Privacy Policy

When you create a Kovu account and use the Service, we collect:

• Account information: your name, email address, and a hashed version of your password.
• Server registration data: the names you assign to your servers, their optional URLs, claim tokens, and last-seen timestamps.
• Profile data: the cloud profiles you create, including names, avatar selections, content tier, and a hashed PIN if you set one.
• Usage data: basic logs such as request timestamps and IP addresses, used for security and debugging.

Kovu does not scan, index, or transmit the contents of your media library. Your media files remain on your own servers.

We use your information to:

• Operate, maintain, and secure your Kovu account;
• Authenticate sign-ins and verify server registrations;
• Communicate with you about service updates, security, and billing;
• Improve the Service through aggregate analytics;
• Comply with legal obligations.

We do not sell your personal information. We do not use your data for advertising profiles.

Account data is stored in Neon Postgres, hosted in the United States. The Kovu web application is hosted on Vercel, also in the United States. Database connections are encrypted in transit using TLS.

Passwords and PINs are stored as bcrypt hashes. We never store plaintext credentials.

Kovu uses a single HTTP-only authentication cookie (kovu_token) to keep you signed in. We do not use third-party tracking cookies, advertising pixels, or analytics fingerprinting.

We rely on the following service providers to operate Kovu:

• Vercel for application hosting.
• Neon for managed Postgres database hosting.

These providers process data on our behalf under their respective privacy and security commitments. We do not share your information with any other third parties except as required by law.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information. To exercise these rights, contact us at privacy@kovu.tv. You can also delete your Kovu account at any time from your account settings, which will permanently remove your account, servers, and profiles from our systems.

For users in the European Economic Area, we process personal data on the legal bases of contract performance (operating your account) and legitimate interest (security and service improvement). For California residents, we honor CCPA rights to know, delete, and opt out of any sale of personal data; we do not sell personal data.

Kovu is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it promptly. Parents or guardians who believe their child has provided us with personal information may contact us.

We may update this Privacy Policy from time to time. We will post the updated version here and update the effective date above. Material changes will be communicated by email when reasonable.

Questions or requests? Contact us at privacy@kovu.tv.

Leonenko Group LLC
New York, USA