Privacy policy
Last updated 1 October 2026
Who runs this
Tally-ho is a private, invite-only app operated by TC Conway as an individual. It is not a commercial service. Contact: tcconway@gmail.com.
What Tally-ho collects
- Account: your username and email address, and the authenticator you set up.
- Receipts you add: merchant, amount, date, an optional note and an optional photo. Photos are re-encoded when uploaded, which removes location and camera metadata.
- Card transactions, through Plaid, for the accounts you choose to link: the description, merchant name, amount, date and pending status of charges. Tally-ho requests Plaid's Transactions product only. It never receives account or routing numbers, balances, or your bank password.
- Security records: sign-in events, with the IP address and browser, kept as an audit log.
How it's used
Only to match your receipts to your charges and show you the results, and to keep your account secure. Your data is never sold, shared with advertisers, or used for any other purpose. Nobody else using Tally-ho can see your data.
Consent and Plaid
Bank connections are made through Plaid, and only when you choose to link an account. Plaid asks for your consent before sharing anything. Plaid's own handling of your data is described in the Plaid End User Privacy Policy.
Where it's kept and how it's protected
Data is stored with Supabase (database and file storage, United States) and the app runs on Vercel. It is encrypted in transit (TLS) and at rest; the credentials Plaid issues for your bank are additionally encrypted by the app. Signing in requires an emailed one-time link and an authenticator code. Email is sent through Resend.
Retention and deletion
- Receipts and photos are kept until you delete them. Deleting a receipt deletes its photo.
- Card transactions are kept while the bank is linked. Unlinking a bank in Settings revokes Tally-ho's access at Plaid and deletes that bank's transactions and credentials immediately.
- Security records: the audit log is kept for 400 days; session records for 30 days after last use.
- Closing your account: email the contact above and everything is deleted, including the Plaid connection, within 30 days. Encrypted backups expire on their own within 30 days after that.
You can ask for a copy of your data, or for it to be corrected or deleted, at any time.
This policy and the retention periods above are reviewed at least once a year and whenever the app changes how it handles data.