Tallyko Privacy Policy

Effective date: August 2, 2026
Last updated: August 2, 2026

Tallyko ("Tallyko," "we," "us," or "our") is a personal finance tracking service operated by Manuel Pineda. This Privacy Policy explains how Tallyko collects, uses, discloses, and protects information when you use the Tallyko mobile application and related services (the "Service").

Tallyko is a budgeting and expense-tracking tool. It is not a bank, financial institution, investment adviser, tax adviser, or credit provider, and it does not connect directly to your bank accounts.

1. Information We Collect

We collect information you provide, information created through your use of the Service, and limited technical information collected automatically.

Account and profile information

• Email address and authentication information.
• Name, if you provide one or share it through Sign in with Apple.
• Profile preferences such as currency, date format, week-start preference, time zone, referral source, onboarding status, and reminder settings.
• A Tallyko account identifier. If you use Sign in with Apple, Apple may provide a private relay email address instead of your personal email address.

Passwords are handled by our authentication provider, Supabase, and are not stored by Tallyko in readable form. We do not receive your Apple ID password.

Financial information you enter

• Account names, types, balances, credit limits, statement dates, and due dates.
• Transactions and transfers, including amounts, dates, currencies, fees, notes, payees, accounts, and categories.
• Budgets, income estimates, savings goals, recurring transactions, transaction rules, loans, interest rates, payment records, and reminder preferences.
• Summaries and calculations generated from this information, such as spending, budget, debt, and net-worth views.

Tallyko is intended for manual personal finance tracking. Do not enter online-banking credentials, payment-card security codes, government identification numbers, or other credentials that could be used to access an external account.

Receipts, chat, and other content

• Receipt photos selected from your library or captured with your camera.
• Receipt scan results, including merchant, date, total, tax, tip, currency, category, confidence score, and image metadata.
• Messages sent to the Tallyko AI assistant, its replies, and actions requested or created through chat.
• Images and PDFs you choose to attach to chat. For PDFs, text is extracted so the assistant can process it.
• Feature requests, descriptions, votes, and support communications you submit.

Location information

If you enable nearby payee suggestions, Tallyko accesses your foreground location while the payee picker is open. Your current location is compared on your device with saved payee locations and is not attached to a transaction.

Coordinates are stored in your Tallyko account only when you deliberately choose to remember a payee at that location. Saved coordinates are rounded before storage. Tallyko does not request background location access.

Purchases and subscriptions

When you purchase or restore Tallyko Pro, we receive purchase and entitlement information such as your Tallyko account identifier, product or plan, subscription status, renewal or expiration status, and transaction-related identifiers. Apple or Google processes your payment details; Tallyko does not receive your full payment-card number.

Notifications

If you enable notifications, we collect a push token, platform, time zone, reminder time, and notification preferences. Notification content may include information you entered, such as a loan name. Depending on your device settings, notification content may be visible on your lock screen.

Analytics and diagnostic information

We collect limited information about how the Service performs and is used, including:

• App screens viewed and feature events, such as creating an account, transaction, budget, payee, or recurring rule; using AI chat or receipt scanning; and opening notifications.
• Event properties such as account type, transaction type, feature status, attachment count, screen name, operation duration, and error category. We do not intentionally send raw transaction amounts, receipt contents, chat messages, or saved coordinates to our analytics provider.
• Tallyko account identifier, app version, device and operating-system information, language or locale, network information, IP address, timestamps, and similar technical identifiers.
• Crash reports, stack traces, logs, breadcrumbs, and error context. Diagnostic reports may contain personal information or content present in the app state when an error occurs.

We do not collect advertising identifiers, serve third-party advertising, sell personal information, or track your activity across other companies' apps or websites for advertising.

Information stored on your device

Tallyko stores authentication sessions, app preferences, cached account and financial data, widget data, and transactions waiting to sync on your device. This supports sign-in, widgets, faster loading, and offline use. Device data is protected by the security controls of your device and may remain until it is cleared by the app, the operating system, or you uninstall the app.

2. How We Use Information

We use information to:

• Create, authenticate, secure, and support your account.
• Store and synchronize your financial records across your devices.
• Provide budgets, summaries, reminders, widgets, recurring entries, debt tools, and other requested features.
• Process receipt images and AI assistant requests that you choose to submit.
• Deliver and restore Tallyko Pro subscriptions and enforce plan limits.
• Remember payees near locations you explicitly save.
• Send notifications you enable.
• Respond to support requests and feature feedback.
• Monitor reliability, prevent abuse and fraud, troubleshoot errors, and improve the Service.
• Comply with law and enforce our Terms of Use.

