CoverMsg Privacy Supplement

CoverMsg is a product owned and operated by Emerald Arbor, LLC. This supplement describes the privacy practices specific to CoverMsg and the covermsg.com website. It is a product-specific supplement to, and part of, the Emerald Arbor Privacy Policy and legal framework.

Last updated: 22 July 2026

How this supplement fits the Emerald Arbor framework

CoverMsg is a covered product under the Emerald Arbor legal framework described on the Covered Products & Services page. The general Privacy Policy, Cookie Policy, Terms of Use, Payment Processing & Billing, Third-Party Services, AI Transparency, Data Rights, and Security pages all apply to CoverMsg.

This supplement adds details specific to CoverMsg. Consistent with the framework's "Product-Specific Terms" provision, this supplement supplements the general policies; where it is more specific or more protective than a general policy, it controls for CoverMsg to the extent of any conflict. In particular, the general Privacy Policy reserves the ability to collect certain automatic information (such as IP address, device data, and analytics) across covered products. For the CoverMsg application, the list under "What the application is designed to collect and keep" below is exhaustive, and CoverMsg does not collect the broader categories the general policy permits, except as stated here for the covermsg.com website.

Two kinds of message, handled differently

CoverMsg carries two things, treated differently:

The cover message — the ordinary, visible message in a conversation.
The hidden message — an optional, one-time message sealed inside a cover message, revealed once and then destroyed.

Both are sealed on your device before they are sent, using public-key encryption, so that only the intended recipient's device can open them. Our servers relay sealed data they cannot read.

The CoverMsg website (covermsg.com)

This section covers the marketing and early-access website, which is live now. When you join the early-access list, we collect and process:

Your email address, to send you early-access and launch updates. It is used for that purpose only and is never sold, shared for others' marketing, or shown to other users.
Your answers to the three optional early-access questions (who you would use CoverMsg with, how often, and a fair price), which help us understand demand. These are not used to identify you.
Analytics from the Meta pixel, but only if you accept cookies. See "Cookies and the Meta pixel" below.

We use Web3Forms to deliver early-access submissions to us, and Meta for advertising measurement (only with your consent). These providers process this information on our behalf, within the categories of providers described on the Third-Party Services & Providers page. Emerald Arbor remains responsible for the customer relationship.

Cookies and the Meta pixel

The CoverMsg website uses one non-essential technology: the Meta pixel, which measures whether our advertising reaches the right people and records when someone joins the early-access list. Consistent with the Cookie Policy, the pixel does not load until you accept cookies in the banner shown on your first visit. Declining is presented as clearly as accepting; if you decline, the pixel never loads and the website works exactly the same. You can change your choice at any time using "Cookie Settings" in the website footer, and we honor a recognized Global Privacy Control signal where it legally applies.

The Meta pixel is used only on the marketing website. It is not, and will not be, present inside the CoverMsg application.

The CoverMsg application (at launch)

CoverMsg is in development. The application is designed so that the following are true. As the product is built and released, this supplement will be updated to reflect exactly what the shipped application does; we will not describe the application here as doing something it does not do.

CoverMsg is designed so that the readable content of your messages never exists in a form we can access. Messages are sealed on your device using established, publicly available cryptographic libraries, with keys generated on your device that we never hold — and no artificial intelligence ever reads or alters them.

What the application is designed to collect and keep

The complete list of what CoverMsg is designed to hold about an account:

Account codea numeric identifier used to route messages

Screen namea display name you choose

Email addressfor sign-in and account recovery; never shown to other users

Public keyused to seal messages to you; opens nothing on its own

Contact linkswhich account codes are connected to yours; your private nicknames stay on your device

Plan statuswhether your subscription is active

Message counteran aggregate count, to apply plan limits

What the application is designed not to keep

The content of your messages. Cover and hidden messages are sealed on your device before they leave it. We do not hold the keys to open them.
A history of your conversations. Cover conversations are stored only on the two participants' devices. Our servers do not archive, back up, or sync conversation history.
Delivered messages. A sealed message waits on our server only until the recipient's device collects it, then it is deleted. An unopened sealed message is deleted after 7 days.
Hidden messages after reading. A hidden message is revealed once and then destroyed on the device. It is never stored on our servers in readable form and does not persist after delivery.
A phone number. CoverMsg does not ask for one.
Any advertising profile. CoverMsg is funded by subscriptions, not advertising. There is no ad profile, and no readable content from which one could be built.

