Your receipts are yours. Full stop.

Effective 2 July 2026 · Applies to the Tally iOS app

The short version

Tally collects nothing. There is no account to create, no server of ours holding your data, no analytics, no ads, no trackers, and no third-party SDKs watching what you do. Everything the app knows lives in the app, on your iPhone. The only times Tally touches the internet are five things you explicitly choose — listed below — and none of them carry your receipt data to us, because there is no “us” to send it to.

What Tally stores — on your device

Everything you put into Tally is stored locally on your iPhone, protected by iOS file protection, and — if you turn it on — the Face ID app lock:

Receipt scans, photos and PDFs you capture or import
The details Tally reads from them — merchants, totals, line items, dates
Warranties, reminders, claims and their attachments
Splits and the people you split with
Your conversations with the on-device assistant
Settings and preferences

The scanner and the assistant are on-device AI models — the scanner’s ships inside the app, the assistant’s arrives once via the optional download below. Your scans and your questions are processed on your iPhone and never leave it.

What we collect about you

Nothing. Tally has no accounts, no sign-in, no usage analytics, no crash-reporting SDKs, no advertising identifiers, and no way for us to see your data. We cannot sell, share, or lose what we never receive.

The only five times Tally touches the network

Tally is offline-first by design. Each of these is opt-in or user-initiated, and together they are the complete list — no background calls, no phoning home, nothing else on the wire:

iCloud sync — optional, off by default

If you turn on sync, your receipts move between your devices through Apple's CloudKit, inside your own private iCloud account. We operate no servers and cannot read, access, or recover any of it. Turning sync off stops it. Settings can also clear the heavy receipt images from iCloud to free storage; Erase All Data (with sync on) removes the full cloud copy.

iCloud Drive backups — only when you tap Back Up

A backup is a single archive you can seal with a passphrase only you know — encrypted on your device before it's copied into your own iCloud Drive. Skip the passphrase and it's a plain archive; either way it lives in your iCloud, and never touches anything we control.

Exchange-rate refresh — only when you tap Recompute

To convert foreign receipts into your home currency, Tally asks a public exchange-rate service for reference rates. The request contains currency codes and a date — for example “GBP to SAR on 13 May 2024” — never receipt contents, amounts, merchant names, or account identifiers. As with any internet request, the rate service can see your device's IP address; a bundled offline rate table means many recomputes never go online at all.

App Store purchases — handled entirely by Apple

Buying Tally Pro, restoring a purchase, or managing your subscription goes through Apple's StoreKit, directly between your device and Apple. We never see your payment details. Apple's own privacy policy governs that transaction.

The assistant's AI model — one download, only when you ask

The assistant's language model is too big to ship inside the app, so the first time you open the assistant it offers a one-time download (about 3.5 GB, Wi-Fi by default). The request fetches a fixed, published model file and carries nothing about you or your receipts — the hosting service (Hugging Face) can see your device's IP address, as with any download. The app verifies the file byte-for-byte before using it, and after that the assistant never goes online. The scanner's model still ships inside the app.

You stay in control

Delete any receipt, warranty, split or conversation at any time.
Erase everything at once from Settings.
Get your data out whenever you like — spreadsheets, PDFs, images, or a complete backup file — no purchase required for any of it.
Deleting the app deletes everything it stored on the device. Anything you placed in your own iCloud (sync data or backup files) stays in your iCloud until you remove it.

Children

Tally is not directed at children under 13, and since it collects no personal information from anyone, it collects none from children either.

Changes to this policy

If Tally ever adds a feature that touches the network, it will be listed on this page and called out in the app before you use it — the same allow-list discipline the app is built on. The effective date above changes whenever this page does.

Contact

Tally is developed and published by SyrianApps. Questions about privacy? [email protected]