meCove Start with a client, free

Privacy Policy

Version 1 · Published 21 October 2026 · Effective 21 October 2026

This is version 1. Every version of this policy stays online for good, at its own address, and the current version is always at mecove.com/privacy. Earlier versions are listed at the end of this page.

1. Who we are

meCove is an app for writing down your thoughts and reflecting on them, on your own or alongside a professional you choose to work with.

meCove is run by LETS ATTUNE PRIVATE LIMITED ("LetsAttune", "we", "us"), CIN U85499PN2026PTC260332, registered office FL-C-903, S No 41/1/1, Amrutvel, Warje Malwadi, Warje, Pune City, Pune 411058, Maharashtra, India. We decide how your personal data is used, which makes us responsible for it under Indian law.

You can write to us at hello@mecove.com.

2. The short version

  • What you write is private. Your Professional never sees your writing unless you review a Session Bridge and choose to send it.
  • We ask before we use your data, one purpose at a time, and you can turn off every purpose that is not needed to run meCove.
  • Your writing is stored in India. The AI that reads it runs on Amazon Web Services, in India or in another Amazon region outside India, or with another AI provider (§7, §8).
  • Nobody at LetsAttune reads your writing.
  • We do not sell your data, and we do not use it for advertising.
  • You can download everything you have written, and you can delete your account. When you delete, access ends at once. A locked, unreadable copy is kept for up to one year because Indian law requires it, and then it is destroyed.

3. Who this policy covers

  • Clients: people who use the meCove phone app to write, with or without a Professional.
  • Professionals: wellbeing professionals like coaches, counsellors and therapists, and other practitioners who use the meCove web app to work with Clients.
  • People who ask for an invitation without an account, and people a Professional invites who have not joined yet.
  • Visitors to mecove.com.

4. What we collect

4.1 If you use meCove as a Client

About you and your account

  • Your mobile number, checked with a code we send on WhatsApp. It is how we know who you are.
  • Your name: the one you type, or the one your Professional typed when they invited you.
  • A sign-in record for your phone, so you stay signed in.
  • A device token so we can send you notifications.
  • Your settings: how often you want reminders, the days and time, how meCove should sound, and whether you share Session Bridges automatically.
  • Your consent choices, each with the time and the exact wording you were shown.
  • A record that you accepted this policy and the Terms, with the version of each, and that you confirmed you are 18 or older.
  • Any requests you make to us about your data.

What you write, and what meCove makes from it

  • Your entries: everything you type into meCove, which we also call your reflections. In this policy the two words mean the same thing.
  • meCove's replies to your entries.
  • What meCove works out from your entries: the themes that run through your writing (Life Threads), short quotes in your own words, a simple reading of how each day went (one of three values, never a score), and a private mark when something you wrote may show you are in distress. All of this is treated exactly like your writing, because it comes from your writing.
  • Session Bridges: summaries of a period of your writing that you can review and choose to send to your Professional. A sent bridge holds the summaries and the lines of your own writing you chose to keep, each with its day.
  • Myself, Lately: your week, your Life Threads and one sentence about your week, for you only.
  • PDF copies of bridges, once made.
  • If you tell meCove it misread a message it answered with its safety message, a note of which entry and when.

What your Professional adds, if you work with one

  • The name, mobile number and (if given) email address your Professional used to invite you.
  • A focus area and action items your Professional sets, which shape the questions meCove asks you. You never see the focus area. You see your action items on their own screen, where you can mark how each is going, and on the first page of each Session Bridge.
  • Nudges: short notes your Professional sends you.
  • Your Professional's private notes about you. You never see these.
  • Your place in their list and on their seats: when you joined, when you left, when a seat was given and when it ended.

4.2 If you use meCove as a Professional

  • Your mobile number (checked by WhatsApp code), name, and your email address if you sign in with email.
  • If you sign in with Google, the identifier Google gives us and the email address on your Google account. We use them only to recognise you when you sign in again.
  • Your practice details: the type of practice, specialisation, education, certifications, experience, registration numbers for protected titles, and the document you upload to support your application.
  • Your notification settings, sign-in records, consent and acceptance records (including that you confirmed you are 18 or older), and any requests you make to us.
  • What you write about your Clients inside meCove: focus areas, action items, nudges and private notes. These are also your Clients' personal data, and we protect them as such.
  • Your seats and your list: which Clients are in it and on which seats.

