Skip to main content
    Security — How Cove protects your data

    How Cove protects your data

    We never see your bank password and we never store your bank login credentials. Your financial security is our top priority — here's exactly how we protect your information.

    We never see your bank login information

    When you connect a bank account, your login credentials are never stored by Cove. Your username and password are entered directly with Plaid, our trusted account-connection partner, and exchanged only between you and your bank.

    Once your bank verifies you, Plaid provides Cove with a secure, encrypted token. That token lets Cove see your transaction data — it does not give Cove the ability to access your bank login.

    Bank-level encryption protects your data

    Communication between your device and Cove is encrypted in transit using industry-standard TLS — the same kind of encryption trusted by major financial institutions.

    Once your data reaches our servers, it is encrypted at rest.

    How we treat your personal information

    We do not accept payment of any kind in exchange for your personal information or financial data, and we never sell it. Some states, like California, have specific rules around data sharing — see our Privacy Policy for the full detail.

    You're always in control

    Unlink accounts anytime. Revoking Cove's access to a financial account is simple and immediate.

    Delete your account anytime. When you delete your Cove account, your associated data is deleted with it.

    About Plaid

    Plaid is a trusted service that securely connects apps like Cove to your bank. It works with thousands of financial institutions across the U.S. and powers popular apps including Venmo, Cash App, and SoFi. When you link your account, Plaid handles the secure connection — your password is shared only with your bank, not with Cove.

    Frequently asked questions

    Does Cove see or store my bank login credentials?

    No. Your credentials are entered directly into a secure interface provided by Plaid and your bank. Cove never sees, stores, or has access to your banking username or password.

    How is my data encrypted?

    Data in transit is encrypted using TLS, and your data is encrypted at rest on our servers.

    Where is my data stored?

    Your data is hosted on Amazon Web Services (AWS), a platform trusted across financial services and government.

    If I connect my bank account, will Cove charge me?

    No. Connecting an account never triggers a charge. Many people use Cove without Premium. If you upgrade, you choose your plan and payment method in the app.

    Can I delete my data?

    Yes. You can unlink accounts at any time to revoke access, or delete your entire account and all associated data whenever you choose.

    Does Plaid support multi-factor authentication?

    Plaid supports most MFA methods used by banks. If you have trouble linking with MFA, make sure your contact info is current with your bank, and try again.

    Questions or concerns?

    General security questions: security@usecove.ai. You can also read about your privacy rights in the Help Center.