Covered privacy policy

Effective 17 September 2026. Covered is made by Deliberately Useful. This policy says what the app collects, why, and what you can do about it. It is written from what the app actually does.

What Covered stores

• Your account. An email address, or the identifier Apple gives us when you sign in with Apple. If you use Hide My Email, we only ever see the relay address.
• Your budget. The household you set up or join, its period rule, jobs, shifts, gig sessions, envelopes, bills, assignments, cash counts and deposits. Every amount you type is stored so the app can show it back to you and to the other members of your household.
• Bank data, if you link a bank. Covered uses a bank-data provider, Plaid or Stripe Financial Connections, to read account balances and transactions from banks you choose. Each connection goes through one of them, and the screen where you link shows which. We store the transactions, balances and account names the provider returns. We never see or store your bank login. Covered cannot move money.
• Subscription status. Whether your trial or subscription is active, from Apple through RevenueCat. Apple handles payment; we never see your card.
• Device tokens for notifications you turn on, and which kinds you want.

What Covered does not do

• No advertising, no data brokers, no selling or sharing of your data for anyone else's purposes.
• Product analytics, when enabled, record which features are used (for example that a shift was logged, or a bank was linked) and never the amounts, payees, account names or anything you typed. Crash reports contain the state of the app's code, not the contents of your screen.
• Nothing is read from your bank that the app does not use for budgeting.

Who can see your data

• When you request to join a household, its owner sees your verified email address (including an Apple relay address) or phone number so they can decide whether to approve access. A household code alone does not grant access.
• Other members of a household you join can see that household's envelopes, bills, transactions and everyone's shifts, at the role the owner set. Your own budget in another household stays yours.
• Our service providers, each under contract and only for the purpose named: Supabase (database and hosting), Plaid and Stripe (bank connections), Apple and RevenueCat (subscriptions), Apple (notifications), and, when enabled, Sentry (crash reports) and PostHog (usage events).
• Nobody else, unless the law requires it.

Your choices

• Export. Settings, Export my data gives you every table as CSV for every household you belong to.
• Delete. Settings, Delete account removes your bank connections at Plaid or Stripe, your subscription record, every membership, and any household where you were the last member, then your account. It cannot be undone.
• Unlink a bank at any time from Settings, Accounts. Plaid's and Stripe's own policies cover what they retain; see plaid.com/legal and stripe.com/privacy.
• Notifications are off until you turn them on, kind by kind.

Where and how long

Data lives in Supabase's US region. It is kept while your account exists and removed when you delete it. Backups roll off within 30 days. Bank connections a lapsed household has not paid for are removed 30 days after the subscription ends.

Children

Covered is for adults with jobs; it is not directed at children under 13, and we do not knowingly collect their data.

Changes and contact

We will note changes here with a new effective date. Questions: privacy@covered.tips.