Copper ("Copper", "we", "us") is an envelope budgeting app operated by SUPERNIGHT, LLC, an Oklahoma limited liability company. This policy explains what we collect when you use the Copper mobile app, how we use it, and the choices you have. We don't sell your data, we don't show ads, and we don't track you across other apps or websites.
What we collect
Information you give us
- Account details: your email address and password (stored only as a secure hash by our authentication provider), and your name if you add one. If you sign in with Apple or Google, we receive the email address and name they share with us, not your Apple or Google password.
- Optional profile details: a phone number, only if you enter it in Personal Details.
- Budget data you create: budgets, buckets, bills, funding schedules, rules, notes, transaction names and categories you edit, and images you choose for a budget.
- Questions you ask Penny, Copper's in-app assistant. Answers are worked out on your device. To understand a question, its text (and the question before it, with short notes of what the conversation has been about) is sent with the names it might be about (your category and bucket names, store names matching a word you typed, and stores the conversation has been about). Your amounts, balances and purchase history aren't sent to answer them. We don't store your questions as you typed them: to check that Penny reads questions correctly, we keep a copy with store, category and bucket names and dollar amounts removed (so "How much did I spend at [store] in June?"), how Penny read it, and any thumbs up or down you give an answer, with any note you add to it.
- Feedback you send: your message and any screenshot you attach, with your app version, device model or browser, operating system, the screen you sent it from and the budget you had open. Only the Copper team sees it, and it's deleted with your account. If you answer one of our occasional in-app questions (for example, how connecting your bank went), we keep your answer with your account ID in PostHog.
- Subscription details: which plan you have and its status. Payment is handled by Apple (iPhone) or Google Play (Android); we never receive your card details.
Information from your bank, through Plaid
If you connect a bank, we use Plaid Inc. ("Plaid") to connect to your financial institution. With your permission, Plaid shares with us:
- account names, types, masked account numbers (last four digits) and balances;
- transactions, including amount, date, merchant name, category and whether they're pending;
- for credit cards and loans, statement and payment details (such as statement balance, minimum payment and due date);
- recurring payment patterns Plaid detects, used to suggest bills.
We never see or store your bank username or password; you enter those directly with Plaid. Plaid's handling of your data is described in the Plaid End User Privacy Policy. Plaid gives us an access token for your connection, which we keep encrypted on our servers and never send to your phone.
Information from your device
- Push notification token and device name, only if you turn on notifications, so we can send transaction and funding alerts.
- Settings stored on your device, such as appearance, and your app PIN (stored only as a hash on the device). Face ID / Touch ID is handled by your device; we never receive biometric data.
Usage and diagnostics
- How you use Copper: which screens you open and which features you use (for example, that you created a bucket or connected a bank), with your app version, device model, operating system and approximate location from your IP address.
- Crash and error reports: what went wrong in the app or on our servers, so we can fix it.
These are linked to your Copper account ID, not your name or email, and never include amounts, balances, or the names of your stores, accounts, buckets or categories. We don't record your screen or what you type. We don't use advertising identifiers, and we don't track you across other companies' apps or websites.
How we use it
- To run Copper: sync your accounts, calculate your Left-to-Spend, move money between buckets, fund schedules, apply your rules and round-ups, and show trends.
- To send notifications and emails you've turned on, and the security and billing emails every account gets. You can turn off the optional ones in Settings or with the unsubscribe link in each email.
- To keep the service secure, prevent abuse and fix problems.
- To understand which parts of Copper people use and where they get stuck, find and fix crashes, and check the quality of Penny's answers.
- To communicate with you about your account, such as password resets and important changes to Copper or this policy.
We don't sell or rent your personal information, and we don't share it for advertising.
Who we share it with
We share data only with service providers that help us run Copper, under agreements that limit their use to providing their service to us:
- Plaid, to connect your financial accounts;
- Supabase, which hosts our database, authentication and server functions;
- Railway, which hosts the service that talks to Plaid;
- Expo (and Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android), to deliver push notifications, and Expo to deliver app updates;
- RevenueCat, which manages subscriptions bought through the App Store or Google Play, using an account identifier and your purchase history;
- OpenRouter and TypeSafe, which receive the text of questions you ask Penny, with the names described above, to understand what you're asking;
- PostHog, which receives the usage and diagnostics data described above, and the redacted Penny questions and ratings, to give us product analytics and crash reports;
- Resend, which delivers the emails we send you (such as sign-in links, security notices, bank alerts and plan reminders), using your email address and the email's content;
- Apple and Google, if you choose to sign in with them;
- logo.dev, which receives merchant website names (such as "starbucks.com") to show merchant logos. We don't send your personal or account information to it.
If you share a budget with someone, they can see that budget's data. We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to your data.
Security
Data is encrypted in transit (TLS). Bank access tokens are encrypted at rest with AES-256-GCM and are only used by our servers. Database access is restricted per user and per budget. No system is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects you.
Retention and deletion
We keep your data while your account is open. You can delete your account at any time in the app under Settings → Delete Account. That disconnects every linked bank at Plaid and permanently deletes your budgets, buckets, transactions, uploaded images and profile. Removing a single bank in Settings → Connected Accounts disconnects it at Plaid and stops future syncing. Backups roll off within a limited period after deletion.
Your choices and rights
- View and edit your information in the app, and turn notifications off at any time.
- Disconnect a bank, or delete your account and data, from Settings.
- Depending on where you live (for example California or the European Economic Area), you may have rights to access, correct, delete or port your data, or to object to certain processing. Contact us to exercise them; we won't discriminate against you for doing so.
Children
Copper isn't intended for children under 13, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.
Changes
We'll post updates here and change the effective date. If a change is significant, we'll tell you in the app or by email before it takes effect.
Contact
SUPERNIGHT, LLC — Oklahoma, USA
Contact: copperbudget.com/contact