Privacy policy

TabTally (“we”, “us”) provides a shared expense tracking service available at app.tabtally.io and this website, www.tabtally.io. This policy explains what personal data we collect, why we collect it, and the choices you have. For anything this policy does not answer, write to us at hello@tabtally.io.

• Account information. When you sign in, we receive your name, email address, and profile picture.
• Content you create. Groups, expenses, splits, settlements, comments, and any receipts you upload.
• Messages you send us. If you use the contact form or email us, we keep that correspondence.
• Technical data. Standard server logs (IP address, browser type, pages requested) used for security, rate limiting, and debugging.

• To provide the service — tracking and settling shared expenses.
• To keep your account secure and prevent abuse.
• To respond when you contact us.
• To understand aggregate usage and improve TabTally.

We do not sell your personal data, and we do not use your expense data for advertising.

We rely on a small set of service providers to run TabTally, and they process data only on our behalf:

• Cloudflare — hosting, storage, and bot protection (Turnstile).
• Authentication provider — account sign-in.
• Resend — transactional email delivery.
• Open Exchange Rates — currency conversion rates (no personal data is shared; we only fetch rates).

We may disclose data if required by law or to protect the rights and safety of our users.

TabTally is a shared ledger. Members of a group you join can see the expenses, splits, comments, and receipts recorded in that group, along with your name and profile picture. Friends you split with can see the tabs you share with them.

We use cookies to keep you signed in and to protect against cross-site request forgery. We don’t use third-party advertising or tracking cookies on this site.

We keep your data while your account is active. You can delete expenses and groups in the app at any time. To delete your whole account and its data, email hello@tabtally.io and we’ll complete the deletion within 30 days, except where we must retain records to meet legal obligations.

Subject to the Personal Data Protection Act 2010 (Malaysia) and other applicable laws, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent to processing. Contact us at hello@tabtally.io to exercise these rights.

If we make material changes, we will update the date at the top of this page and, where appropriate, notify you in the app or by email.