Privacy

We can’t sell what we can’t see

Privacy here isn’t a policy promise — it’s the architecture. There’s no account and no readable data on the server, so there’s nothing to mine, sell, or leak.

What the server never sees

  • Your expenses or any content
  • Names of people or spaces
  • Who belongs to a space
  • Your recovery phrase or any key
  • An email address or password (there are none)

What it does handle (metadata)

  • Opaque, random-looking identifiers
  • The size and timing of encrypted blobs
  • Your IP address (as any web server does)
  • A version number and change counter per document

The marketing sites themselves collect nothing — no email capture, no contact forms, no third-party trackers. The only measurement is privacy-respecting, cookieless Cloudflare Web Analytics on the website; the Tally Stick app itself reports to nothing.

Start using Tally Stick

No sign-up, no email, no password. Open it and go — your data is encrypted before it leaves your device.