Privacy Policy

Effective October 4, 2026

COW Money is an envelope-budgeting app made by Wehbe LLC (“we”, “us”). This policy explains what we collect when you use the COW Money app and cowmoney.app, how we use it, who we share it with, and the choices you have.

What we collect

Your account. When you sign in with Apple or Google, we receive:

• an account identifier
• your email address. If you choose Hide My Email with Apple, this is a private relay address.

We don’t receive your Apple or Google password. If you sign in with Apple, we also keep a token Apple issues to COW Money, encrypted, so that deleting your account can end Sign in with Apple for COW Money.

Your bank connection. You connect one checking account through Plaid. You sign in with your bank on Plaid’s or your bank’s own screens, and we never see your bank username or password.

Once you subscribe and the connection is finished, we receive and store:

• the account’s name, the last four digits of its number, and its available and current balances
• its transactions: amount, date, description or merchant, and whether it’s pending
• the bank’s name and the connection’s status

We also store the access token Plaid gives us, encrypted. Access is read-only: COW Money can’t move money.

Your budget. Your envelopes, rules, notes and how you’ve assigned transactions are stored on your phone, not on our servers.

Notifications. If you allow notifications, we store:

• your device’s push token
• your notification choices
• a record of which transactions we’ve already notified you about, so you aren’t notified twice

Purchases. Subscriptions are sold through Apple’s App Store. Apple handles payment, and we never receive your card details. We receive information about your subscription so we can tell whether it’s active: the product, the dates, its status, and a transaction identifier linked to your COW Money account.

The demo. The demo uses made-up example data on your phone. Nothing you do in the demo is sent to us.

What we don’t collect. We don’t use advertising, ad tracking or analytics SDKs, and we don’t collect your location, contacts or photos.

How we use it

We use this information to:

• provide COW Money, including working out what’s safe to spend and showing your transactions and balances
• keep your bank data up to date
• send the notifications you choose
• check your subscription
• keep the service secure and fix problems
• respond to you

We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.

Who we share it with

We share information only with service providers that run COW Money for us, under their own privacy and security commitments:

• Plaid: connects your bank account. Plaid’s handling of your data is described in the Plaid End User Privacy Policy.
• Supabase: hosts our servers, database and sign-in.
• Apple: Sign in with Apple, push notifications and App Store purchases.
• Google: Sign in with Google, and the inbox where we read email sent to support@cowmoney.app.
• Cloudflare: serves cowmoney.app and forwards email sent to support@cowmoney.app.

We may also disclose information if the law requires it, to protect our users or the service, or as part of a merger or sale of the business. In that last case, this policy continues to apply to your information.

How long we keep it

• While you have an account: we keep your information while you have an account and your bank is connected.
• If your subscription ends: we keep your bank connection for 7 days. After that we remove it at Plaid and delete its stored transactions, unless you resubscribe.
• If you delete your account: Settings → Account → Delete account removes your bank connection at Plaid, deletes your data on our servers and your sign-in account, and deletes your budget on that phone. Some records may persist for a limited time in backups before they’re overwritten.

Security

We protect your information in four ways:

• Data travels over encrypted connections.
• Your Plaid access token is stored encrypted.
• Our database keeps each person’s data separate.
• Your bank sign-in goes only to Plaid and your bank.

No system is perfectly secure, so please keep your phone and your Apple or Google account protected.

Your choices and rights

• Notifications: change them in the app’s Settings or in iOS Settings.
• Your bank: disconnect it anytime in the app’s Settings.
• Your account: delete it in the app’s Settings, or ask us to.
• Your data: you can ask us what we hold about you, or to correct or delete it, by emailing support@cowmoney.app. Depending on where you live, for example California, you may have additional rights, and we won’t treat you differently for using them.

Children

COW Money is for adults, 18 and older. We don’t knowingly collect information from children.

Changes

If we change this policy, we’ll update the date above. If the changes are significant, we’ll tell you in the app.

Contact

Wehbe LLC
support@cowmoney.app