Privacy Policy

Operator and scope

Tallio is operated by Szymon Cieśla. For support and privacy requests, email talliosupport@icloud.com. Szymon Cieśla is the controller of personal data received for Tallio support and administration. This policy covers the Tallio app, this GitHub Pages website and support correspondence.

Tallio is a shared-expense ledger for two people. It has no separate Tallio account and no developer-operated ledger backend. The app works with local storage and Apple services; contacting support or visiting the website involves additional processing described below.

Data used by the app

Tallio stores expense and settlement amounts, dates, categories, notes, payer and split information; recurring rules; categories and budgets; household display names, currency and settings; and identifiers and synchronization state needed to operate the ledger. It also stores purchase-entitlement state to provide Pro access.

These records support the features you choose: calculating balances, managing shared entries, reporting spending and syncing a household. The developer does not receive your ledger through a Tallio backend. If you send ledger content to support, the information you choose to send is received and handled as support correspondence.

Local storage, iCloud and sharing

Tallio keeps a local database and app settings on your device. When iCloud is available and the household is connected, Apple’s CloudKit services synchronize the relevant data. Local-only use and cached local copies are distinct from iCloud storage. Device backups may contain app data according to your Apple settings.

When you join a shared household, the other member can access its shared ledger and changes. Apple processes the data needed to provide iCloud and CloudKit sharing under its own terms and privacy policy. Tallio sharing is not a promise that data stays on one device, and the developer cannot erase copies that another person has exported or retained.

Purchases and Pro access

Apple processes the optional one-time Tallio Pro purchase through StoreKit. Tallio uses purchase and entitlement information to unlock or restore Pro; it does not receive your payment-card details. Relevant Pro entitlement state is synchronized so both members of the same Tallio household can benefit. This is separate from Apple Family Sharing.

Apple handles payment records and refund requests. You can request a refund at reportaproblem.apple.com. Apple’s records are subject to Apple’s policies and retention requirements.

Apple Intelligence, Siri, Shortcuts and system surfaces

Tallio uses Apple’s on-device Foundation Models framework to interpret supported English spending questions and expense descriptions when the required model is available. Spending calculations and expense validation use the household ledger. Eligible described expenses can be saved automatically after you invoke the action; missing categories may require clarification. This processing is distinct from Siri or dictation.

Siri, dictation and Apple Intelligence system services follow your Apple settings and Apple’s Siri and Dictation privacy notice. Depending on the feature and configuration, Apple may process requests beyond the device. Shortcuts can pass results to other actions, apps or services that you select; review those destinations before running or sharing a shortcut.

Widgets, notifications, Spotlight and Shortcuts may display balances, entry details or other ledger information on system surfaces. App Lock does not imply that every previously displayed system surface is hidden. Use the relevant device, notification and widget settings to control visibility. CSV exports and content you share are handled by the destinations you choose.

Diagnostics, analytics and advertising

Tallio does not embed third-party advertising or behavioral-tracking SDKs and does not sell ledger data. The spending Analytics feature calculates reports from your ledger; it is not an advertising analytics service.

Tallio does not include an automatic analytics or crash-report uploader to the developer or a third-party reporting service. Tallio keeps its diagnostic records locally and provides controls for you to copy or share them; it does not automatically upload these records to the developer. The developer does not independently collect app usage or crash reports through Tallio. Apple may separately process diagnostics, crash reports, usage statistics and sales information under its own services and privacy settings; TestFlight automatically shares crash reports with developers. This Apple-managed processing is distinct from a reporting service built into Tallio. If you voluntarily send diagnostic information to support, it is handled as described below.

Support information, purposes and retention

If you contact support, the developer receives your email address, name if supplied, message, and any screenshots, logs or attachments you choose to send. Providing this information is voluntary, but enough detail is needed to respond. Please redact unrelated ledger information and the other household member’s personal data; do not send passwords or payment-card details.

Support correspondence is used to answer requests, troubleshoot problems, maintain the service and handle related complaints. Where the GDPR applies, the basis for ordinary support and service security is the legitimate interest in responding to users and maintaining a reliable app (Article 6(1)(f)); processing necessary to comply with a legal obligation relies on Article 6(1)(c). Support data is not used for advertising.

Apple iCloud Mail is used for support email. Support correspondence is kept only as long as needed to resolve the request and meet applicable legal or dispute-handling obligations, then deleted when it is no longer needed. Retention depends on the nature of the issue and any applicable obligation, rather than a promise that every message is deleted immediately. You can request deletion at the contact address above.

Website, service providers and international processing

This website is hosted on GitHub Pages. GitHub processes technical request information, including IP addresses, to deliver and secure hosted pages. Tallio does not add advertising or third-party analytics scripts to this site. GitHub’s processing is described in its General Privacy Statement.

Apple provides app distribution, iCloud, StoreKit, the system services you use and the iCloud Mail support mailbox; GitHub hosts this site. These providers may process information outside your country, including outside the European Economic Area. Their applicable privacy notices describe processing locations and transfer safeguards, which may include adequacy decisions and standard contractual clauses. See Apple’s privacy policy and GitHub’s privacy statement. Contact the developer with questions about support data or relevant safeguards.

Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims. The app does not make automated decisions with legal or similarly significant effects about you.

Deleting records and leaving a household

You can delete individual expenses and settlements using their delete controls in Activity. Tallio uses deletion markers to synchronize changes, so removal from the visible ledger does not promise immediate physical erasure of every stored record or backup.

The invited participant can use Settings → Leave household when that option is available. This removes the shared household from that device and ends that connection; it does not delete the owner’s household or create a private copy. The owner’s ledger and any copies already exported or retained by either person are separate.

Deleting the app removes its local installation but does not by itself delete its iCloud data. Apple’s iCloud storage and backup controls are separate and may affect shared data or recovery. Before removing shared cloud data, coordinate with the other household member and consult Apple’s current controls; contact support if the available steps are unclear. This policy does not promise an in-app owner “delete all” or “stop sharing” control that is not available.

The developer cannot directly retrieve or erase your private/shared iCloud ledger through a Tallio backend. You can still request deletion of support correspondence held by the developer. Apple-held records, device backups, synchronized deletion markers, exports and copies controlled by other people may have separate retention or deletion rules.

Your privacy rights

Where applicable, you may request access to, correction or deletion of personal data held by the developer; restriction of processing; data portability; and objection to processing based on legitimate interests. These rights depend on the processing and applicable law. Contact talliosupport@icloud.com; proportionate identity verification may be needed before handling a request. For data controlled by Apple or GitHub under their own policies, use their privacy request channels.

You may lodge a complaint with your local data-protection authority. In Poland, this is the President of the Personal Data Protection Office (UODO).

Children

Tallio is not directed at children. The developer does not knowingly solicit personal information from children under 13 through support. If you believe a child has sent personal information, contact the developer so the request can be reviewed and the information removed where appropriate.

Changes to this policy

Updates are published on this page with a revised date. Questions about this policy or support-data requests can be sent to talliosupport@icloud.com.