Privacy Policy

Tallio operates the Service. If you have any questions about this policy or your data, contact us at privacy@tallio.app.

We collect only what we need to run the Service:

• Account information: depending on how you sign in, we process your username, display name, email address, profile picture, and authentication identifiers. We do not receive your Google or Apple password.
• Content you create: groups, participants (including names of people who do not have an account), expenses, amounts, categories, notes, balances, settlements, and recurring rules.
• Notification information: if you enable push notifications, we process a device push token, platform and app details, and your notification preferences.
• Usage and diagnostic data: app version, device type, operating system, language, IP address, logs, crashes, performance data, and sampled session-replay recordings of screens and interactions used to secure and improve the Service.
• Website analytics: page visits and interactions, referring page, browser or device information, and online identifiers collected through Google Analytics when it is enabled on our website.

We do not collect payment card numbers or bank details. Tallio records who owes whom; it does not process payments.

• To provide and maintain the Service, including sign-in, group management, and expense splitting.
• To calculate balances, settlement suggestions, and reports.
• To send notifications you enable and remember your notification preferences.
• To keep the app secure, prevent abuse, and fix bugs.
• To understand website use and improve our pages and Service.
• To respond to your support requests.
• To comply with legal obligations.

We do not use your personal data for advertising, and we do not sell your personal data.

We share information only in these cases:

• With other members of a group you belong to, who can see the group's participants, expenses, and balances.
• With service providers that provide hosting, Google or Apple sign-in, push delivery, Google Analytics, Sentry diagnostics and session replay, and Google Gemini AI processing on our behalf.
• When required by law, or to protect the rights, safety, and property of Tallio and its users.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you.

A group can generate a public "share link". Anyone with the link can view group reports, balances, and settlement instructions without signing in, and can join through Tallio. Only create and share links with people you trust, and you can regenerate or disable a link at any time.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep it to meet legal obligations.

Depending on where you live (including under the EU GDPR and the California CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export a copy of your data (portability).
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email privacy@tallio.app. We will not discriminate against you for exercising them.

You can start account deletion in the app from Profile > Delete account. If you have an existing auto-renewing app-store subscription, cancel it in the store first; deleting a Tallio account does not stop store billing. Tallio then places the request in a 24-hour cancellation window; you can sign in during that window and choose Keep my account. After the window, we delete or anonymize associated personal data, except where retention is required by law. To keep shared group history understandable for other members, some content you created may be retained in anonymized form. You may also contact privacy@tallio.app for help.

We use encryption in transit and reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

The Service is not directed to anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

Your data may be processed and stored in countries other than your own. Where required, we use appropriate safeguards for such transfers.

We rely on trusted third parties including Google and Apple for sign-in and app-store services, Expo for push delivery, Google Analytics for website analytics, Sentry for diagnostics and sampled session replay, Google Gemini for AI processing, and providers for hosting. We require service providers that process personal data for Tallio to apply protection consistent with this policy and applicable law. Their handling is also governed by their privacy policies and service terms. Tallio uses paid Gemini API services; Google states that paid-service prompts, images, and responses are not used to improve its products, though limited logging may occur for safety, security, and legal compliance.

Tallio collects your AI Data Sharing choice from the in-app consent screen and stores it with your account so the choice follows your signed-in devices. No content is sent to Google Gemini unless permission is enabled and you run an AI feature. Automatic categorization sends the expense title and optional note to suggest a category. Whiteboard sends notes, participant names, and group currency to create editable expense drafts. Receipt Scan sends selected receipt images, participant names, category options, and group currency to extract expense details. Tallio sends this data through its server to Google Gemini only for the requested result. We do not sell it, use it for advertising, or disclose it for unrelated purposes.

Receipt images are not stored in Tallio's database. Tallio keeps a temporary server copy only while preparing and processing the Gemini request, deletes it after processing, failure, or discard, and removes any leftover temporary file within 24 hours. Confirmed expenses do not retain receipt images. Tallio stores Whiteboard notes when you save a Whiteboard draft and deletes them with the related draft or account. You may withdraw AI permission at any time in Profile > AI Usage; this blocks new AI requests, while requests submitted before you withdraw permission may finish processing. AI-generated results are suggestions, so review them before saving and do not submit information you are not permitted to share.

We may update this policy from time to time. We will change the effective date above and, for material changes, provide notice in the app. Continued use of the Service after changes means you accept the updated policy.

Questions about your privacy? Email us at privacy@tallio.app.