Your bank password never reaches Tally, and your data is never sold.
Tally keeps what it needs to run your budget: your account details (your email and how you sign in), the money information you add or connect (transactions, budgets, income, bills and net-worth entries), and any profile details you choose to add. If you link a bank or Apple Wallet, Tally receives account names, balances and transactions from Plaid, Enable Banking or Apple, as described in section 3. If you turn on notifications, Tally keeps a device token to send them. If you subscribe to Tally Pro, Apple and the app tell Tally's server when your subscription starts, renews, changes, ends or is refunded, so Tally knows whether your account has Pro. To keep the app working and improve it, Tally also receives basic diagnostics and usage information: a short report when something fails; the crash, freeze, slow-start and battery- or storage-use reports that iOS prepares for Tally — which name the Tally version, the iPhone model and iOS version, how long a freeze or start-up took and the place in Tally's own code where it happened, never your data or anything on screen; and which screens are used. A report is linked to your account for 14 days, so we can tell how many people a problem affects. You can switch these off at any time in Settings → Security & Privacy; Tally still notes the app version, your language, region and time zone, a random identifier for this installation, and the days you open the app. Tally has no advertising and no third-party advertising or analytics code.
Your information is used only to run Tally: to show your budgets, transactions and insights; to sync your linked accounts; to send the notifications you turned on; to run family sharing if you use it; to answer your support requests; and, through the diagnostics and usage information described in section 1, to keep Tally working and see where it can be easier to use. Your personal and financial data is never sold, and never used to advertise anyone else's products. We may occasionally email you news and offers about Tally itself, sometimes only to people who have not opened the app for a while or who are on an older version of it; every one of those emails has a one-click unsubscribe, and unsubscribing never stops security emails, sign-in codes or notices about your subscription.
Plaid (US banks). You sign in to your bank on Plaid's screen. Your bank username and password never reach Tally. Plaid returns account names, balances and transactions, read-only; Tally has no ability to move money, make payments or change anything at your bank. The access token that lets Tally read this data is stored encrypted with AES-256-GCM on our server. Plaid's handling of your data is described at plaid.com/how-we-handle-data and plaid.com/legal.
To notice a bank whose transactions have stopped arriving, Tally keeps a 60-day history of each linked account's balance and compares it with that account's transactions. When they disagree, Tally may ask Plaid to check that bank again — a few times a day at most — and shows the difference as money 'arriving'; it is never added to your totals.
Apple Wallet (Apple Card and Apple Cash in the US; in the UK, the bank accounts you connect in Wallet). With your permission, Tally reads transactions and balances from Apple Wallet on your device through Apple's FinanceKit. Tally never signs in to your bank. They are stored on Tally's server like bank transactions so your budgets, insights and family sharing work with them. You can revoke this at any time in iOS Settings → Privacy & Security → Wallet.
Enable Banking (banks in the European Economic Area). You give consent on your bank's own pages through Enable Banking Oy, a licensed account-information service provider in Finland; your bank sign-in never reaches Tally. It returns account names, a masked account number, balances and transactions — read-only, for the accounts you choose — for up to 180 days. Tally stores the connection reference encrypted. Removing the bank, deleting your account, or Tally Pro ending (after three days) ends the connection.
Everything between the app and Tally's server travels over HTTPS (TLS 1.2 or newer, enforced by iOS App Transport Security). Your session token is stored in the iOS Keychain. Passwords are hashed with bcrypt (cost 12) and never stored in plain text; password-reset codes are stored hashed and expire after 15 minutes. Bank access tokens are encrypted with AES-256-GCM before they are stored. Your data is kept in a database run by our cloud hosting provider in the United States. Every request to our server is checked against your signed session token and scoped to your account. Inside the app you can add Face ID or Touch ID lock, lock on background, auto-lock and Hide Amounts in Settings → Security & Privacy. No system is perfectly secure and we do not claim otherwise; if you find a problem, please tell us at tallysupportline@gmail.com.
