Privacy at komova.

Data we process

• Account data: your email address and, if you choose Google or Apple sign-in, the identifier provided by that provider. If you set a password, Komova stores its hash, not the plaintext password.
• Projects, items, forms, answers, entries, sources, and activity created in Komova by you or by agents connected to your account.
• When an app version includes Form attachments, the PDF files and images you choose to upload as evidence. Komova receives only selected files, not your entire library. Drafts are private; after saving the Form, authorized agents connected to your account can read the evidence.
• Technical data needed to sign in and protect the service, such as Komova sessions and activity events.
• A brief technical signature for certain unexpected app closures may be stored locally on your device. It is not sent automatically; it leaves your device only if you choose to share it.
• If you enable notifications on iOS, an installation identifier and Apple notification token used to deliver alerts. Komova asks for notification permission only when you choose to enable them.

How we use it

We use this data to manage your account, show and update your workspace, let agents you authorize do their work, and protect the service. We do not sell your data or use advertising or commercial tracking in the app.

Connected services and agents

Google or Apple are involved in sign-in only if you choose that provider. Cloudflare routes API traffic, and Railway hosts Komova's API and database. Agents you grant access to can read and update the data allowed by their connection; they may keep copies outside Komova under their own services. You can revoke their access in Komova.

Retention and deletion

We keep your account data while your account is active. Technical change history is kept for approximately 14 days while the account exists. You can delete your account and associated data in Settings → Account → Delete account, or request deletion by email without reinstalling the app. The account deletion page explains both options.

In versions with attachments, you can delete files in Settings to free space without changing the Form answer. Unsaved drafts expire after 24 hours and are cleaned up on a later attachment write. Deleting the Form, its Item, or the account removes files from the active database; infrastructure backups may retain data under the provider's policy, without a promise of immediate erasure.

External agents that already received content may keep their own copies. Contact the relevant provider about copies held in its service.

Infrastructure providers process request metadata, such as IP address, path, time, and outcome, to operate and protect the service. These technical records follow each provider's retention periods and are not erased by account deletion. The current query window is 7 days in Railway and, in Cloudflare, up to 24 hours for security events and 7 days for request analytics. These windows do not guarantee permanent erasure of every copy held by a provider.

Privacy contact

For questions about your data or help with a request, email soporte@komova.app.