Privacy Policy

Last updated: November 1, 2026.

This policy explains what Tally ("we", "us"), an app developed and operated by DATA EAVER INC., collects when you use the Tally app and website (tally.dataeaver.ca), why, and what choices you have. Questions: contact@dataeaver.ca.

What we collect

You give us

• Account details — your name and email address, received from your sign-in provider (Google, Apple, or an email/password login) via Auth0 when you create an account.
• Receipts you add — the photo you capture or upload, and the details pulled from it or that you enter (merchant, date, amount, tax, category, line items, notes).
• Splits and groups — when you split an expense, the names you type for the people you split with, each person's share, the payments you record with them, and their email address if you choose to add it. In a group, its name, its members' names, the expenses added and the payments recorded between members. Comments on shared expenses, and a history of who added or changed each one.
• Payment details you choose to add — an Interac e-Transfer email or phone number, so people who owe you can pay you back.
• Receipts you forward by email — when you forward an e-receipt to your Tally address, the email (sender, subject, text and attachments) is read to pull out the receipt, the receipt is saved like a scanned one, and the email itself is not kept beyond that. Mail that doesn't match an account is ignored.
• Return and warranty dates you set on a receipt, to remind you before they pass.
• Reports and blocks — if you report a comment, a copy of it and why; the people you block.

Created as you use Tally

• Usage and diagnostics — app version, device type, crash reports, and performance/error data, through Azure Application Insights. Used to keep the service working; not used to track you across other apps or sites.
• Anti-abuse data — for people using the app without an account, a random device identifier and a per-device / per-IP count of AI scans, to enforce the free limit. It is not linked to an identity.
• Push notification token — if you allow notifications on iPhone while signed in, the token Apple gives your device, so we can send you activity on shared expenses. Removed when you sign out or delete your account.

The iPhone widget, Share to Tally and return reminders work on your device: the widget's numbers and anything you share in stay on the phone until you save them as a receipt.

We do not collect precise location, contacts, advertising identifiers, or health/financial-institution data, and we do not use tracking technologies for advertising.

How we use it

• Provide the core feature: read your receipt with AI and keep your expenses, dashboard, and month-to-month views.
• Sync your data across your devices and the web app when you are signed in.
• Keep the service secure and reliable (rate limiting, debugging, fraud prevention).
• Communicate with you about the service (e.g. security or account notices).

Legal bases (where GDPR/UK GDPR applies): performance of our contract with you (providing the app), our legitimate interests (security, improving the service), and your consent where required.

AI processing

When you scan a receipt, the image and any on-device OCR text are sent to Azure OpenAI (Microsoft) to extract the structured fields. Per Microsoft's terms for the Azure OpenAI Service, your prompts and outputs are not used to train the models and are not shared with OpenAI. The image is processed to return the extracted data; we then store it as described below.

Where your data is stored

Your account and receipts are stored in Microsoft Azure, in the East US 2 region: PostgreSQL for records and Azure Blob Storage for receipt images. Some processing by our providers (below) may occur in other regions.

Sharing

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract:

People you split with. When you split an expense, each person gets a link that shows them that one expense: the merchant, date, items, the names on the split and what each owes. Anyone with the link can open it, so send it only to that person. It never shows your receipt photo or anything else in your account, and it stops working when you remove the split. Members of a group you join see that group's members, expenses, balances and payments.

Invites. Each person you split with, and each person in a group you add, has an invite link. If you add their email and ask us to, we send that address one email with the invite link (and, for a person, where the two of you stand); we don't add it to any mailing list, and we don't email it again unless you ask. If they accept, by signing in from the link, they see the expenses you share with them and your balance from their side. Someone whose email has been verified by their sign-in provider is connected to invites sent to that address automatically.

Shared expenses. Everyone on an expense (or in its group) sees it, its comments and its history, including who changed what. If you add Interac e-Transfer details, they're shown to people who owe you, in the app and on their share links. We email you when someone adds an expense with you, records a payment or sends you a reminder; you can turn these emails off under Account, and everything also appears in the app's activity. When you send a reminder to someone who hasn't joined, we email it to the address you saved for them.

We may also disclose data if required by law, or to protect our rights, users, or the public.

Retention

• Account data and receipts are kept until you delete them or delete your account.
• Receipt images are additionally removed automatically after 24 months.
• Diagnostics are retained by Application Insights for 90 days.
• Backups — deleted data can remain in encrypted database backups for up to 35 days, and deleted images in storage for up to 7 days, before they are overwritten. Backups are only used to recover from an outage.
• Anti-abuse counters — per-IP counts are deleted within hours. The per-device free-scan count (a random ID and a number, never linked to an account) is kept so the free allowance can't reset.

Your choices and rights

• Access / export — email us and we will provide a copy of your account data.
• Correct — edit any receipt in the app; contact us to change account details.
• Delete — delete individual receipts in the app, or delete your entire account and its data from Account → Delete account (app and web). This is immediate and irreversible.
• Depending on where you live you may also have rights to restrict or object to processing, to data portability, and to lodge a complaint with your privacy regulator (in Canada, the Office of the Privacy Commissioner).

To exercise a right, email contact@dataeaver.ca.

Children

Tally is not directed to children under 16 and we do not knowingly collect their data.

Security

Data is encrypted in transit (HTTPS) and at rest by Azure. Access to production systems is limited. No system is perfectly secure; please use a strong, unique password or a trusted sign-in provider.

Changes

We may update this policy; we will change the "Last updated" date and, for material changes, notify you in the app or by email.

Contact

DATA EAVER INC. — contact@dataeaver.ca