Privacy Policy
Copper ("Copper", "we", "us") is an envelope budgeting app operated by SUPERNIGHT, LLC, an Oklahoma limited liability company. This policy explains what we collect when you use the Copper mobile app, how we use it, and the choices you have. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
What we collect
Information you give us
- Account details: your email address and password (stored only as a secure hash by our authentication provider), and your name if you add one.
- Optional profile details: phone number and location, only if you enter them in Personal Details.
- Budget data you create: budgets, buckets, bills, funding schedules, auto-assign rules, notes, transaction names and categories you edit, and images you choose for a budget.
Information from your bank, through Plaid
If you connect a bank, we use Plaid Inc. ("Plaid") to connect to your financial institution. With your permission, Plaid shares with us:
- account names, types, masked account numbers (last four digits) and balances;
- transactions, including amount, date, merchant name, category and whether they're pending;
- for credit cards and loans, statement and payment details (such as statement balance, minimum payment and due date);
- recurring payment patterns Plaid detects, used to suggest bills.
We never see or store your bank username or password; you enter those directly with Plaid. Plaid's handling of your data is described in the Plaid End User Privacy Policy. Plaid gives us an access token for your connection, which we keep encrypted on our servers and never send to your phone.
Information from your device
- Push notification token and device name, only if you turn on notifications, so we can send transaction and funding alerts.
- Settings stored on your device, such as appearance, and your app PIN (stored only as a hash on the device). Face ID / Touch ID is handled by your device; we never receive biometric data.
We don't use advertising identifiers, third-party analytics or tracking SDKs.
How we use it
- To run Copper: sync your accounts, calculate your Left-to-Spend, move money between buckets, fund schedules, apply your rules and round-ups, and show trends.
- To send notifications you've turned on.
- To keep the service secure, prevent abuse and fix problems.
- To communicate with you about your account, such as password resets and important changes to Copper or this policy.
We don't sell or rent your personal information, and we don't share it for advertising.
Who we share it with
We share data only with service providers that help us run Copper, under agreements that limit their use to providing their service to us:
- Plaid, to connect your financial accounts;
- Supabase, which hosts our database, authentication and server functions;
- Railway, which hosts the service that talks to Plaid;
- Expo (and Apple Push Notification service), to deliver push notifications;
- logo.dev, which receives merchant website names (such as "starbucks.com") to show merchant logos. We don't send your personal or account information to it.
If you share a budget with someone, they can see that budget's data. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.
Security
Data is encrypted in transit (TLS). Bank access tokens are encrypted at rest with AES-256-GCM and are only used by our servers. Database access is restricted per user and per budget. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects you.
Retention and deletion
We keep your data while your account is open. You can delete your account at any time in the app under Settings → Delete Account. That disconnects every linked bank at Plaid and permanently deletes your budgets, buckets, transactions, uploaded images and profile. Removing a single bank in Settings → Connected Accounts disconnects it at Plaid and stops future syncing. Backups roll off within a limited period after deletion.
Your choices and rights
- View and edit your information in the app, and turn notifications off at any time.
- Disconnect a bank, or delete your account and data, from Settings.
- Depending on where you live (for example California or the European Economic Area), you may have rights to access, correct, delete or port your data, or to object to certain processing. Contact us to exercise them; we won't discriminate against you for doing so.
Children
Copper isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.
Changes
We'll post updates here and change the effective date. If a change is significant, we'll tell you in the app or by email before it takes effect.
Contact
SUPERNIGHT, LLC — Oklahoma, USA
Email: PLACEHOLDER — support email coming soon