Privacy policy

Who we are

Covered is run by Chandler Lake, an individual, in the United States, and is for people in the United States. In this policy, "we" means that. You can reach us at privacy@covered.money.

What we collect

What you give us

• Your email address and password. We never see your password in readable form: our sign-in provider keeps only a one-way hash of it.
• Your name (optional), your household's name and time zone, and the people you invite to it. An invitation keeps the invited email address until it is accepted, revoked or expires after 7 days.
• The bills and budgets you add, and how you match, split and categorize transactions.
• Your two-step sign-in settings: the authenticator you set up, and a set of one-time recovery codes (we keep only hashes of the codes).
• Which email notifications you turn on.
• If you ask for early access on our website: your email address, and nothing else. Asking doesn't create an account.

What your bank shares through Plaid, when you connect a bank

• The bank's name and, for each checking, savings, money market or cash management account, its name, type, last four digits and balance.
• Each transaction: its date, amount, the description and merchant name your bank shows, Plaid's category for it and whether it is still pending.
• We don't ask for credit cards, loans or investments, and we don't ask for your full account numbers or for identity details such as your Social Security number or address.
• We never see or store your bank username or password. You enter them on Plaid's screen or on your bank's own website. Covered can read your accounts. It can't move money.

What we record to keep you safe

• A security log of important events on your account: signing in, changing your password, changing two-step settings, connecting or disconnecting a bank. Each entry has the time, the country and a short description of the browser, like "Chrome on Mac". You can read yours under Security in your Profile.
• Failed sign-in attempts, counted against a one-way hash of the email address, to slow down anyone guessing a password.
• Our hosting provider keeps routine server logs, which include IP addresses, for a short time to run and secure the service.

What we don't use

No advertising or analytics cookies, no trackers and no third-party scripts. The only cookies we set keep you signed in.

How we use it

• To run Covered for you: working out how far your money covers your bills, matching transactions to bills, showing your history, and sending the emails you need (sign-up confirmation, password reset, security alerts and any notifications you switch on).
• If you asked for early access: to tell you about Covered and to invite you to the beta. We don't use that list for anything else.
• To keep the service secure and to follow the law.

We don't sell your information, we don't share it for advertising, and we don't use it for anything else.

Who we share it with

Only the companies that help us run Covered, and only for that:

• Plaid connects to your bank and sends us your accounts and transactions. When you connect, Plaid's End User Privacy Policy applies to what Plaid collects. You can see and manage what Plaid holds at my.plaid.com.
• Supabase hosts our database and handles sign-in. Your data is stored in the United States.
• Vercel hosts the app, in the United States.
• Resend sends the emails, including the note we get when someone asks for early access.
• People you invite to your household. They see its accounts, balances and transactions as far as their role allows. You choose who is in your household under Members in your Profile.

We may also disclose information if the law requires it.

How long we keep it, and how to delete it

• You stay in control. In the app, under Profile, you can disconnect a bank, delete your household, or delete your account.
• When you disconnect a bank, we tell Plaid to end the connection, then delete that bank's accounts, transactions and access token. Bills those transactions had marked as paid stay paid.
• When you delete your household, its data is deleted from our database right away, after any connected banks are disconnected. Deleting your account removes you and, if you are the only member, your household too.
• Our database provider may keep backups for a short time afterward, no more than 30 days, and they are deleted on that schedule.
• Security log entries are deleted after 400 days. Failed sign-in counts are deleted within a day.
• Early-access requests are deleted after a year, or sooner if you email us and ask.
• You can also email us and ask us to delete your data. We'll reply within 30 days.
• Plaid keeps its own record of your connections under its own policy. You can delete that at my.plaid.com.

How we protect it

• Everything travels over an encrypted (HTTPS) connection, and our database provider encrypts stored data.
• Plaid access tokens are kept in an encrypted vault, and your browser never receives them.
• Your household's data is walled off from everyone else's by the database itself, not just by the app.
• You can turn on two-step sign-in with an authenticator app, and it is required before you can connect a bank. Sensitive changes ask you to sign in again first.
• We slow down repeated wrong passwords, and the security log above is yours to read.
• Access to our systems is limited to the person who runs Covered, and protected with two-step verification.

No service is perfectly secure. If you think you have found a problem, please tell us at privacy@covered.money.

Your choices and rights

You can see and change most of your information in the app, switch notifications off, disconnect banks and delete your account. You can also email us to ask for a copy of your information, to correct it or to delete it, and we'll answer within 30 days. Depending on where you live, the law may give you more rights over your information. We will honor them whether or not it requires us to.

Consent

By creating an account you agree to this policy. By connecting a bank you authorize Plaid to share the information described above with us. By asking for early access you agree that we may email you about Covered. You can take any of that back at any time by disconnecting the bank, deleting your account or emailing us.

Children

Covered is not for anyone under 18, and we don't knowingly collect information from children.

Changes to this policy

If we change this policy, we'll update the date at the top and, when the change matters, tell you by email or in the app.

Contact

Questions, requests or security reports: privacy@covered.money.