We do not use your financial records, receipts, chat content, or location for advertising. We do not use that content to train our own machine-learning models.

3. AI Features and Third-Party AI Processing

Tallyko uses OpenAI to provide receipt scanning and AI chat. When you choose to use these features:

• Receipt images and limited context needed to interpret them, such as account and category labels, date format, currency, and time zone, are sent to OpenAI.
• Chat messages, recent conversation context, attached images, extracted PDF text, and financial information needed to answer your request may be sent to OpenAI.
• A pseudonymous Tallyko account identifier may be sent for safety and abuse prevention.

Requests are configured not to be stored as model responses by the API (store: false). OpenAI may still process or temporarily retain information as described in its applicable API data-use and abuse-monitoring policies. Do not submit information about another person unless you have the right and permission to do so.

AI features are optional. You can use Tallyko's manual finance features without submitting content to OpenAI.

4. How We Disclose Information

We do not sell or rent personal information. We disclose information only as needed to operate the Service, complete a transaction you request, protect the Service, or comply with law.

These providers process information on our behalf or as independent platform providers under their applicable agreements and privacy terms. We require service providers acting on our behalf to protect information consistently with this Policy and applicable law.

We may also disclose information:

• When reasonably necessary to comply with law, legal process, or a valid government request.
• To protect the rights, safety, and security of Tallyko, our users, or others, and to investigate fraud or abuse.
• In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.
• With your direction or consent.

5. Retention and Deletion

We generally keep account information and content for as long as your account remains active or as needed to provide the Service.

• You can delete individual financial records and saved payee locations in the app.
• You can clear AI chat history in the app. Clearing chat deletes its messages and attachments; transactions previously created through chat remain in your financial records until you delete them separately.
• You can delete your account in Settings > Delete Account. Account deletion removes your active Tallyko account and associated database records and uploaded files. It cannot be undone.
• Deleting your Tallyko account does not cancel an App Store or Google Play subscription. You must cancel the subscription through the store that billed you.
• To remove cached information remaining on a device, uninstall Tallyko or clear its app data after deleting your account.

Limited records may be retained when reasonably necessary for security, fraud prevention, dispute resolution, legal compliance, enforcing agreements, or completing financial records. Residual copies may also remain temporarily in encrypted backups, logs, and service-provider systems until their normal retention cycles expire. Analytics and diagnostic records are retained according to our providers' configured retention periods and may be kept in aggregated or de-identified form.

To request deletion of support communications or analytics and diagnostic data linked to your Tallyko account identifier, contact us at the address in Section 12.

6. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to appeal a denied request.

You can exercise many choices directly in Tallyko:

• Edit or delete financial records and profile settings.
• Disable nearby payees and delete one or all saved payee locations.
• Clear AI chat history.
• Disable reminders and notifications.
• Delete your account in the app.

You can revoke camera, photo-library, location, and notification permissions in your device settings. Revoking a permission stops the related feature but does not delete information you previously chose to save.

For other requests, email us at dev.manuelpineda@gmail.com. We may need to verify your identity before completing a request. You may also have the right to complain to your local data-protection authority.

California residents may have rights under the California Consumer Privacy Act. Tallyko does not sell personal information or share it for cross-context behavioral advertising, and we do not discriminate against users for exercising privacy rights.

7. International Processing

Tallyko and its providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from your country. Where required, we use appropriate safeguards for international transfers.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including encrypted network connections, provider encryption at rest, authentication controls, private file storage, and per-user database access controls. No service can guarantee absolute security. Keep your device and account credentials secure, and contact us if you suspect unauthorized access.

9. Children's Privacy

Tallyko is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Where local law requires a higher age for a person to consent to data processing, a parent or guardian must provide valid consent. Contact us if you believe a child has provided personal information without appropriate consent.

10. Third-Party Services and Links

The Service may link to or rely on third-party services. Their own privacy policies govern information they process as independent providers. Tallyko is not responsible for the privacy practices of third-party websites or services that you choose to visit.

11. Changes to This Policy

We may update this Policy as the Service or legal requirements change. We will post the updated version, revise the "Last updated" date, and provide additional notice in the app or by email when a change is material. We will request consent when required by law.

12. Contact Us

For privacy questions or requests, contact:

Tallyko
Operated by Manuel Pineda
Email: dev.manuelpineda@gmail.com