Last updated: September 15, 2026
Tally ("the App") is a personal balance tracker built by an independent developer. Your privacy matters, and this policy explains what data the App collects, how it's used, and your rights.
When you use Tally without signing in, all your data (activities, projects, balances, timer data) is stored locally on your device using your browser's localStorage. Nothing is sent to any server.
When you sign in with Google, we collect:
When you sign in with Apple, we collect:
@privaterelay.appleid.com address) — we never see your real email, and messages sent to it are forwarded by AppleWe do not receive your Apple password, payment details, or any other information from your Apple Account.
If you invite someone to a tracker, or join one you have been invited to, some of your data becomes visible to the other people sharing it. Section 5 explains exactly what.
Your data is used solely to provide the App's functionality — tracking balances, syncing across devices, sharing a tracker with someone you have invited, and generating exports (PDF/Excel) on your device. We do not sell your data, pass it to third parties, or use it for advertising or analytics. The only person who ever sees your data is you, and anyone you have deliberately invited to share a tracker with you (section 5).
Cloud data is stored in Google Firebase Firestore, which provides encryption in transit and at rest. Your data is associated with the account you signed in with (Google or Apple) and is only accessible when you are signed in. When you use the App without signing in, data is stored locally in your browser. If you later sign in, your local data is merged to the cloud to enable cross-device sync.
A tracker you have shared with somebody is stored separately from the rest of your account, so that the people you invited can reach that one tracker and nothing else. Access is enforced on the server: only the accounts listed as members of a shared tracker can read or write it, and only the owner can change that list. Trackers you have not shared are never readable by anyone but you.
The App uses the following third-party services:
The Google services above are governed by Google's Privacy Policy. Sign in with Apple is governed by Apple's Privacy Policy.
When you delete your account from inside the App, we also ask Apple to revoke the sign-in link between your Apple Account and Tally, so Tally no longer appears in your Apple Account settings.
Tally lets you share a single tracker — an activity, a project or a lending circle — with someone else, as a viewer (they can see it) or an editor (they can add entries and payments). Once a tracker is shared, the App calls it a group, and this section uses that word below. Sharing never happens automatically. It happens only when you choose a tracker, choose a person and send them an invite.
What the other person receives in the invite. The invite message you send carries the name of the tracker, its current balance written from their side, your name as the person inviting them, the role you have given them, and a six-character join code. You send this message yourself, through whichever app you choose — Tally does not send it for you and does not keep a copy of the conversation. The join code expires after 7 days, works once, and can be withdrawn by you before it is used.
What a member can see once they join. Only the one tracker you shared: its entries, amounts, dates, notes, participant names and its full history, including entries added before they joined. They cannot see any of your other trackers, your settings, your email address or anything else in your account. Members are shown to each other by name only — the name they go by in that group, never an email address.
What you can see about them. The name they joined under, their role, and when they joined.
Staying in control. The owner of a group can change a member between viewer and editor, or revoke their access entirely, at any time, from the group's Manage screen. Revoking takes effect on the server, not just on screen. Any member can leave a group at any time: open the group, tap Details, and Leave this group is at the foot of that screen. Leaving removes the group from their device and nothing they logged is deleted. A group the owner stops sharing goes back to being an ordinary private tracker, visible only to them.
What we do not do. We do not share your personal data with any third party. Data reaches another person only through a tracker you deliberately shared with them, an export you generate yourself (PDF or Excel, produced on your device), or a message you choose to send. There is no public directory, no way to search for other users, no advertising and no analytics.
You can:
Tally is not directed at children. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us so we can remove it.
We may update this policy from time to time. Changes will be reflected on this page with an updated date.
If you have questions about this privacy policy or your data, reach out at: tallyapp@proton.me
← Back to Tally