Envelo
Privacy
Effective August 22, 2026. This is the plain version. It is the whole policy.
What Envelo keeps
- Your budget. Accounts, envelopes, planned amounts, transactions, and debts you enter. They sync between your devices through our database (Supabase), scoped so only your login can read them.
- Your account. Your email address and a password hash. Nothing else to sign up.
- How the program is going. Envelo 90 records a few moments from your own budget (month planned, transaction logged, envelope negative, lesson opened) with timestamps, plus your time zone and when you last opened the app. This is what makes the next lesson appear and what tells us where people get stuck. It is not shared with anyone and not sold.
- Bank connections (optional, paid tier). If you connect a bank, Plaid handles your bank login; Envelo never sees it. We store the transactions Plaid returns and a token that lets us fetch new ones. Disconnect any time under Accounts.
- A push token, only if you turn on nudges, so the program can reach your phone.
What Envelo does with it
- Shows you your budget, on every device you sign in on.
- Runs the Envelo 90 program: the card, the lessons, and at most one nudge per moment (push first, an email only if the push goes unseen for a day). You can turn nudges off in Settings on the phone or under Learn on the web, and every email has an unsubscribe link.
- Counts things in aggregate (how many people planned a second month) to make the program better.
What Envelo does not do
- No advertising, no selling or renting your data, no data brokers.
- No tracking across other apps or sites.
- No reading your transactions for anything other than showing them to you and running the program.
Who else touches it
Supabase (database and sign-in), Vercel (the web app), Expo (push delivery), Resend (email delivery), and Plaid (bank connections, only if you connect one). Each only gets what it needs for its job.
Deleting everything
Email hello@envelobudget.com from your account address and your account and every row attached to it are deleted. Bank connections are removed at the same time.