4.3 If you ask for an invitation, or a Professional invites you

  • Asking for an invitation. If you tap Request an invitation before you have an account, or Connect with a Professional from your account, we keep your name, your number, and which of the two you used, nothing else. We keep it for 30 days so we can reply, and then delete it, whether or not we have replied.
  • Being invited. A Professional who invites you gives us your name, your mobile number, and optionally your email address. We use them only to send you the invitation. The invitation is sent by WhatsApp or email and names the Professional. If you do not join, your name, number and email stay in that Professional's list, marked as expired or declined, for 90 days after the invitation ends, and are then deleted.

4.4 What stays on your phone

  • If you write an entry with no signal, the app keeps it on your phone, in the phone's protected storage, until it sends. It is deleted when it sends, when you sign out, or when you delete your account. If it has not sent after seven days, it is deleted the next time you open the app.
  • While you are signing in, the app keeps your number and when the code was sent for up to ten minutes, so you do not lose your place while you read the code.
  • When you download a copy of your data, the file sits in the phone's temporary storage while the share screen is open, and is deleted when it closes.

4.5 What we do not collect, and technical records

  • We do not keep voice recordings, and meCove has no voice entry of its own. If you speak into your phone keyboard's microphone, your keyboard turns it into text before meCove sees it, and meCove receives only that text. If we ever add voice, we will ask you first and update this policy.
  • We do not take entries from WhatsApp. WhatsApp is used only to send sign-in codes and invitations.
  • We do not use analytics, advertising identifiers, or tracking tools in the app, the web app or on mecove.com.
  • We do not collect your location.

Technical records.

  • Our servers keep logs so we can run meCove safely and meet India's cyber-security rules. The logs hold identifiers, times, outcomes and error types, and may hold the network (IP) address a request came from. They never hold your writing, your number or a sign-in code.
  • Before you sign in, when a code or sign-in link is requested, we keep the network address it was requested from, with the time, for 7 days, to limit how many codes one address can ask for. It is not linked to your account.
  • We keep a record each time anyone's data is read, by you, your Professional, our staff or our systems, so we can tell you who has seen your data.

5. Why we use your data, and your consent

We use your data only for the purposes below.

For Clients, meCove asks for your consent one purpose at a time, before you write anything. Each consent is recorded with the time and the exact words you were shown.

Three purposes are needed to run meCove. Without them there is no meCove, so they cannot be turned off while you keep your account. The app shows them as facts, not switches.

  1. Keeping what you write, so you can come back to it.
  2. AI reading your entries to reply to you and to find themes, quotes and patterns. This is how meCove works, and it is not optional.
  3. Processing outside India. Some of your data leaves India so that meCove can work: the AI that reads your entries may run in an Amazon region outside India, and notifications reach your phone through Google and Apple. Every such transfer follows the rules in §8.

One purpose is your choice. It starts switched off, and you turn it on only if you want it.

  1. Sharing with your Professional. Lets you send Session Bridges to the Professional who has you on a seat. You are asked this only when there is a Professional to name, never before.

Turning a choice off is as easy as turning it on: it is one step in Settings → My privacy choices in the phone app, and never needs an email to us. When you stop sharing with your Professional, every bridge you have already sent is taken back and they can no longer open it. Your own copies stay.

Other uses we make of your data, which do not need a separate consent because they are part of giving you the service or are required by law:

  • Signing you in and keeping your account safe, including limits on how many codes can be sent, to stop abuse.
  • Sending you what you asked for: codes, invitations, reminders, notifications, and the copy of your data you requested.
  • Running seats: which Professional has you on a seat, for how long, and what that allows.
  • Checking a Professional's application, including their registration number, before they can use meCove.
  • Answering your requests and complaints.
  • Security, keeping records the law requires, and dealing with incidents.

