Tally

Privacy Policy

Effective 2026-07-02

This Privacy Policy explains how the Tally iOS app ("Tally," "the app") handles your information. Tally is built and operated by Andre Suhartanto, trading as Tanto Studio ("we," "us"). You can reach us any time at contact@tantostudio.com.

Summary

Tally helps you track what you spend, split bills with friends, and stay on budget. Tally is a connected app: so that your data can be backed up, synced across your devices, and shared with the people you split bills with, the things you log are stored on Tally's servers. We keep this to what the app needs in order to work. We do not show ads, we do not sell your data, and we do not use your financial data to train AI.

In short:

• An anonymous account is created when you first open the app, so your data has somewhere to live. You can later sign in with Apple or Google to secure and sync it.
• Your expenses, transactions, budgets, categories, and uploaded receipts are stored on our servers so they sync and so shared expenses work.
• When you share an expense, the other members of it can see that expense's transactions and your name and photo in it. Your private budgets, personal categories, income, and email are not shared with them.
• A few trusted services help run the app: Google Firebase (sign-in and crash reports), Apple (purchases, sign-in, speech), and OpenAI (powers the optional AI features, through our server). We describe exactly what each one receives below.

The account we create for you

When you first open Tally, the app creates an anonymous account for you using Firebase Authentication, a service from Google. This account is just a random identifier with no name or email attached. It exists so the things you log have a home and can sync.

If you choose to sign in, your anonymous account is upgraded in place to a signed-in account, keeping the data you already have. Signing in lets you back up your data and reach it on another device.

• Sign in with Apple: Apple shares your name and email with us only the first time you authorize, and you can choose to hide your real email behind Apple's private relay address.
• Sign in with Google: we receive your Google profile name, email address, and profile picture.

We use your email, when we have it, to identify your account. We do not send you marketing email.

What we store and sync

To make the app work, the following is stored on our servers and synced to your devices:

• Your expenses and the transactions in them: titles, any notes you write, amounts, currencies, dates, the category you chose, who paid, and how a bill is split.
• Your budgets and the spending limits you set per category.
• Your categories, colors, and emojis.
• Personal income entries, if you add them.
• Recurring expenses and their schedules (a task on our server adds these for you automatically).
• Your profile: display name, email (if you signed in), chosen base currency, and profile photo.
• Receipt photos and your profile photo, if you upload them.

Amounts are stored as plain numbers in the relevant currency. Tally is a tracker and splitter, not a payment app: we never store credit card numbers or any other payment details. We do not collect your location, your contacts, or advertising identifiers.

Shared expenses: what other people can see

Tally lets you split an expense with other people by sharing a join code. When someone joins a shared expense, they become a member of it. Every member of a shared expense can see:

• The other members' display names and profile photos, and an internal account identifier the app uses to link people to transactions.
• All transactions in that shared expense: titles, any notes, amounts, dates, categories, who paid, the full breakdown of who owes what, and any receipt photos attached to those transactions.
• The running balances and who owes whom.

Members of a shared expense cannot see your email address, your personal budgets, your private categories, your personal income, or any expense you have not shared with them. Only share an expense with people you trust with the information in it, and only attach receipts you are comfortable other members seeing.

Photos: receipts and avatars

If you attach a receipt to a transaction or set a profile photo, that image is uploaded to and stored on our servers, then served back to the app over the internet. Receipt images can contain personal information, such as a merchant, the items bought, or details printed on the receipt, so keep that in mind before attaching one to a shared expense where other members can view it. You can remove a receipt or your profile photo from inside the app at any time.

AI features

Tally offers optional AI features as part of Tally+: adding a transaction by speaking ("just say it") and automatically suggesting a category for a transaction. These features are turned off until you enable them. Before Tally sends any text for AI processing, it explains what will be sent and to whom and asks for your permission in the app, and you can turn the AI features off again at any time in Settings.

Speech to text

When you use voice entry, Apple's speech recognition turns your speech into text. On supported devices this can happen on your device, but depending on your device and language Apple may process the audio on its servers. This is handled by Apple under Apple's privacy policy.

