Privacy Policy

Information Tallypool collects

Tallypool collects only the information needed to provide the service:

• Account information - your email address and display name. These are used to create your account, sign you in, and identify you to the people you share a budget with.
• Budget & transaction data - the budgets, categories, transactions, amounts, transaction descriptions, account nicknames, and shared-member relationships you and your co-members enter into the app.
• Invitations - when you invite someone to a shared budget, Tallypool stores the email address you invite so it can deliver and manage the invitation.
• Notification tokens - if you enable push notifications, Tallypool stores a notification token for your device so it can deliver activity alerts and reminders.
• Authentication & session data - the short-lived access tokens and session records needed to keep you signed in and to protect your account.

Tallypool does not collect payment-card details, precise location, advertising identifiers, or your device contacts.

How Tallypool uses your information

Tallypool uses your information solely to operate the app: to authenticate you, to store and sync the budgets and transactions you create, to share that data with the specific people you invite to a budget, to send notifications you've opted into, and to keep the service secure and reliable. Tallypool does not use your data for advertising, profiling, or automated decision-making.

How Tallypool protects your data

Financial details are among the most sensitive data there is, so security is built into how Tallypool stores and moves every record:

• Securely hashed passwords. Passwords are securely hashed and are never stored in plain text - Tallypool cannot see or recover your password.
• Encryption at rest. Personal and financial fields - including your email address, display name, account nicknames, transaction descriptions, and invitation emails - are encrypted before they are stored, not just at the disk level.
• Encryption in transit. All data travels between the app and Tallypool's servers over encrypted connections - nothing moves in the clear.
• Industry-standard practices. Tallypool follows industry-standard security practices to protect your account and limit exposure if credentials are ever compromised.

How your data is shared

Tallypool does not sell, rent, or trade your personal information. Budget and transaction data is shared only with the members you explicitly invite to a shared budget. Those members can see the budgets, categories, transactions, and balances within budgets you share with them.

Tallypool relies on a small number of service providers strictly to run the app, and only shares the minimum data needed:

• Hosting & database providers - to run Tallypool's servers and store your (encrypted) data.
• Push notification service - to deliver push notifications to your device.
• Email service - a third-party email service used to deliver messages you send Tallypool through the contact form. It receives the name, email, and message you submit so it can relay it to Tallypool.

Tallypool may also disclose information where required by law, or to protect the rights, safety, and security of Tallypool's users and the service.

Data retention

Tallypool retains your account and budget data for as long as your account is active, so the app continues to work for you and the people you share budgets with. When you delete your account, Tallypool removes your personal data from its active systems (see below).

Account deletion & your rights

You can delete your account at any time from within the app. Deleting your account removes your personal information and the budget data you own from Tallypool's active systems. Some data may persist briefly in encrypted backups before being permanently overwritten on Tallypool's normal backup rotation.

For full step-by-step instructions, exactly what is removed versus retained, and a web fallback if you can't sign in, see Tallypool's Account & Data Deletion page. If you would like to access or correct your personal data, contact Tallypool using the details below.

Children's privacy

Tallypool is not directed to children under 13, and does not knowingly collect personal information from them. If you believe a child has provided Tallypool with personal information, contact Tallypool and it will delete the information.

Changes to this policy

Tallypool may update this policy from time to time. When it does, Tallypool will revise the "Last updated" date above and, where appropriate, notify you in the app.

Contact Tallypool

If you have questions about this policy or your data, email Tallypool at tallypool@constantlearning.org or use Tallypool's contact form.