Tally AI answers questions about your money on your iPhone first: exact figures and the changes you ask for always, and, where your iPhone has Apple Intelligence turned on, most other questions too. Other questions — on an iPhone without Apple Intelligence, most of them — can go to an online assistant, but only if you allow it: Tally asks first, and you can change your answer at any time in Settings → Security & Privacy. Once you allow it, those questions are sent, with the earlier messages in that chat and a summary of your money, through Tally's server to an AI service provider that writes the answers for Tally; that provider may process them outside the United States. Versions of Tally before 2.6 do not ask first: they send questions this way unless the app's On-device switch is on and your iPhone answers them itself, and their summary can also include the transactions your family shares with you in Tally. The summary covers your spending and income by month and in total, your budgets and categories, top merchants, recurring bills, account names and balances, what you own and owe, the totals owed between you and others, and your recent transactions. Tally sends it only to answer your question, and nothing is sent unless you ask one.
Connected AI. If you connect an AI assistant of your own — for example Claude, ChatGPT or another app that supports the Model Context Protocol — or create an API key, in Security & Privacy → Connected AI, that assistant or key can read your Tally data. Nothing is connected until you approve it in the app, with Face ID or your passcode and a number you type, or create the key yourself. It can read only what you chose when you approved it — your spending and budgets, your transactions from up to the last 12 months, or your balances and net worth — and it can never move money, change anything in Tally, see your bank sign-in, or see what your family or group shares with you. What it reads is then governed by that assistant's own privacy policy, not this one. You can disconnect an assistant or revoke a key at any time in the app; signing out everywhere or changing your password ends them all, and every connection and key ends after a year at the latest.
Tally uses these services, each governed by its own privacy policy: Plaid Inc. (plaid.com/legal) for US bank connections; Apple FinanceKit (Apple Wallet) for Apple Card, Apple Cash and UK bank accounts connected in Wallet; Enable Banking Oy (enablebanking.com) for bank connections in the European Economic Area, where offered; Sign in with Apple (apple.com/legal/privacy) and Google Sign-In (policies.google.com/privacy), whose sign-in tokens we verify on our server against Apple's and Google's public keys; Apple's StoreKit for Tally Pro subscriptions; the Apple Push Notification service for notifications you opt into; Resend (resend.com) for email: password-reset and sign-in codes, security notices, notices about your Tally Pro subscription, and the occasional news about Tally that you can unsubscribe from; a cloud hosting provider in the United States that runs Tally's server and database; and an AI service provider that writes Tally AI's online answers (see section 5). Tally is not responsible for the privacy practices of these services.
Apart from the services in section 6, which work on Tally's behalf, your data is shared only with the people you choose, through family sharing, which is opt-in: you decide whether to share transactions, budgets and income, you can mark any transaction private, and account balances are never shared with family members. It is also read by any AI assistant or API key you connect yourself, as described in section 5. Tally never sells your data and never shares it with advertisers.
Your data is kept for as long as your account is active. You can disconnect a bank at any time in Bank Sync, which revokes that connection at Plaid. You can delete your account at any time in Settings → Delete Account. Deletion revokes Tally's bank connections at Plaid, removes your Apple Wallet data from our server, asks Apple to disconnect Tally from your Apple ID if you signed in with Apple, and deletes your transactions, balance history, budgets, notifications, usage information, family memberships and account. Upon account deletion your data is removed from our systems; our hosting provider's backups expire on their own schedule.
Tally is for people 16 and older, and you confirm you are 16 or older when you create an account. We do not knowingly collect personal information from anyone under 16. If we learn that someone under 16 has created an account, we will delete the account and its data promptly.
You can see all of your data in the app, correct it, export it (CSV from Settings → Data, and The Money Book PDF from More), disconnect banks, revoke Apple Wallet access in iOS Settings, and delete your account. Depending on where you live you may have further rights under local law, including the right to withdraw consent; write to us at the address below and we will help.
Who is responsible for your data. Tally is operated by the Tally group, in the United States, which is the data controller for the purposes of the UK and EU General Data Protection Regulation. You can reach us at any time at tallysupportline@gmail.com.
Why we are allowed to hold it. Most of what Tally stores is held because you asked for a budgeting service and we cannot provide one without it — your account, your transactions, your budgets, and the family or group sharing you switched on (Article 6(1)(b), performance of a contract). Some things are held only on your separate, opt-in consent, and you can withdraw any of them at any time without losing the rest: linking a bank, connecting Apple Wallet, push notifications and, from Tally 2.6, Tally AI's online assistant (Article 6(1)(a)). In versions of Tally before 2.6, which do not ask first, a question you send Tally AI goes to its online assistant because you asked Tally AI for that answer (Article 6(1)(b)). Keeping the service secure and available — rate limiting, abuse prevention, error monitoring — and learning from the usage information described in section 1 where Tally is hard to use rest on our legitimate interest in running a safe service that works (Article 6(1)(f)). You can object at any time: the Share Diagnostics and Share Usage switches in Settings → Security & Privacy stop the app sending either.