For Professionals, you accept this policy and the Terms when you apply, and your data is used to run your account, review your application, and deliver the service.

We do not use your writing to train AI models, and we do not let any AI provider do so.

6. Who can see what

Your Professional

If you work with a Professional, they can see:

  • Session Bridges you chose to send them, and the lines of your own writing you chose to keep in them, each with its day, and only while they have you on a seat. If the seat ends, the bridges are hidden from them, not deleted, and come back if they give you a seat again. You can take back any bridge at any time.
  • Before you send a bridge, you see exactly what will go, and you can remove any quoted line. A removed line is truly left out.
  • That you wrote on a given day, for example "Wrote today" on their list, never what you wrote, and never the time of day. They can also be told if you have not written for three days. They see these only while you are on one of their seats.
  • Whether you accepted or declined their invitation, left their list, or closed your meCove account.
  • The name and number they invited you with.

Your Professional never sees your entries as you write them, your drafts, Myself, Lately, your daily readings, or anything you removed from a bridge.

Once you send a bridge, what your Professional does with what they read outside meCove is their responsibility.

LetsAttune staff

  • Nobody at LetsAttune reads your writing. Your writing is encrypted with a key unique to you, and no person on our team holds the permission to unlock it. An administrator could technically grant that permission to themselves; any such change sets off an alert.
  • Our small admin team (today, the two founders) sees what is needed to run the service: Professional applications and their documents, seats, requests to connect, and data requests.
  • To manage seats, the admin team can see which people are on a Professional's seats, by the name the Professional typed, never your account name and never your writing.
  • Every time our staff read anyone's personal data, it is recorded.

Nobody else

  • We do not publish anything anyone writes in meCove, even with permission.
  • We share data with the service providers in §7, only to run meCove, and they may not use it for anything else.
  • We share data with the government or police only when Indian law requires us to.

If you write that you are in danger

If meCove reads that you may want to harm yourself, or that someone is hurting you, it replies with fixed words and helpline numbers. It does not tell anyone: not your Professional, not the police, not us. Its fixed words say that nothing you write goes to anyone; if you tap "I understand, I'll reach out for help", meCove adds that it cannot call anyone or send help. It is not watched for emergencies.

7. Who processes data for us

We use a small number of service providers. Each one handles only what it needs.

  • Amazon Web Services, in Mumbai, India. Stores and runs everything: your account, your writing, backups, the keys that lock your data, our logs, and the emails we send (Amazon SES).
  • The AI that reads your entries runs on Amazon Web Services (Amazon Bedrock), in Mumbai or in another Amazon region, which may be outside India. When a model runs on Amazon, the company that made the model does not receive your writing. We may also use other AI providers, in India or abroad, for example OpenAI's GPT models, through Amazon or from OpenAI directly. Any provider we use is bound to use your writing only to reply to us, and never to train its models on it. Most keep nothing after replying. Some keep a message their automatic safety check flags as possible misuse, and the reply, for up to 30 days, only to check for abuse, possibly outside India. We cannot see or delete that copy.
  • Meta (WhatsApp): sends your sign-in codes, and invitations from a Professional. Meta receives your mobile number, the code, and for an invitation the Professional's name and a link.
  • Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service): deliver notifications to your phone. They receive a device identifier, the kind of notification, and a fixed line such as "a note from your Professional", never your writing, a nudge's text, or your Professional's name.
  • Google sign-in: only for Professionals who choose it on the web app.
  • Google Workspace: our email. If you write to hello@mecove.com or hello@letsattune.com, your email is held there.

These providers are not allowed to use your data for their own purposes.

The app stores (Apple App Store, Google Play) are how you download meCove. They handle your data under their own policies, not this one.

