Split expenses. No accounts.

Split the bill without the awkward maths.

Track shared expenses for trips, housemates or couples. Add an expense, split it any way, and Tally Stick shows the simplest set of payments to settle up. Free, open source, encrypted end to end.

No accounts End-to-end encrypted Open source

Free · works offline · installs like an app · nothing to sign up for.

An expense group with live balances
An expense group with live balances

What it does

Made for splitting fairly

  • Balances that simplify themselves

    See net balances and the simplest who-pays-whom, so a group settles in one or two payments instead of six.

  • Split any way

    Equally, by exact amounts, or by shares. Set who paid and who owes on every expense.

  • Recurring expenses

    Rent, subscriptions and standing costs post themselves automatically as they come due — no monthly re-entry.

  • Settle up

    Record payments between members and watch balances zero out.

  • Share the group, live

    Everyone in the group shares one encrypted space; balances update on every device as expenses come in.

  • Private & free

    No account, no email, no password. Encrypted on your device before it syncs, free and open source.

How it works

Encrypted, without accounts

  1. 1

    One recovery phrase

    On first use, Tally Stick generates a 24-word recovery phrase. Those words are your identity — there's no account, username, or password behind them.

  2. 2

    The phrase unlocks your keystore

    The phrase derives a master key that encrypts a small personal keystore — the list of shared spaces you belong to and the key for each.

  3. 3

    Each shared space has its own key

    An expense group has one group key. Everything in it is stored as documents encrypted with that key. Sharing the space means sharing that one key — via a QR code or invite.

  4. 4

    A blind server just relays ciphertext

    Your devices sync through a server that stores and forwards encrypted blobs and pushes live updates. It never holds a key, so it cannot read anything it syncs.

Security

Even the sync server can’t read it

  1. One recovery phrase 24 BIP39 words derives your master key
  2. Master key encrypts your keystore the list of spaces you belong to
  3. Group key encrypts one space's documents every expense, encrypted
Blind sync server

Stores & relays encrypted blobs. Fans out live updates. Cannot decrypt anything.

The server only ever sees ciphertext and random-looking identifiers — never a key, a name, or a expense group.

How the encryption works →

Why it’s different

Private by design

  • End-to-end encrypted

    Encryption and decryption happen only on your devices. Plaintext never leaves the device.

  • The server is blind

    It's untrusted infrastructure by design: it stores and relays ciphertext and never holds a key. Compromising the server leaks nothing readable.

  • No accounts, nothing to breach

    No email, no password, no profile. There's no user database to leak — just anonymous encrypted blobs keyed by hashes.

  • Open source

    The apps, the encryption core, and the server are all public. Inspect the crypto or self-host the server — you don't have to take our word for it.

  • Standard, modern crypto

    libsodium primitives (XChaCha20-Poly1305, BLAKE2b) and BIP39 phrases. No custom cryptography.

  • Works offline

    A PWA with a local encrypted cache — it works without a connection and syncs when it's back.

Start using Tally Stick

No sign-up, no email, no password. Open it and go — your data is encrypted before it leaves your device.