Privacy Policy

Tallio operates the Service. If you have any questions about this policy or your data, contact us at privacy@tallio.app.

We collect only what we need to run the Service:

• Account information: when you sign in with Google, we receive your name, email address, and profile picture. We do not receive your Google password.
• Content you create: groups, participants (including names of people who do not have an account), expenses, amounts, categories, notes, balances, settlements, and recurring rules.
• Usage and device data: app version, device type, operating system, language, and diagnostic or crash information used to keep the app stable.

We do not collect payment card numbers or bank details. Tallio records who owes whom; it does not process payments.

• To provide and maintain the Service, including sign-in, group management, and expense splitting.
• To calculate balances, settlement suggestions, and reports.
• To keep the app secure, prevent abuse, and fix bugs.
• To respond to your support requests.
• To comply with legal obligations.

We do not use your personal data for advertising, and we do not sell your personal data.

We share information only in these cases:

• With other members of a group you belong to, who can see the group's participants, expenses, and balances.
• With service providers that host our servers and provide sign-in, analytics, and crash reporting on our behalf, under contracts that require them to protect your data.
• When required by law, or to protect the rights, safety, and property of Tallio and its users.
• In connection with a merger, acquisition, or sale of assets, in which case we will notify you.

A group can generate a public "share link". Anyone with the link can view that group's read-only reports, balances, and settlement instructions without signing in. Only create and share links with people you trust, and you can regenerate or disable a link at any time.

We keep your information for as long as your account is active or as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep it to meet legal obligations.

Depending on where you live (including under the EU GDPR and the California CCPA/CPRA), you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export a copy of your data (portability).
• Object to or restrict certain processing.
• Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, email privacy@tallio.app. We will not discriminate against you for exercising them.

You can request deletion of your account and associated personal data at any time by contacting privacy@tallio.app from the email tied to your account. To keep shared group history understandable for other members, some content you created may be retained in anonymized form.

We use encryption in transit and reasonable technical and organizational measures to protect your data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

Your data may be processed and stored in countries other than your own. Where required, we use appropriate safeguards for such transfers.

We rely on trusted third parties such as Google for sign-in and providers for hosting, analytics, and crash reporting. Their handling of data is governed by their own privacy policies.

We may update this policy from time to time. We will change the effective date above and, for material changes, provide notice in the app. Continued use of the Service after changes means you accept the updated policy.

Questions about your privacy? Email us at privacy@tallio.app.