Turning text into a transaction

The resulting text (or text you typed), together with the names of your categories and your language, is sent to our server, which passes it to OpenAI to structure it into a transaction or to suggest a category. Your spoken audio is never sent to OpenAI; only text is. The request to OpenAI is made by our server using our own key, and our server does not store the content of these AI requests or responses. OpenAI processes the text under its API terms, which state that API data is not used to train its models. OpenAI acts as our processor for these requests and is required to protect this text and to use it only to provide the feature, a level of protection comparable to how we handle your data ourselves.

We do not use your financial data to train AI, and AI does not read through your stored entries on its own.

In-app purchases (Tally+)

Tally is free to start. Tally+ is an optional subscription that unlocks unlimited expenses and budgets and the hands-free AI voice entry. Purchases are handled by Apple through the App Store using StoreKit; Apple processes the payment and tells the app whether your subscription is active. Apple receives the standard purchase information any App Store purchase involves, which is between you and Apple under Apple's terms.

Tally also includes the RevenueCat SDK, a tool that helps developers manage subscriptions. When the app starts it may send an anonymous app-instance identifier and basic device and purchase information to RevenueCat. It does not receive the content of what you log. See the RevenueCat privacy policy.

Crash reports and diagnostics

To find and fix bugs, Tally uses Firebase Crashlytics, a service from Google. If the app crashes, Crashlytics sends a crash report that includes the type of crash, your device model, operating system version, and a diagnostic stack trace. We do not put the contents of your entries into crash reports. See the Firebase privacy page.

We do not use Firebase Analytics or any other product-analytics or advertising service. Tally contains no ad SDKs and does not use the device advertising identifier (IDFA).

Exchange rates

For multi-currency support, the app fetches up-to-date exchange rates from a foreign-exchange rates provider. These requests ask only for rates; they do not include any of your data.

On your device

Tally keeps a local copy of your data on your device so it loads instantly and keeps working if you go briefly offline. This local copy is a cache of what is already on our servers, and it is removed when you sign out or delete your account.

Where your data is processed

Our servers and the third-party services described here may process and store your data on servers located in other countries, including outside the country you live in. Where required, we rely on appropriate safeguards for those transfers.

How long we keep your data

We keep your data for as long as your account exists, so the app keeps working for you. Crash diagnostics are retained by the service for a limited period. Our servers keep your IP address only briefly (around a day) to prevent abuse and rate-limit requests, and standard web-server logs are kept for routine operation and security.

Deleting your data and account

You can delete individual transactions, expenses, budgets, categories, receipts, and photos from inside the app at any time.

Because Tally stores your data on our servers, deleting the app from your phone does not delete your data. To remove it, delete your account from inside the app. When you delete your account:

• Expenses you created that no one else has joined are permanently deleted, along with their transactions, splits, receipts, and your profile photo.
• For expenses you created that other people share, ownership passes to another member so their records stay intact, and your seat is archived. Your display name may remain on past transactions you paid for or were part of, so the shared history still makes sense to the other members, but your account, email, and profile photo are removed.
• Your private budgets, categories, and income are deleted.

If you would like help with a deletion request, email us at contact@tantostudio.com.

Children

Tally is a general-audience app and is not directed to children. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your country). If you believe a child has provided us information, contact us at contact@tantostudio.com and we will take appropriate action.

Your rights

Depending on where you live, you may have rights under laws such as the GDPR (EU and UK) or the CCPA and CPRA (California), including the right to access, correct, delete, export, or restrict the use of your personal data, and the right to object to certain processing. To exercise any of these, contact us at contact@tantostudio.com. We will not discriminate against you for exercising your rights.

How we may disclose information

We do not sell your personal data, and we do not share it with advertisers. We may disclose information when required by law (such as a subpoena, court order, or similar legal process), or when we believe in good faith that it is necessary to protect rights and safety, prevent fraud, or respond to a lawful government request.

Security

We protect your data in transit with HTTPS, and access to it requires a verified sign-in token. No method of storage or transmission is perfectly secure, but we use reasonable measures to protect your information. If you sign in, keep your Apple or Google account secure, since access to it can mean access to your Tally data.

Changes to this policy

We may update this policy from time to time, for example if we add or remove a service, or ship a feature that handles data differently. We will update the "Effective" date at the top, and where a change is material we will surface it in the app. Continuing to use Tally after a change takes effect means you accept the updated policy.

Your consent

By using Tally, you consent to the handling of your information as described in this Privacy Policy.

Contact

Questions, requests, or concerns about privacy: contact@tantostudio.com.