Copper handles your financial data, so it’s built to see as little as it needs and to keep that locked down.

​
Your bank connection

  • Your bank login goes to Plaid, never to Copper. You sign in to your bank inside Plaid’s window. Copper never sees or stores your bank username or password.
  • Read-only. Copper can see balances and transactions. It can’t move, send or withdraw money.
  • Tokens stay on the server. Plaid gives Copper an access token for each bank. It’s encrypted at rest with AES-256-GCM, used only by Copper’s servers, and never sent to your phone.
  • You’re in control. Remove any bank at any time from Settings › Connected Accounts. That disconnects it at Plaid. See Connect a bank.

​
Your data

  • Data is encrypted in transit with TLS.
  • Database access is restricted per person and per budget. Other people only see a budget if they’ve joined it, and private buckets stay hidden even from them.
  • Copper doesn’t show ads, doesn’t sell or rent your personal information, and doesn’t use advertising identifiers, third-party analytics or tracking SDKs.
Copper shares data only with the services it runs on: Plaid for bank connections, Supabase for its database and sign-in, Railway for the service that talks to Plaid, Expo and Apple to deliver notifications, and logo.dev, which receives merchant website names (like starbucks.com) to show logos and nothing about you. The Privacy Policy has the details.

​
Lock the app on your iPhone

Add a PIN so nobody can open Copper on your phone without it.
1

Open Security

Go to Settings › Security.
2

Choose a PIN

Enter a 4-digit PIN, then enter it again to confirm.
3

Add Face ID or Touch ID

Turn on Unlock with Face ID (or Touch ID) to skip typing the PIN.
To change or remove your PIN, go to Settings › Change PIN or Settings › Security.

​
Sign in with Face ID

In Settings › Security, turn on Sign in with Face ID (or Touch ID) and enter your Copper password once. After that, Face ID signs you in on that iPhone. Your email and password are kept in the iOS Keychain on that device only, and only while your iPhone has a passcode. Face ID itself is handled by iOS; Copper never receives biometric data. If you change your password somewhere else, Copper clears the saved sign-in and asks you to sign in with the new password. Links Copper emails you, like the one to confirm a new account, only work on the device that asked for them. Open them on the same iPhone.
The PIN lock and Face ID are iPhone features. On the web, sign out from Settings › Account when you’re on a shared computer.