Split expenses. No accounts.
Split the bill without the awkward maths.
Track shared expenses for trips, housemates or couples. Add an expense, split it any way, and Tally Stick shows the simplest set of payments to settle up. Free, open source, encrypted end to end.
Free · works offline · installs like an app · nothing to sign up for.
What it does
Made for splitting fairly
-
Balances that simplify themselves
See net balances and the simplest who-pays-whom, so a group settles in one or two payments instead of six.
-
Split any way
Equally, by exact amounts, or by shares. Set who paid and who owes on every expense.
-
Recurring expenses
Rent, subscriptions and standing costs post themselves automatically as they come due — no monthly re-entry.
-
Settle up
Record payments between members and watch balances zero out.
-
Share the group, live
Everyone in the group shares one encrypted space; balances update on every device as expenses come in.
-
Owners & members
Whoever starts a group owns it — add people by QR, hand a co-owner the keys, or remove someone. Remove a member and the group re-keys itself, so they can't see anything new.
-
All your devices
Scan a code or enter your phrase on a new phone or tablet and every group is there. Offline changes catch up automatically the moment you reconnect.
-
Private & free
No account, no email, no password. Encrypted on your device before it syncs, free and open source.
How it works
Encrypted, without accounts
- 1
One recovery phrase
On first use, Tally Stick generates a 24-word recovery phrase. Those words are your identity — there's no account, username, or password behind them.
- 2
The phrase unlocks your keystore
The phrase derives a master key that encrypts a small personal keystore — the list of shared spaces you belong to and the key for each.
- 3
Each shared space has its own key
An expense group has one group key. Everything in it is stored as documents encrypted with that key. Sharing the space means sharing that one key — via a QR code or invite — and the space's owners decide who's in. Remove someone and the key is rotated and re-shared to everyone who remains, so they see nothing new.
- 4
A blind server just relays ciphertext
Your devices sync through a server that stores and forwards encrypted blobs and pushes live updates. It never holds a key, so it cannot read anything it syncs.
Security
Even the sync server can’t read it
- One recovery phrase 24 BIP39 words derives your master key
- Master key encrypts your keystore the list of spaces you belong to
- Group key encrypts one space's documents every expense, encrypted
Stores & relays encrypted blobs. Fans out live updates. Cannot decrypt anything.
Why it’s different
Private by design
-
End-to-end encrypted
Encryption and decryption happen only on your devices. Plaintext never leaves the device.
-
The server is blind
It's untrusted infrastructure by design: it stores and relays ciphertext and never holds a key. Compromising the server leaks nothing readable.
-
No accounts, nothing to breach
No email, no password, no profile. There's no user database to leak — just anonymous encrypted blobs keyed by hashes.
-
Open source
The apps, the encryption core, and the server are all public. Inspect the crypto or self-host the server — you don't have to take our word for it.
-
Standard, modern crypto
libsodium primitives (XChaCha20-Poly1305, BLAKE2b) and BIP39 phrases. No custom cryptography.
-
Works offline
A PWA with a local encrypted cache — it works without a connection and syncs when it's back.
The Blind Sync suite
One private foundation, more than one app
Blind Sync is a small family of apps that all share the same promise — no accounts, end-to-end encrypted, and open source. Set up once and the same private identity works across every app.
Start using Tally Stick
No sign-up, no email, no password. Open it and go — your data is encrypted before it leaves your device.