Open source
Don’t take our word for it
Tally Stick is free and open source. The app, the shared encryption core, and the sync server are all public — you can read exactly how the cryptography works, or host the whole thing yourself.
Inspect the crypto
The encryption lives in one small, readable core package: XChaCha20-Poly1305 for encryption, BLAKE2b for key derivation, BIP39 for the recovery phrase, all via the audited libsodium library. No custom cryptography, nothing hidden.
Self-host the sync server
The blind sync server is a single small binary shipped as a Docker image. Point the app at your own server URL and your encrypted data syncs through infrastructure you control — the server still can’t read any of it.
License
Free and open source — see the LICENSE in the repository for the
exact terms.
Start using Tally Stick
No sign-up, no email, no password. Open it and go — your data is encrypted before it leaves your device.