Privacy Policy

Your sign-in account. When you sign in with Google or Apple, our authentication provider (Supabase) stores an account identifier and the details your sign-in provider shares: your email address and, where provided, your name and profile picture link. With Sign in with Apple you may choose to hide your email, in which case we receive an Apple relay address instead. We never see or store your Google or Apple password.

What you enter into Tallied. Accounts and balances, transactions (amounts, dates, categories, payees, notes and labels), people you lend to or borrow from, Regulars, categories, “Belongs to” labels, your currency and number format, and your settings.

Imported statements. When you import a bank or card statement, the file is read on your own device and is not uploaded or kept. Only the transactions you confirm are saved, together with a small amount of the original statement text for each one (such as the original description and running balance) so you can see where it came from. Tallied also remembers how you categorised a merchant and the column layout of a statement, so the next import is easier.

Tallied does not connect to your bank, and does not collect your bank or card login details, card numbers or government IDs. It does not use analytics, advertising or crash-reporting services, does not track you across other apps or websites, and does not access your device's advertising identifier, contacts, photos, location or microphone.

Only to provide Tallied to you: to sign you in, keep your records, and calculate the balances, net worth, savings, dues and analytics you ask Tallied to show. We do not use your information for advertising, profiling or marketing, and we do not sell or rent it.

• Supabase — sign-in and the database where your Tallied records are stored.
• Google — only if you choose “Continue with Google”. If your Google account has a profile picture, Tallied displays it by loading it from Google.
• Apple — only if you choose “Continue with Apple” in the iPhone app.
• Hostinger — hosts the Tallied website and app server. Like any web server, it handles standard technical request data (such as IP address, browser type and time of request) to deliver the service.

These providers process data on our behalf to run Tallied, and may do so in countries other than your own.

Tallied uses only what it needs to work: a sign-in session cookie (sb-wallet-auth-token) that keeps you signed in, and a short-lived cookie (wallet-auth-next, about ten minutes) that returns you to the right page after signing in. On your device it also remembers your light/dark theme and the account you used last, and briefly notes a completed sign-in in the iPhone and Android apps. There are no advertising or tracking cookies.

Tallied is private to your sign-in account. We do not share your records with other users or third parties, except with the service providers above to run Tallied, or where the law requires it. “Belongs to” labels (for example a partner or a business) are just labels inside your own account; they do not give anyone else access.

Data travels over encrypted (HTTPS) connections. The database enforces that each signed-in person can read and change only their own records. No method of storage or transmission is completely secure, but we work to protect your information and to keep access to it limited.

• See and correct your information at any time in the app.
• Export a full copy (JSON backup or CSV) from Settings → Import history & export.
• Delete everything you have in Tallied from Settings → Delete account. This permanently deletes all of your Tallied data and signs you out.

Tallied shares its sign-in with other Mirakai apps, so deleting your Tallied data does not delete that shared sign-in account or your data in other Mirakai apps. To have the sign-in account itself removed, or for any other request about your personal information, email hello@emirakai.com.

We keep your Tallied data until you delete it (or ask us to). Deleted data is removed from the live database straight away; any copies in our providers' routine backups are overwritten in the normal course. We may keep limited information where the law requires it.

Tallied is not directed at children and is not intended for use by anyone under 16.

We may update this policy as Tallied changes. The current version is always published at this address, with the date it was last updated.

Questions about privacy: hello@emirakai.com. For help with the app, see Tallied Support.