Privacy Policy for TallyToo

1. Introduction

Welcome to TallyToo ("we," "our," or "us"). TallyToo is a mobile application that helps you track numeric values over time, such as pages read, money spent, or water consumed, with visual graphs and optional collaboration with others.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application and related services. By using TallyToo, you agree to the practices described in this policy.

If you have questions, contact us at vonimatic@gmail.com.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Email address and password when you create an account
• Tally Data: Tally names, values, timestamps, notes, icons, colors, units, descriptions, targets, and preset values
• Collaboration Data: Invite codes, shared tally relationships, and collaborator roles (owner/editor)
• User Preferences: Sort modes, filter modes, haptic feedback settings, notification preferences, theme choices, week start day, and stats configuration
• Support Communications: Any information you provide when contacting us for support

2.2 Information Collected Automatically

• Device Information: Device type, operating system, and app version
• Subscription Status: Premium or free tier status (managed via RevenueCat)
• Crash and Error Diagnostics: When the app crashes or encounters an error, we collect a diagnostic report. This includes the error and stack trace, device model, operating system version, app version, and a short trail of recent in-app actions (such as "opened upgrade screen" or "started sync"). For signed-in users this report is linked to your account identifier so we can correlate issues with an account; in guest mode it is not. It is handled by Sentry, a crash-reporting service.
• Usage Analytics: Information about how the app's features are used (for example when a tally is created or updated, or when the upgrade screen is viewed), along with general session and device information. This analytics data is not linked to your TallyToo account. It is handled by Google Analytics, and advertising identifier collection is disabled.

2.3 Information We Do NOT Collect

• We do not collect your name, phone number, or address
• We do not collect precise or GPS location data, and the app requests no location permission
• We do not access your camera, microphone, photos, or contacts
• We do not serve advertisements, and we do not collect an advertising identifier

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the TallyToo app
• Sync your tally data across devices when you're signed in
• Enable collaboration features when you share tallies with others
• Process and manage your subscription
• Send optional daily reminder notifications (only if you enable them)
• Provide customer support
• Diagnose crashes and errors, and understand how features are used, so we can improve the app's reliability and design
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services to operate TallyToo. Each has its own privacy policy:

4.1 Supabase (Database and Authentication)

Handles user authentication, database storage, and real-time data sync. Data shared includes account credentials, tally data, and collaboration data.

4.2 RevenueCat (Subscriptions)

Handles in-app purchase processing, subscription management, and entitlement verification. Data shared includes purchase information, subscription status, and device identifiers.

4.3 Analytics and Crash Reporting

We use Sentry for crash and error reporting, and Google Analytics for usage analytics. These help us identify problems and understand how features are used. Data shared includes feature-interaction events, general device and session information, crash and error diagnostics, an app-instance identifier, and an approximate (country or region level) location derived from your IP address. We do not send personally identifying information such as your name or email address to these services, and advertising identifier collection is disabled.

4.4 Apple App Store / Google Play Store

Handles app distribution, purchase processing. Subject to Apple's and Google's respective privacy policies.

5. Data Storage and Security

5.1 Local Storage

Your data is stored locally on your device using secure storage (AsyncStorage) even when you're not signed in. This allows offline use of the app.

5.2 Cloud Storage

When you create an account and sign in, your data is synced to cloud servers hosted by Supabase. Your data is protected by encrypted connections (TLS/SSL), Row-Level Security policies ensuring only you can access your data, and secure authentication tokens.

5.3 Data Retention

• Active accounts: Data is retained as long as your account is active
• After account deletion: Deleting your account in the app permanently deletes your data immediately. Deletion requests sent by email are completed within 30 days. See Delete your account for what is kept.
• Guest mode: Data is stored only on your device and is not backed up to the cloud. Uninstalling the app will permanently delete this data.

6. Data Sharing and Disclosure

We do not sell your personal data. We only share information in the following circumstances:

• Collaboration: When you invite others to collaborate on a tally, they can see the tally data you've shared
• Service Providers: Supabase, RevenueCat, Sentry, and Google Analytics process data on our behalf as described in Section 4
• Legal Requirements: We may disclose information if required by law, court order, or governmental request
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred

7. Your Rights and Choices

7.1 Data Access

You can view all your data within the app. Use the Backup feature to export your complete data as a JSON file at any time.

7.2 Data Deletion

• Delete individual tallies: Remove any tally and its entries from within the app
• Delete your account: In the app, go to Settings, then Account, then Delete Account. Your account and data are deleted immediately. If you can't use the app, email vonimatic@gmail.com and we will delete them within 30 days. Full details: tallytoo.vercel.app/delete-account.
• Guest mode data: Clear local data by uninstalling the app

7.3 Notifications

You can enable or disable daily reminder notifications at any time in the app settings.

7.4 Subscription Management

Manage or cancel your subscription through your device's App Store or Google Play Store settings, or via the TallyToo app settings.

8. Children's Privacy

TallyToo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, contact us at vonimatic@gmail.com.

9. International Data Transfer

TallyToo is operated from New Zealand. Your data may be transferred to and processed in countries where data protection laws may differ from your jurisdiction. We take appropriate safeguards to ensure your data remains protected, including encryption in transit and at rest and contracts with our service providers that require adequate data protection.

10. Your Rights by Region

10.1 European Union / EEA / UK Users

If you are in the EU, EEA, or UK, you have additional rights under the General Data Protection Regulation (GDPR), including: right to access your personal data, right to rectification of inaccurate data, right to erasure ("right to be forgotten"), right to restrict processing, right to data portability, right to object to processing, and right to withdraw consent at any time.

To exercise any of these rights, contact us at vonimatic@gmail.com. You may also lodge a complaint with your local data protection authority.

10.2 California Users (CCPA / CPRA)

If you are a California resident, you have the right to: know what personal information we collect and how we use it, request deletion of your personal information, opt out of the sale or sharing of personal information (we do not sell personal data), and not be discriminated against for exercising your rights.

10.3 New Zealand Users

TallyToo complies with the New Zealand Privacy Act 2020. Your information is held by us in New Zealand. For privacy concerns, you may also contact the Office of the New Zealand Privacy Commissioner at privacy.org.nz.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, through in-app notification. Continued use of TallyToo after changes constitutes acceptance of the updated policy.