Privacy policy

Effective September 9, 2026

Cove is a meeting-notes application operated by Reef Labs. This policy explains how Cove Desktop and Cove Web collect, use, store, and share information. Contact aj@reeflabs.io with privacy questions or requests.

Information you provide

We process account details such as your name, email, password hash, and referral answer; notes, recordings, transcripts, prompts, and generated answers you choose to create; settings and cloud-sharing preferences; and feedback you submit. Service logs may contain request timing, IP addresses, and errors used to operate and troubleshoot Cove.

Google Calendar

Connecting Google Calendar is optional. Cove requests read-only access to your calendars. It retrieves your calendar list and event information to identify enabled calendars, show upcoming meetings, filter cancelled or declined events, and let you create a note from a meeting. This may include calendar and event identifiers, calendar names, event titles, times, locations, meeting links, attendee names and email addresses, and attendance status. Cove does not create, edit, or delete Google Calendar events.

The Calendar connection also supplies an account identifier and authorization tokens used to maintain access. On Desktop, the reusable Google session is encrypted using macOS secure storage and stored locally. On Web, the session is stored in your account's private server-side Google Cloud storage; tokens are not returned to the browser page.

Cove does not permanently synchronize your whole calendar into its notes database. Calendar results are retrieved for display. When you choose a meeting to create a note, its title, attendee names and email addresses, and source event reference are saved with that note until deletion. You can edit or remove saved attendees in the meeting, and filter your saved meetings by attendee. Calendar invitees are not proof of who actually attended.

AI processing and Google data

Connecting Calendar alone does not send your calendar feed to an AI provider. If you create a note using a Calendar title and use Cloud AI features for that note, its title and relevant note, transcript, or chat content may be sent to OpenAI to provide the requested answer or other feature. In Cove Web, AI features use OpenAI. On Desktop, Hybrid uses Parakeet on the Mac for transcription and OpenAI for requested chat, Flows and AI search. Local AI keeps AI processing on the Mac when installed and selected; Cloud AI uses OpenAI for transcription and text. Cove asks before cloud sharing unless you choose Always allow; you can reset that choice in Settings. Reef pays for cloud AI and records per-account usage metadata and estimated costs without storing prompt or answer content in the usage ledger.

Reef Labs does not use Google user data to develop, improve, or train generalized AI or machine-learning models. Google data is used only to provide the user-facing Calendar and meeting features described here. Cove's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and service providers

Desktop meeting content is stored in Cove's local vault on your Mac. Account, entitlement, and update services communicate with Reef Labs' hosted service. Web account content is stored in Google Cloud. Cloud AI content is sent to OpenAI for processing and is subject to its API data-handling practices. Support and feedback you submit may be processed through our email and internal support systems.

We use service providers only as needed to host, secure, operate, and support Cove or provide a feature you request. We do not sell Google user data, use it for advertising, or transfer it to data brokers. Human access to Google data is limited to your consent for specific support, necessary security investigations, applicable legal obligations, or other uses permitted by Google's Limited Use requirements.

Retention, disconnection, and deletion

Authorization tokens are retained while your Calendar connection is active. Disconnecting Calendar in Settings removes Cove's stored connection and attempts to revoke access at Google. You can also revoke Cove in your Google Account connections. Revoking access does not delete meeting titles, attendees, or source event references you previously chose to save in Cove.

Delete individual meetings in Cove to remove their saved notes, transcripts, attendees, and source event references. To request hosted-account deletion, email aj@reeflabs.io from your account email. Hosted-account deletion removes account-associated content and stored Calendar connections. It does not remotely erase Desktop files: disconnect Calendar and remove local Cove data on each Mac separately. Operational logs and provider backups may remain according to their retention cycles or legal requirements; deleted information is not intentionally restored to active use.

Security and your choices

Cove uses authenticated account access, encrypted network connections for hosted services, and protected storage appropriate to each runtime. No system is completely secure. You can use Cove without Calendar, disconnect it, choose supported Local AI on Desktop, or contact support to access, correct, or delete account information.

Policy updates

We will post changes on this page with a revised effective date and provide additional notice when required. Material new uses of Google data will require appropriate disclosure and consent.