Privacy Policy

Last updated: 5th November 2026

Tallykins is owned and operated by J&C Worley Ltd. (“we”, “our”, “us”), a company registered in England and Wales. J&C Worley Ltd is the Data Controller responsible for your personal data. We respect your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

• Anonymous User ID (generated automatically by Firebase Authentication to enable app functionality. This identifier does not contain personal information and does not require registration, email address, or password.)
• Email Address (via Firebase Authentication): only if you choose to sign in with your Google or Apple account, which backs up your events and lets you share them. Note: Apple users may choose the 'hide my email' login option and remain anonymous.
• Display Name: the name you choose in the app, which may be copied to our cloud servers. If you take part in a shared event, it is shown to the other people in that event and kept on its participant list, including after you leave, until the organiser deletes the event or you delete your account.
• Event Data: what you enter into an event, including the names you give your friends and your expenses. It is stored locally on your device. If you sign in, or take part in a shared event, it is also synchronised to Firebase and stored in accordance with our Terms of Service. Everyone in a shared event can see that event's data.
• Crash & Performance Data: via Firebase, to help fix bugs and improve service.
• Usage Data: via Google Analytics for Firebase, such as an app instance identifier, device type, operating system, app version, general location (country or region), when and how the app is opened and used, in-app purchases, and whether you have signed in and with which provider. We use it to understand how the app is used, not for advertising.

Note:

• We use third-party authentication providers, including Google Sign-In and Sign in with Apple, to allow users to securely access the app. We do not have access to your passwords.
• We do not collect any other personally identifiable information unless you voluntarily provide it (e.g., via support email).
• We do not collect or store payment information, as all payments are handled directly by your app store provider.

2. How We Use Information

We use data to provide app functionality, back up and sync data for users who sign in or take part in shared events, and improve app performance.

2.1 Lawful Basis for Processing

We only process your data when we have a lawful basis to do so under the UK GDPR. These are:

• Performance of a Contract: For processing the Anonymous User ID, Display Name and Event Data to provide you with the app functionality, and the cloud backup and sync you have requested.
• Legitimate Interest: For processing Crash and Performance Data and Usage Data to monitor and improve the service, and for security/fraud detection.
• Consent:Where we rely on Consent, you may withdraw it at any time via your device settings or app controls.

2.2 Data Deletion

You can delete all Event data or all account data directly within the app at any time. When deleted, this data is permanently removed from your device and from our cloud servers.

Shared events work differently, because other people use them. Deleting a shared event you organise, or your account, removes that event for everyone in it. If you delete your account after joining someone else's event, you leave that event and your name on its participant list is replaced with "Deleted Account", but the event and the expenses in it stay with its organiser, and your name may remain in the edit history of expenses you changed. If you would like it removed from there too, contact us.

Google Play requires us to offer an external deletion method. If you request deletion via our support channel, we may request basic verification to ensure we are deleting the correct account.

We process deletion requests in accordance with UK GDPR requirements (normally within one month).

3. Third-Party Services

We use:

• We use Firebase, a platform provided by Google, to provide core functionality such as user authentication and cloud data storage. Firebase may process personal data including your user ID, email address (if provided), device information, and usage data. This data is used to securely store and sync your information and to maintain app performance. For more information, please see Google’s Privacy Policy.
• We use RevenueCat, a third-party service, to manage in-app purchases. RevenueCat processes anonymous purchase data, such as transaction receipts, to enable Organiser Pass features. Payments are processed by Apple App Store or Google Play, and we do not have access to your payment details.

4. Data Retention

• Local data: until you uninstall or clear the app.
• Cloud data (backups and shared events): kept until you delete the event or your account, or for a shared event you joined, until its organiser deletes it. We do not currently delete cloud data automatically after a set period, and it is not removed when an Organiser Pass ends.
• Crash logs: typically retained up to 90 days.
• Usage data: retained in line with our Google Analytics retention settings.

5. Your Rights

You have the right to access, correct or erase your data, restrict or object to processing, and withdraw consent where applicable. You also have the Right to Lodge a Complaint with the Information Commissioner's Office (ICO) if you believe your data is being processed unlawfully. Contact support@tallykins.com.

6. Children’s Privacy

Tallykins is intended for users aged 13 and over (or the age of digital consent in your country). We do not knowingly process data from children below this age.

7. Changes

We may update this Privacy Policy. The current version is available in the app and on our website.

Contact

Email: support@tallykins.com