TallyTrip collects no data. Your trips live on your device and in your own iCloud. We have no servers, no analytics, no ads, and no way to see anything you enter.
Everything you enter in TallyTrip (trips, members, expenses, settlements) is stored on your device and, when iCloud is available, synced through Apple's CloudKit service to your personal iCloud account (Apple's private and shared databases). ChanoSys LLC operates no server of its own and has no technical ability to read, access, or recover your data. Apple's handling of iCloud data is governed by Apple's privacy policy.
Receipt photos are never uploaded by TallyTrip and are never visible to other trip members. Trip-mates see only an indicator that a receipt exists. No receipt image is stored in any shared or synced record.
Starting with TallyTrip 3.1, receipt photos are included in your device's own backup, so they are restored when you set up a new phone or restore this one. If you use iCloud Backup, that backup is stored in your Apple account, encrypted and controlled by you, and TallyTrip has no access to it. Excluding receipts from backup used to be the behaviour; it meant a new phone silently lost every receipt you had saved, which we judged worse than the alternative. A receipt also leaves your device if you explicitly export the trip as a .triptally archive file and share that file yourself.
Deleting TallyTrip removes its receipt photos, and reinstalling does not bring them back. A device backup restores an app's data only when you restore the whole device, not when you reinstall a single app. If your receipts matter to you, keep your own copies, or use Save a Copy (Trip & Receipts) in a trip's menu to save a .triptally archive with the images embedded.
Optional, from version 3.1: save camera receipts to Photos. If you turn on Save Camera Receipts to Photos (Settings, or the one-time question after your first camera receipt), photos you take with TallyTrip's camera are also saved to your own Photos library, and follow whatever you've set up for Photos, including iCloud Photos. TallyTrip asks only for permission to add photos. It can never see or read your library. This is off unless you turn it on.
From version 3.1, to help you find a missing receipt, TallyTrip remembers when each receipt photo was taken and whether a copy is in your Photos. That note is kept in your own iCloud key-value storage, tied to your Apple ID, and is never shared with trip members or anyone else. It contains no image.
TallyTrip uses Sign in with Apple only so that people you travel with can see who added or edited an expense. Your Apple identifier and the name you choose to share stay on your device and in your iCloud; they are never transmitted to the developer or to any third party.
When you share a trip, the people you invite can see that trip's data (its members, expenses, and balances, but not receipt photos, which stay on the device that added them) through iCloud's built-in sharing. Sharing is private and invitation-only. The trip owner can stop sharing or remove a member at any time, and any member can leave a shared trip.
If you add an expense in a foreign currency, the app fetches current exchange rates from a public rate service (open.er-api.com). That request contains only the currency code being converted: no personal information, no identifiers, and nothing about your trips.
You can delete any trip or expense in the app at any time. Deleting the app removes its local data from your device; data synced to your iCloud can be managed through your device's iCloud settings. Because we hold no copy of your data, there is nothing further to request from us. There is no data to hand over or erase on our side.
TallyTrip is a general-audience app and is not directed at children under 13. It contains no third-party content, no ads, and collects no data from anyone, including children.
If this policy ever changes, the updated version will be posted at this address with a new effective date. Questions? Email support@chanosys.com or visit the support page.