Tally privacy policy

Who's responsible

Felix Bose, Talstraße 53, 40217 Düsseldorf, Germany, at [email protected]. Questions about privacy and requests about your rights go to that address.

Your account

You sign in with Apple, Google or your email address. For that we keep your email address, name, profile photo (if there is one) and an account id. Sign-in is run by Clerk (Clerk, Inc., USA); a household is an organization there, with its members.

The legal basis is providing the service you signed up for (Art. 6(1)(b) GDPR).

What you put in Tally

Lists, items, comments, recipes, photos, the meal plan, chat messages and your settings are stored with Convex (Convex, Inc., USA), in data centers in the EU (Ireland). Everyone in a household sees what's in it and who added it.

An invite link shows anyone who opens it the household's name and its members' first names and profile photos, until the link is reset.

Ticked items leave the list after a week; they're kept, with their comments, as long as the household exists. Everything else stays until you delete it or the household is deleted. Your chats stay until you leave the household or delete your account.

The chat and recipes from links

Messages, photos and files you send to the chat, and the pages of recipe links, go to OpenAI (OpenAI, L.L.C., USA) to be answered, with what the chat needs from your household for that: the household's name and diet, its members' first names and food preferences, the list, recipes and the plan. Ingredients also go to OpenAI to sort them into your sections and fit them to your diet. OpenAI keeps a chat's conversation so it can carry on with it, and doesn't train its models on data sent through its API.

The legal basis is providing the service (Art. 6(1)(b) GDPR).

Location (Smart sorting)

Only if you turn Smart sorting on and iOS allows it: when you open the app it takes your location once and asks Apple Maps for supermarkets nearby. The location is used only on your iPhone and for that search at Apple; we never get it. What's stored is the shop (its name and Apple Maps id, or for a shop without an id, its position rounded to about 10 m) and what you tick off there, so the list follows that shop's order. That's deleted after a year.

Notifications

If you allow notifications, we keep your iPhone's device token to tell you, through Apple's Push Notification service, what others in the household changed. Turn kinds off in Tally, or all of them in iOS Settings.

Usage statistics and error reports

To see what's used and what goes wrong, the app sends usage events (such as "recipe saved"), crash and error reports with the device and app version to PostHog (PostHog Inc., servers in the EU, Frankfurt), linked to your account id, email address and name. For chat answers and recipe links, logs of the requests to the language model go there too, with the household details sent along (text, no photos), so we can find mistakes. There's no tracking across other apps or websites, and no advertising.

The legal basis is our legitimate interest in an app that works and gets better (Art. 6(1)(f) GDPR).

Bug reports and feature requests

What you send with Report a bug or Request a feature is kept with its screenshots, the app and iOS version, iPhone model, language and your email address, so we can write back.

Tally Plus

Subscriptions go through the App Store. Apple handles the payment; we get Apple-signed details of the purchase (product, period, status), never payment details.

Transfers to the USA

Clerk, Convex, OpenAI and Cloudflare are based in the USA. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

Deleting

Settings › Delete account deletes your account, your chats, the households only you are in, your devices for notifications and what you've reported. Items, recipes and comments you added to shared households stay there for the others. Usage data at PostHog is deleted on request.

This website

tally-groceries.app is served through Cloudflare (Cloudflare, Inc., USA). To deliver the pages and protect them from attacks, Cloudflare processes your IP address and details about your browser, and keeps them briefly in logs. The legal basis is our legitimate interest in a website that's safe and reachable (Art. 6(1)(f) GDPR).

The site sets no cookies and uses no analytics. Only if you allow it, it keeps a note in your browser's local storage that you've scrolled to the end before, so the App Store button is there right away on your next visit (consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG). Your choice is kept there too. Change it any time under "Privacy choices" at the bottom of every page; saying no deletes the note.

Your rights

You can ask for access to your data, to correct it, delete it, restrict its use, get it in a portable form, and object to uses based on legitimate interest: write to [email protected]. You can also complain to a data protection authority.

Children

Tally isn't meant for children under 16.