8. Where your data is stored, and when it leaves India

  • Stored in India. Your account, your writing, everything made from it, our backups and our logs are stored on Amazon's servers in Mumbai.
  • Read by AI, in India or abroad. Your entries are processed by AI models running on Amazon Web Services, in Mumbai or in another Amazon region outside India, or by another AI provider as described in §7. A message a provider's safety check flags may be kept for up to 30 days where it was processed, possibly outside India. This is the processing outside India you agree to when you join (§5, purpose 3).
  • What else leaves India, and why:
    • your mobile number, sign-in codes and invitations, through WhatsApp (Meta);
    • your device identifier and the kind of notification, through Google and Apple, to reach your phone;
    • your Google identifier and email, if you are a Professional and use Google sign-in;
    • emails you send us, held by Google Workspace.

We only send data abroad where it is needed to give you the service, to providers bound to protect it.

9. How long we keep it

We keep data only as long as its purpose needs, plus any period the law sets. Each period below is worked out from its purpose.

  • Your writing, and everything made from it: for as long as you keep your account, whether or not you have a Professional.
  • After you delete something: a locked, unreadable copy for one year from when it was processed, then it is destroyed. See §10.
  • Session Bridges and Myself, Lately: the same as your writing.
  • Your Professional's private notes about you: until they delete them, or until your data is destroyed after you delete your account.
  • Nudges you received: for as long as you keep your account, then the same one-year period as your writing.
  • Consent records and your acceptance of this policy and the Terms: for the life of your account, then the same one-year period.
  • Records of who read your data: 18 months.
  • Server logs: 180 days.
  • The network address a code was requested from, before sign-in: 7 days.
  • Backups: 14 days, then they expire.
  • Expired sign-in codes and sign-in links: 7 days.
  • A request for an invitation: 30 days, then deleted.
  • An invitation you never accepted: 90 days after it ran out, was declined or was withdrawn, then deleted.
  • An unsent entry on your phone: until it sends, or 7 days at most (deleted the next time you open the app).
  • Voice: not kept at all. meCove has no voice entry.
  • Professionals: your profile, credentials and uploaded document are kept while your account is open. If you erase your account, they are locked away for one year from the erasure and then destroyed. Your name stays visible on the records of Clients you worked with, so their history still makes sense. If your application is turned down and you do not apply again, the document you uploaded and your registration numbers are deleted 90 days after the decision. Your account stays, so you can still apply again later.
  • Records of a security incident: up to three years.
  • A message an AI provider's automatic safety check flags: the provider may keep it, and the reply, for up to 30 days to check for abuse, and then deletes it. This is the provider's period, not ours. We cannot see or delete that copy (§7, §10).

10. Deleting things

Deleting one entry. It disappears from every screen at once, and meCove never uses it again, in a bridge, in Myself, Lately or in a thread. A bridge you already sent keeps its copy; to take that back, use Stop sharing. The deleted entry is then held locked, as below. This applies to a single entry as well as to your whole account.

Deleting your account. In Settings in the phone app, you can delete your account at any time.

  • Access ends at once and cannot be restored, for you and for your Professional, including bridges you sent them.
  • Indian law requires us to keep personal data for at least one year from when it was processed, even after you delete it. So we move it into a locked store that nothing in meCove can read, and destroy it one year after each item was processed. An entry you wrote long ago is destroyed almost at once; a recent one waits.
  • When it is destroyed, the key that unlocks it is destroyed too, so any copy in a backup can never be read again. Backups themselves expire after 14 days.
  • We keep your mobile number until the locked copy is destroyed, so we could still reach you if a security incident affected it. Then it is deleted. If we ever had to tell you about a security incident, we keep your number until our record of that incident ends, three years after it.
  • We keep a short record that the deletion happened: identifiers and dates, none of your writing.
  • You can sign up again on the same number at any time. It starts fresh; nothing comes back.
  • Your Professional is told that you closed your account.

Things we cannot delete. A copy of your data you downloaded and shared, and anything your Professional wrote down outside meCove, are outside our control. Nor can we delete a message an AI provider's safety check flagged: the provider keeps it for up to 30 days and then deletes it (§7, §9).

Professionals can erase their account from Settings in the web app. It ends every seat and every place in their list; each Client on a seat is told their seat has ended. Your profile, credentials, contact details and document are removed on the one-year clock; your name stays on your former Clients' records. The screen tells you all of this before you confirm.