Sensitive details inside bank transactions. A transaction description written by your bank can reveal things the law treats as special — a pharmacy, a clinic, a place of worship, a political donation, a union. Tally does not look for this, does not categorise on it, does not profile you with it, and never shares it. But when you connect a bank you are asking Tally to store the descriptions your bank sends, and that is your explicit consent to do so (Article 9(2)(a)). You can edit any description, mark any transaction private so it is never shared, delete any transaction, or disconnect the bank entirely.
Where your data is, and why that is lawful. Tally's server and database are hosted in the United States, and the questions you send Tally AI's online assistant may be processed in another country outside the European Union. Sending your data there is necessary to perform the contract you entered into with us, and where you connect a bank or use an optional feature you have given explicit consent knowing the transfer takes place (Article 49(1)(a) and (b)). The third parties who may process your data on our behalf are listed in section 6.
How long we keep it. Your financial data, and the usage information described in section 1, are kept while your account is open and deleted when you delete your account, as described in section 8. Everything else runs on a fixed schedule that is enforced automatically, not by memory: password-reset codes expire in 15 minutes, sign-in codes in 10, trusted devices after 90 days, sessions after 30 days, bank sync records after 90 days, your accounts' balance history after 60 days, a removed European bank's record 30 days after removal and its monthly access log after 13 months, a connected assistant's or API key's record 30 days after it ends and its daily usage counts after 90 days, and technical error reports, including the crash and performance reports in section 1, after 90 days at the outside — sooner once resolved — and their link to your account after 14 days. An hourly job deletes anything past its date.
Your rights. You have the right to ask for a copy of your data, to correct it, to have it erased, to restrict or object to how it is used, to receive it in a portable format, and to withdraw any consent you gave. Most of these you can exercise yourself inside the app immediately: everything is visible on screen, editable, exportable as CSV from Settings → Data and as a PDF report from More, and erasable from Settings → Delete Account. For anything else, write to tallysupportline@gmail.com from the address on your account and we will answer within one month. You also have the right to complain to your national data protection authority — in the United Kingdom, the Information Commissioner's Office.
No automated decisions about you. Tally does not make any decision about you by automated means that produces a legal effect or anything similarly significant. Categories, insights, scores and forecasts are suggestions shown to you, based on your own data, that you can change or ignore.
Bank connections in Europe. In the United Kingdom, a bank account you connect in Apple Wallet can be shared with Tally through Apple's FinanceKit, as described in section 3: Apple provides the data on your device, with your permission, and Tally never signs in to your bank. Where Tally offers it, a bank in the European Economic Area can also be connected through Enable Banking Oy, a licensed account-information service provider: you approve read-only access on your bank's own page, Tally receives account names, balances and transactions for the accounts you choose, and you can remove the bank at any time in More → Bank Sync. Removing the bank, deleting your account, or Tally Pro ending (after three days) ends the connection. Otherwise, a European user adds transactions manually or imports a file exported from their bank.
The website at tallybudget.link is separate from the app, and it counts visits so we can tell whether anyone is finding it. There are no cookies and no advertising or analytics products, and the only thing stored on your device is the site's language: the one you pick, or on your first visit the one your browser asks for. Cloudflare, which serves the site, passes on the country a request came from and turns the address into a number using today's date and a secret Tally holds. That number changes every day and cannot be turned back into an address; the address itself is never sent on and never stored. What is kept is the page, the country, the language the browser asked for, whether the screen is a phone's or a computer's, where the visit came from (a search engine, a social app, an AI assistant, or a link we handed out), how long the page was read and how far down it was read. None of it is tied to a Tally account, and nobody can be identified from it. Search engines stopped telling websites what people typed years ago, and Tally makes no attempt to find out by other means.
We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. Your continued use of Tally after such changes constitutes acceptance of the updated policy.
For privacy-related inquiries, please contact us at tallysupportline@gmail.com.
Last updated: September 30, 2026