Privacy Policy

Tallyvora records what you type in: balances, spending, income, bills, and money you lend or borrow. It does not connect to banks, card networks or mobile wallets (such as bKash, Nagad or Rocket), never asks for banking passwords, and never moves money. Naming a bank or wallet in Tallyvora is only a label.

• Account details: your name, email address, and a one-way hash of your password (we can’t read your password). If you turn on two-step verification we store an encrypted authenticator secret and hashed recovery codes.
• Sign in with Google or Apple: the account identifier the provider gives us, the email address it shares (for Apple, this may be a private relay address if you chose “Hide My Email”), and, for Apple, an encrypted token we use only to disconnect Tallyvora from your Apple ID if you delete your account or disconnect Apple. We never receive your Google or Apple password.
• Records you create: accounts and balances, transactions, categories, tags, notes, budgets, goals, bills, reminders, loans and repayments, and receipts or files you attach.
• People you add: names and any optional phone number, email address or notes you enter for people you lend to or borrow from. Tallyvora never contacts these people.
• Device and security information: your device’s push-notification token and model name (so reminders reach you), and for each sign-in the time, IP address and app or browser type, which we use to keep your account secure, limit abuse and show you your signed-in devices.
• Reminder delivery records: when a reminder was created and whether the push or email service accepted it.
• Subscription status: if you buy Tallyvora Plus, whether your subscription is active, its renewal or expiry date and the store it came from. Payments are handled by Apple or Google; we never see your card or payment details.
• Messages you send us: if you email support, your message and our reply.

We do not use advertising or third-party analytics SDKs in Tallyvora, and we do not track you across other apps or websites.

• To provide Tallyvora: store your records, calculate balances and reports, and keep your data in sync between your devices.
• To send the reminders and summaries you set up, by in-app notification, push notification and, if you turn it on, email.
• To secure your account: verification codes, password resets, two-step verification, detecting suspicious sign-ins and preventing abuse.
• To provide Tallyvora Plus when you subscribe, and to restore it on your other devices.
• To answer support requests and to fix problems.

We process your information to perform our agreement with you (providing the service you asked for), for our legitimate interest in keeping Tallyvora secure and working, and to meet legal obligations.

By default, push notifications don’t show amounts, because notifications can appear on a locked screen. You can choose to include amounts in Settings.

We share information only with service providers that run parts of Tallyvora for us, under contracts that limit their use to that purpose:

• Hetzner Online — server hosting (our servers are in Singapore).
• Expo, Apple Push Notification service and Google Firebase Cloud Messaging — delivering push notifications to your phone.
• Apple and Google — Sign in with Apple, Sign in with Google, and App Store / Google Play purchases.
• RevenueCat — confirming your subscription status with the App Store and Google Play. It receives a random account identifier, not your financial records.
• Our email delivery provider — sending verification codes, password resets and email reminders you turn on.
• Our backup storage provider — storing encrypted backup copies so data can be recovered after a failure.

We don’t sell or rent your information. We may disclose information if the law requires it, to protect people from harm, or as part of a merger or sale of the business, in which case this policy continues to apply to your information.

Tallyvora is run from servers in Singapore, and our service providers may process information in other countries, including the United States. Where required, we rely on appropriate safeguards for these transfers.

• Your account and records are kept until you delete them or delete your account.
• When you delete your account, your sign-in, records, attachments, contacts, reminders and activity log are deleted from our live systems immediately. Backup copies expire within 30 days.
• Verification and reset codes expire within 30 minutes; sign-in records are kept while the session exists.
• Apple and Google keep their own records of purchases under their policies.

• Export: Settings › Data › Export everything downloads all your records as one file.
• Correct: you can edit your records and profile at any time. Posted financial records are corrected with a reversal so your history stays accurate.
• Delete: Settings › Data › Delete my account, or see how account deletion works.
• Notifications: turn push or email reminders on or off in Settings.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your information, and to complain to a data-protection authority. To exercise them, email support@supportechinc.com from your account’s email address.

Connections to Tallyvora use HTTPS. Passwords are stored as strong one-way hashes, sensitive tokens are encrypted, and every request is checked so one account can never read another account’s data. Two-step verification and app lock with Face ID or fingerprint are available. No system is perfectly secure; if we learn of a breach that affects you, we’ll tell you as the law requires.

Tallyvora is not directed to children under 13, and we don’t knowingly collect their information. If you believe a child has created an account, contact us and we’ll delete it.

If we make material changes, we’ll update the effective date above and tell you in the app or by email before they take effect.

Supportech Incorporated · support@supportechinc.com