11. How we protect your data

  • Your writing, and everything made from it, is encrypted with a key unique to you, which is itself locked by a master key held in Amazon's key service.
  • One part of our system decides who may read what, and it records every read.
  • No person on our team holds the permission to unlock your writing, and a change to that sets off an alert.
  • Logs never contain your writing, your number or a code.
  • On your phone, anything of yours the app keeps is held in the phone's protected storage, and cannot be read once you remove the app.
  • Sign-in sessions can be ended at once: when you sign out, delete your account, or sign in again on a new phone.
  • The Professional web app keeps you signed in with one cookie that only our server can read (§16).

No system is perfectly secure. If something goes wrong, see §14.

12. Your rights, and how to use them

You have these rights over your data, as a Client or a Professional.

  • See your data. Clients can download everything they have written, as readable files and as a machine-readable file, from Settings → Download everything I've written in the phone app. It includes your place in any Professional's list and your seats. Professionals ask through Make a request. You can also ask us who has read your data.
  • Correct your data if it is wrong.
  • Delete a single entry or your whole account, as in §10.
  • Withdraw a consent: Clients, in Settings → My privacy choices in the phone app; Professionals, through Make a request.
  • Name someone to act for you if you die or cannot act yourself.
  • Complain to our Grievance Officer (§13).

How to ask. In the app or the web app, go to Settings → Make a request and choose what you want: See everything held about you · Correct something that is wrong · Erase something · Nominate someone to act for you · Raise a grievance. Or write to the Grievance Officer (§13).

We answer every request within one month. The app shows you the date your answer is due. Each request reaches our team the moment you make it.

Every answer we give you will include how to reach our Grievance Officer.

13. Grievance Officer

If you have a complaint about how we handle your data, write to our Grievance Officer:

Santosh Jahagirdar, Grievance Officer, LETS ATTUNE PRIVATE LIMITED Email: hello@letsattune.com

  • We will acknowledge your complaint and resolve it within one month of receiving it.
  • Complaints count from when they reach this address or the in-app request. If you write to us somewhere else, we will point you here.
  • From the date the DPDP Act's rights come into force (expected May 2027), if you are not satisfied you may also complain to the Data Protection Board of India.

This address is for data and privacy complaints. It is not watched for emergencies. If you are in danger, call 112. For someone to talk to, call Tele-MANAS 14416.

14. If something goes wrong

If there is a security incident that affects your data:

  • We will report it to CERT-In, India's cyber-security agency, within six hours of learning of it, as the law requires.
  • We will tell you what happened, what data it affected, and what we are doing about it, by the quickest route we have for you.

15. Who can use meCove

meCove is for people aged 18 and over. You confirm this when you sign up, and we record it. We do not knowingly hold data about anyone younger. If we learn that we do, we will delete it.

meCove is offered in India. The apps accept Indian mobile numbers only.

16. Cookies and tracking

  • mecove.com sets no cookies, uses no analytics or tracking, and loads nothing from anyone else.
  • The Professional web app uses one cookie to keep you signed in. Only our server can read it, and it is sent only to our own site. While you sign up, the web app also keeps a note in your browser, for that browser tab only, of the email or Google account you just confirmed. It is not a cookie, and it is gone when you close the tab.
  • The phone app uses no advertising identifiers and no analytics.

17. Changes to this policy

  • When we change this policy, we publish it as a new dated version. Every earlier version stays online, at its own address, for good, so you can always read exactly what you agreed to.
  • The app records which version you accepted. If a new version changes what we do with your data in a way that matters, we will ask you to accept it again before you continue.
  • If a change affects a consent, we will ask for that consent again in the app.

Earlier versions: none yet.

18. Contact

  • Anything about meCove: hello@mecove.com
  • Data and privacy complaints: the Grievance Officer, hello@letsattune.com, §13.

LETS ATTUNE PRIVATE LIMITED, FL-C-903, S No 41/1/1, Amrutvel, Warje Malwadi, Warje, Pune City, Pune 411058, Maharashtra, India · CIN U85499PN2026PTC260332