Because a sealed message must travel to its recipient, it passes through our server as unreadable, encrypted data while it is in transit — for as little as a moment, and at most 7 days if undelivered. "We keep nothing readable" means exactly that: what passes through is sealed, and it is deleted on delivery.

No artificial intelligence in the application

CoverMsg does not use artificial intelligence. It has no AI-assisted features. No AI reads, interprets, edits, filters, summarizes, or processes your messages at any point — your words are sealed on your device exactly as you wrote them, by deterministic cryptography, and nothing interprets them before, during, or after.

This is deliberate. A message that must be provably unaltered and unread cannot pass through a system that interprets it. By having no AI in the message path, there is nothing that could change your message, and nothing that could share its contents — because no such component exists.

As with most modern software, AI-based tools were used by our team while writing CoverMsg's code. Those development tools operate on source code, never on your messages, which are sealed on your device and never exist in a form such tools could receive. Emerald Arbor's general approach to AI-assisted features — which CoverMsg does not have — is described on the AI Transparency page.

What CoverMsg does not protect against

We would rather tell you the limits plainly than let you discover them. CoverMsg is built to make a specific set of promises absolute, and it does not claim more than that.

Losing your device means losing your history. Conversations are stored only on your own device. We keep no copy, and we cannot restore or recover your messages if your device is lost, replaced, reset, or damaged. This is the direct cost of keeping no archive. We plan to offer an encrypted export file that you create, keep, and control — but even then, the file will be yours alone, and we will not hold a copy or know whether one exists.
A recipient can capture what they were shown. Someone who receives a hidden message can photograph the screen with another device, and on some platforms may be able to take a screenshot. No application can prevent a camera pointed at a screen. CoverMsg protects the record — nothing readable persists anywhere — but it cannot control the intentions of the person you chose to trust.
Someone watching while you reveal a message will see it. Concealment protects a conversation at rest: nothing on the screen marks a hidden message until you press and hold. It does not make the revealed text invisible to someone looking over your shoulder at that moment.
A compromised device is beyond our reach. If someone has your unlocked device, or it is infected with malware, data on that device may be accessible to them. This is true of every application on every phone.
Routing information exists while a message is in transit. To deliver a sealed message, our server necessarily knows which account code sent it, which is to receive it, and when. These codes are pseudonymous and are not linked to a conversation's contents, which we cannot read.

Payments and billing

When CoverMsg offers paid plans, billing will be handled by Paddle as Merchant of Record, consistent with the Payment Processing & Billing Policy. Paddle is the legal seller for the payment transaction and processes billing information under its own privacy policy. Emerald Arbor receives only limited transaction information — such as purchaser email, billing country, amount, transaction identifier, and subscription status — and does not receive or store complete payment-card numbers. Paddle manages the transaction; Emerald Arbor manages the relationship.

Third-party providers

CoverMsg relies on a small set of providers to operate: Web3Forms (early-access form delivery), Meta (advertising measurement, with consent), Paddle (billing, at launch), and hosting and email-delivery providers. Each processes information only as needed to provide its service to us, within the categories described on the Third-Party Services & Providers page.

Your rights and choices

You may exercise the rights described on the Data Rights page — including access, correction, deletion, portability, withdrawing consent, and opting out of activities defined as sale, sharing, or targeted advertising. To make a request, email privacy@emeraldarborllc.com. You can unsubscribe from our emails at any time using the link in any message, and change cookie choices using "Cookie Settings" on the website. Because CoverMsg is designed not to retain message content or conversation history, some data simply does not exist for us to produce — we will always tell you plainly what we do and do not hold.

Children

Consistent with the general Privacy Policy, CoverMsg is not directed to children under 13 and we do not knowingly collect their personal information without legally valid authorization. CoverMsg is intended for users who meet the minimum age required by the law of their location to consent to processing of their personal information.

Changes to this supplement

As CoverMsg moves from early access to a released application, we will update this supplement so it always describes what the product actually does. Material changes will be noted by updating the date above and, where appropriate, by notice to registered users.

Contact

Emerald Arbor, LLC — 7901 4th St N #22704, St. Petersburg, FL 33702, USA. Privacy questions and data-rights requests: privacy@emeraldarborllc.com. General questions and support: contact@emeraldarborllc.com.