Covered

Privacy Policy

Effective date: August 20, 2026

Covered (“Covered,” “we,” “us,” or “our”) provides a platform that helps consumers register the products they own, track warranty coverage, and file claims, and helps manufacturers manage registrations and claims for the products they sell. This Privacy Policy explains what personal information we collect, how we use and share it, the choices you have, and how to reach us with questions.

By using our website, our consumer app, or our business dashboard (together, the “Services”), you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Services.

1. Information We Collect

Information you provide directly

Consumers: your email address, used to sign in and as your account identifier; your name and mailing address, given when you set up your account; your phone number and date of birth, if you choose to add them; where you sign in with Google, Facebook or Apple, the account identifier and email address that provider returns to us, and your name where they supply it; product information you register, including the product, its serial number if provided, and the date of purchase; claim information, including the type of issue, a description, any photos or video you attach as evidence, and messages exchanged with a manufacturer about the claim; and any communications you send us directly, such as through our contact form.

Manufacturers (business accounts): your company name and a contact email address; for each team member, their name, email address, and role; a password, which we store only as a one-way cryptographic hash that we cannot see or recover; product catalog information you enter; and claim decisions and notes your team enters while handling a claim.

We do not ask for or knowingly collect payment card numbers, government identification numbers such as a Social Security number, or precise geolocation data.

Information collected automatically

When you use the Services, our servers automatically log certain technical information, including your IP address, browser and device type, pages visited, and timestamps of activity. We use this for security, to diagnose problems, and to keep an audit trail of account activity, for example to detect suspicious sign-in attempts.

Information from other sources

If you register a product using a code printed by a manufacturer, that code tells us which product and manufacturer the registration belongs to. We do not otherwise receive information about you from manufacturers unless you have registered one of their products.

2. How We Use Your Information

We use the information above to:

  • Create and maintain your account, and authenticate you when you sign in
  • Operate the core service: registering products, tracking warranty status, and routing claims to the correct manufacturer
  • Communicate with you about your account, a registration, or a claim in progress
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations, and enforce our Terms of Service
  • Improve and maintain the reliability of the Services

We do not use your personal information to serve you third-party advertising, and we do not build advertising profiles about you.

3. Automated Processing and Fraud Detection

When a claim is filed, our systems run a small number of automated, rule-based checks. For example, flagging when the same serial number has been claimed from more than one account, or when a claim is filed unusually soon after a product was registered. These are deterministic rules, not artificial intelligence or machine-learning models, and they do not make a final decision on any claim.

A flagged claim is not automatically denied. Every claim decision, whether approval, rejection, or a request for more information, is made by a person at the manufacturer responsible for the product. If you believe a claim was handled unfairly, you can contact us or the manufacturer to request a human review.

4. How We Share Your Information

We share personal information in the circumstances below, and we do not sell it.

With the manufacturer of a product you register. This is the core of what Covered does. Registering a product shares your registration and claim details with that product's manufacturer so they can evaluate warranty claims. We do not share your information with the manufacturer of a product you have not registered.

With service providers. We use third-party companies to help us operate the Services, such as cloud hosting providers who store our data, and providers who deliver transactional email on our behalf. These providers only receive the information needed to perform their function, and are contractually restricted from using it for any other purpose.

For legal reasons. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Covered, our users, or the public.

In connection with a business transfer. If Covered is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

With your consent. We may share information for any other purpose with your consent.

5. Cookies and Similar Technologies

We use one strictly necessary cookie to keep you signed in: a secure, HTTP-only session cookie that a script running on the page cannot read. We do not use third-party advertising or analytics cookies, and we do not currently run any third-party analytics or tracking scripts on the Services. If that changes, we will update this policy.

6. Data Retention

We retain account, registration, and claim records for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, or warranty-related obligations, resolve disputes, and enforce our agreements. When information is no longer needed for these purposes, we delete or anonymize it. You can ask us to delete your account and associated personal data at any time, subject to the retention needs described above. See “Your Privacy Rights” below.

7. Data Security

We use industry-standard safeguards to protect personal information, including encrypted connections (HTTPS/TLS) between your device and our servers, salted password hashing for business accounts, and access controls limiting who on our team can view personal data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you as required by applicable law.

8. Your Privacy Rights

Depending on where you live, you may have the right to:

  • Know what personal information we hold about you, and request a copy of it
  • Correct inaccurate or incomplete information
  • Delete your personal information
  • Object to, or request that we restrict, certain processing
  • Withdraw consent you previously gave us, where processing is based on consent

Most account details can be reviewed and corrected directly from your Settings page. For anything else, contact us through our contact page and we will respond within the time required by applicable law.

9. Additional Disclosures for California Residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you the following rights in addition to those above:

  • Right to know the specific pieces and categories of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete personal information we have collected from you, subject to certain exceptions.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale or sharing. We do not sell personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under the CCPA.
  • Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes beyond what is necessary to provide the Services.
  • Right to non-discrimination. We will not deny you services, charge you a different price, or provide a different level of quality because you exercised any of these rights.

In the 12 months before the effective date of this policy, we have collected the following categories of personal information, as defined by the CCPA: identifiers (such as name, phone number, email, and account ID), commercial information (product registrations and claims), and, if you choose to provide it, characteristics of protected classifications (date of birth). We collect these categories from you directly and, for a product registration, from the code printed by the manufacturer. We disclose these categories to service providers and to the manufacturer of a product you register, for the business purposes described in Section 4.

You may exercise these rights yourself or through an authorized agent. We may need to verify your identity before completing your request.

10. Additional Disclosures for Other U.S. States

If you are a resident of Colorado, Connecticut, Virginia, Utah, or another state with a comprehensive privacy law, you may have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of certain processing. You can exercise these rights the same way described in Section 8.

11. Additional Disclosures for the EEA, UK, and Switzerland

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information under the following legal bases: performance of a contract with you (operating your account and the Services), our legitimate interests (such as fraud prevention and service improvement), compliance with a legal obligation, and, where applicable, your consent.

You have the right to access, correct, delete, restrict, or port your personal information, and to object to certain processing, by contacting us as described in Section 8. You also have the right to lodge a complaint with your local data protection supervisory authority.

Where we transfer personal information outside of the EEA, UK, or Switzerland, we do so using appropriate safeguards as required by applicable law.

12. Children's Privacy

The Services are not directed at, and are not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will delete it. If you believe a child has provided us with personal information, please contact us.

13. International Data Transfers

Covered is based in the United States, and the information we collect is processed and stored in the United States. If you are accessing the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where privacy laws may be different from those in your country.

15. Changes to This Policy

We may update this policy from time to time. If we make a material change, we will update the effective date above and, where required by law, provide you with additional notice, such as an email or an in-app notification. Your continued use of the Services after a change takes effect constitutes acceptance of the revised policy.

16. Contact Us

Questions about this policy or your personal information can be sent through our contact page, or by emailing hello@coveredwarranties.com.