf. We do not sell your information and we do not share it for advertising.

Supabase provides our database, sign-in, file storage and server functions. Your data is stored in Sydney, Australia (the Supabase ap-southeast-2 region).
Expo provides the push notification service. It receives your notification token and a neutral message. Notifications never carry what you wrote, and lock screen text is neutral unless you turn on previews.
Vercel hosts this website. The website does not collect personal information through forms.

Your app data is stored in Australia. Expo, which delivers notifications, may process your notification token and the neutral notification message in the United States.

We may disclose information where the law requires it, or where we believe on reasonable grounds that it is necessary to prevent a serious threat to someone's life, health or safety.

How long we keep information

Your own content stays until you delete it or delete your account, with one exception. A temporary draft of something you are raising is deleted after seven days without activity. Drafts you choose to keep are not.
If a couple ends, the shared records of that couple stop being available to either person straight away. We keep them inaccessible for 45 days after the couple ends and then delete them, unless the law requires us to keep them for longer. Each person keeps their own private content.
Unused invitations expire after 72 hours. Their stored details are removed seven days after that.
Notification records, which contain no relationship text, are kept for 30 days.
Diagnostic logs contain no private content and are kept for no longer than 30 days.
Security and administrative audit records contain no private content and are kept for about 90 days.
A copy of your data that you ask us to prepare can be downloaded for 24 hours. The file is then removed by a scheduled cleanup.
Backups. Our database provider may keep backups for up to 7 days. Information you delete can remain in a backup until that backup expires. We keep a small record, which contains no personal content, of accounts that were deleted, so that a restored backup does not bring a deleted account back.

Deleting your information and getting a copy

Delete your account

You can delete your account inside the app, under Settings, "Delete my account". You can request a copy of your data in Settings before deleting your account. We ask you to confirm it is you, which requires a recent sign-in. We do not ask your partner to approve, and we do not tell your partner.

When the deletion is complete, your private content, your files and your sign-in are removed, and any pairing is ended. Records you created with your partner are handled under the 45-day rule above. We keep only the minimal record needed to stop a backup restore bringing your account back.

If you cannot use the app, you can ask for deletion at getcovenant-app.com/delete-account, or by email to 1c619foundrylabs@gmail.com.

Get a copy of your data

You can ask for a copy of your own data in the app. The copy contains your own authored content, including your private check-in answers and notes that you never shared, and the items shared with you, shown separately. It does not contain your partner's private content or internal safety records. The file is available for 24 hours. Once it is on your phone, it is outside Covenant's control, so store it carefully.

Correct your information

To correct your display name or other personal information, contact us at 1c619foundrylabs@gmail.com.

Safety, and what to do in an emergency

Covenant cannot see when someone is in danger and cannot call for help for you.

In an emergency, call 000.
For family and domestic violence, sexual assault or abuse support, call 1800RESPECT on 1800 737 732, any time.
For crisis support and suicide prevention, call Lifeline on 13 11 14, any time.

Calls and web browsing can leave a history on your phone. If someone else may see your phone, plan how you will contact help before you do.

Using Covenant is never a requirement for staying in a relationship. You can end a pairing at any time without your partner's approval.

Children

Covenant is for adults. You must be at least 18 years old to create an account, and the app records that you confirmed this. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.

Security

We protect your information with encryption in transit (HTTPS), controls that limit each person to their own data and the items shared with them, and sign-in tokens held in your phone's secure storage. Private content is held in private storage with no public links. No system is completely secure, and we cannot promise that information will never be accessed without authority. If a data breach is likely to cause serious harm, we will notify the people affected and the OAIC as the Notifiable Data Breaches scheme requires.

Changes to this policy

If we make a material change, we will tell you in the app before it takes effect and, where the law requires it, ask for your consent again. The date at the top shows the current version.

Contact and complaints

To ask for access, correction or deletion, or to ask a question about this policy, contact us at 1c619foundrylabs@gmail.com. We will reply within 30 days.

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.