Tally Privacy Policy

Information Tally stores

Tally stores the following information when you use the app:

• Tally names, symbols, modes, starting values, steps, goals, and count values.
• Sessions and the event history that records count changes, undo actions, resets, compound actions, and their timestamps.
• Counter Deck names, Deck membership, groups, templates, saved Compound Actions, and the active-tally and display preferences that you choose.
• The mood and note words you choose to add to a count, and the reminder times you set.
• Device-generated identifiers that let Tally deduplicate commands from the iPhone, widgets, and the paired Apple Watch.
• Local backup and CSV export files only when you create those files.

Tally stores this information in a local SwiftData store configured in the Apple App Group container. The persistent store uses Tally's full V2 schema for tallies, sessions, events, groups, templates, settings, Decks, Deck items, Compound Actions, Compound Action items, command batches, and command batch items. The App Group makes this on-device store available to Tally targets with its shared entitlement. The paired Apple Watch uses WatchConnectivity, and Tally queues Watch actions and acknowledgements locally when that connection is unavailable.

Information Tally sends

App Group sharing provides same-device access to Tally's shared local store and projections. The iPhone and paired Apple Watch exchange tally projections and commands through Apple's WatchConnectivity service, and Tally queues Watch actions and acknowledgements locally when that connection is unavailable. Tally does not send tally content to a Tally server. Tally does not sell, rent, or share your tally content for advertising.

Tally uses StoreKit to process Pro purchases. Apple processes the purchase and provides the transaction and entitlement information needed to unlock Pro. Tally does not receive or store your payment card number.

Live Activities, widgets, and shortcuts

If you enable Live Activities, Tally publishes the active tally's name, value, mode, goal, and update time to the system surface that you selected. Widgets, App Intents, and the Action Button use the local tally state to perform the action that you request. Tally names also appear on this device in iPhone search results, in the menu you see when you hold the Tally icon, and in reminders you set; these use Apple's on-device search index, Home Screen quick actions, and local notifications, and nothing is sent to a Tally server. You can remove widgets, stop Live Activities, or disable the Live Activity preference through the system or the app.

Backups and exports

Tally creates a backup or CSV export only after you request it. The resulting file is controlled by the location and sharing choices that you make through the system share and file interfaces. Tally does not upload that file to a Tally service. A backup can contain tally definitions, sessions, event history, Decks, groups, templates, saved Compound Actions, and settings.

Diagnostics and dogfood trace

Tally prepares a diagnostics JSON file only when you request it from Support and diagnostics. The default report contains the app version and build, bundle identifier, operating-system version and device model, simulator status, appearance and Dynamic Type settings, local storage counts, projection status, entitlement class, bounded timing samples, and recent error codes.

The default report omits tally names, exact tally values, event history, purchase receipts, Apple ID information, contacts, location, and credentials. Tally does not upload the report automatically. You choose whether and where to share the file through Apple's system share interface.

If you email a diagnostics report to support, support deletes the attachment after resolving your request.

The interaction trace records Action Button activity on the device. Each trace entry stores its timestamp, surface, command, result, duration, a pseudonymous tally identifier, tally name, and current tally value. The trace currently has no deck position and records the foreground state as false. Recording happens locally whether or not you include the trace in a report. Tally removes entries older than seven days when it next records or reads the trace; if no entry is recorded or the trace is read, expired entries can remain stored until that access. Tally caps the trace buffer at five megabytes and does not send it to a Tally service automatically.

When you include the trace in a report, Tally omits tally names and values by default. The separate sensitive-details option includes those locally recorded names and values in the report when you enable it. Tally writes a prepared report to its temporary directory. Tally removes that file when you change the export options or prepare another report, but it does not remove the file after sharing or when you leave the diagnostics screen. Tally sets no fixed expiration for the prepared file, so its remaining lifetime is unspecified unless Tally successfully removes it during a later preparation or option change.

Retention and deletion

Tally retains local data until you delete the tally, delete the app's data, or remove the app. Tally keeps event history for a tally so that reset and undo remain recoverable within the local store. Tally removes the local records that belong to a deleted tally and removes its Deck, Compound Action, Watch, and backup relationships from future local exports.

You can delete individual tallies and organization data in Tally. You can delete all remaining local data by deleting Tally from the device. You can delete exported backup and CSV files from the location where you saved them.

Your choices

You can use Tally without creating an account. You can control whether Tally publishes Live Activities. You can remove widgets and the Apple Watch companion. You can use Tally's backup and CSV export controls to keep a copy of your data or restore it on a device under your control.

Children's privacy

Tally does not knowingly collect personal information from children through a remote service. Tally has no remote account or advertising service.

Changes to this policy

This policy may change when Tally's data practices change. The effective date at the top of this document identifies the current policy text published with the app.

Contact

For a privacy request or a question about Tally's data practices, contact support@realitygood.org.