Privacy Policy

1. Introduction

Welcome to Tally ("we," "our," or "us"). Tally is a mobile expense tracking application that helps users manage shared expenses with friends, family, and household members.

We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Service, including:

• Account Information: When you create an account, we collect your name, email address, and password.
• Profile Information: Information you add to your profile, such as your first and last name.
• Financial Information: Information about your expenses, bills, and financial transactions that you input into the app.
• Contact Information: Information about your friends and contacts that you add to the app for expense sharing purposes.
• Communications: Information you provide when you contact us for support or send feedback.

2.2 Information Collected Automatically

When you use our Service, we may automatically collect certain information, including:

• Device Information: Information about your mobile device, including device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: Information about how you use our Service, including the features you use, the time and duration of your sessions, and your interactions with the app.
• Log Data: Information that your device sends whenever you use our Service, such as your IP address, app features used, and the time and date of your usage.

2.3 Image Processing

When you use our receipt scanning feature, we process images of receipts to extract text and data. These images are processed in real-time and are not stored on our servers. Once the text extraction is complete, the images are immediately discarded. Only the extracted text and structured data (merchant name, date, items, etc.) are stored in your account.

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing the Service: To operate, maintain, and provide you with the features and functionality of the Service, including expense tracking, bill splitting, and financial management.
• Personalization: To personalize your experience and deliver content and features relevant to your interests.
• Communication: To communicate with you about the Service, respond to your inquiries, and provide customer support.
• Improvement: To improve the Service, including by analyzing how users interact with our app and identifying areas for enhancement.
• Security: To protect the security and integrity of the Service and address fraudulent or illegal activity.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Third-Party Services

We use third-party services to help us operate and improve our Service. These services may collect, process, and store your information on our behalf. The third-party services we use include:

4.1 Firebase

We use Google Firebase for various services, including:

• Firebase Authentication: To manage user authentication and account creation.
• Firebase Firestore: To store and sync user data, including expense information.

Firebase's privacy practices are governed by the Google Privacy Policy.

4.2 Google Cloud Vision API

We use Google Cloud Vision API for optical character recognition (OCR) to extract text from receipt images. Receipt images are sent to Google Cloud Vision API for processing but are not stored by Google or by us after processing is complete. Google Cloud Vision API's privacy practices are governed by the Google Privacy Policy.

4.3 Google Gemini (via Firebase AI SDK)

We use Google's Gemini models (specifically Gemini 2.0 Flash via the Firebase AI SDK) to parse and categorize receipt text data and to generate financial insights. Only the extracted text (not images) is sent for processing. Google's privacy practices are governed by the Google Privacy Policy, and information regarding Firebase AI and Gemini can also be found in Google Cloud and Firebase documentation.

4.4 Expo

We use Expo for app development and to provide certain features. Expo's privacy practices are governed by the Expo Privacy Policy.

5. Data Storage and Security

5.1 Data Storage

Your data is stored in Firebase Firestore, a cloud-hosted database. Receipt images are processed in real-time and are not stored on our servers or by our third-party service providers. Only the extracted text and structured data (merchant name, date, items, etc.) are stored in your account.

5.2 Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

5.3 Data Retention

We retain your personal information for as long as necessary to provide you with the Service and fulfill the purposes outlined in this Privacy Policy. If you delete your account, we will delete or anonymize your personal information, unless we are legally required to retain it.

6. Your Rights and Choices

6.1 Account Information

You can review and update your account information at any time by logging into your account and visiting the settings page. You can also delete your account by contacting us.

6.2 Communication Preferences

You can opt out of receiving promotional communications from us by following the unsubscribe instructions included in each communication or by adjusting your notification settings in the app.

6.3 Data Access and Portability

You have the right to access the personal information we hold about you and to receive a copy of this information in a structured, commonly used, and machine-readable format.

6.4 Data Correction and Deletion

You have the right to correct inaccurate or incomplete personal information about you and to request the deletion of your personal information under certain circumstances.

6.5 Objection and Restriction

You have the right to object to our processing of your personal information and to request that we restrict the processing of your personal information under certain circumstances.

7. Children's Privacy

Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete that information. If you believe we have collected personal information from a child under 13, please contact us.

8. International Data Transfers

Your information may be transferred to, and processed in, countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. By using our Service, you consent to the transfer of your information to these countries.

We take steps to ensure that your information receives an adequate level of protection in the countries in which we process it, including through appropriate contractual safeguards.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the changes.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Email: [email protected]