Privacy, in plain words

Last updated 2026-08-10.

The promise

Your financial data stays on your computer. Coffer is a local-first app: your transactions, accounts, budgets, household setup, and everything derived from them live in files on your machine and nowhere else. We run no database of your finances — we structurally cannot see, sell, or leak what we never receive.

What leaves your computer (and only this)

• AI questions you ask — sent through our relay to Anthropic's API with the computed figures needed to answer, then discarded. We do not store prompts.
• Feedback you choose to send — what you typed, app version/platform, and (only with your consent, shown first) recent app log lines.
• Public data lookups — house-price indexes (FHFA), VIN decoding (NHTSA), mortgage-rate averages. No personal data in the requests.
• The weekly email close (optional, off by default) — if you turn it on, the app computes a short weekly summary on your computer and hands the finished email to our relay for delivery. We store none of it — the relay sends and forgets.
• A daily update check — the app asks our server for the newest version and reports, anonymously: its version, platform, which bank connector is in use, and three yes/no setup-progress flags (bank connected, receipts on, household set up). No account identifier, no device identifier, and nothing about your finances travels with it.
• Bank connections go directly from your machine to your chosen provider — your credentials are never visible to us.

What we never collect

No telemetry, no analytics inside the app, no usage tracking, no selling or sharing of data. The account we hold for you contains: your email, your subscription status, your license key. That's the whole record.

Deleting everything

Delete the app and its data folder, cancel your subscription, and email us to delete your account record. That is genuinely everything.

Questions: support@vasperacapital.com · Home