Privacy Policy

The short version

Tallywo is a work app for teams. It keeps your name, your work email, your Google profile photo and the work you do in the app (tasks, notes, questions and so on) so your team can plan and track its work.

• No ads, no tracking, no analytics, and we never sell or share your information for marketing.
• Only signed-in members of your organization can see its information, and your personal tasks are visible only to you.
• You can ask for your account to be deleted at any time (see below).

Who can use the app

Only people whom an admin of their organization has added to the team. You sign in with Google; the app never sees your Google password.

What we collect

Your profile

Your name and short name, your work email address, and the profile photo from your Google account (we keep the link to it). Also your role on the team (staff, leader or admin), which teams or KRAs you lead, and when you were added or removed.

Your work

Tasks and subtasks you create or are part of, with their notes, links, due dates, statuses, check-in dates, time estimates and who they're assigned to; questions and replies on tasks (including who you mention); "waiting on" notes (which may include the name of someone outside your organization, such as a vendor, if you type it); Top 3 and priority order; and team schedules.

History

A record of changes to each task (who changed what, and when), so the team can see a task's history and undo mistakes.

Settings

Your view settings (sort order, hidden teams or KRAs and people, layout) and which notifications you want.

Notifications and devices

The in-app notifications sent to you. If you allow notifications: your iPhone's push token (from Apple) or your browser's push subscription, so we can deliver them.

Google Calendar (only if you connect it)

Your Google account email and the access Google gives us (stored encrypted), and the time blocks you put on your calendar from the app. To show your week in Plan, the app reads your calendar events when you open it; those events are shown to you and are not stored.

Early-access requests (this website)

If you ask for early access, we keep what you type in the form (your name, work email, organization, team size and, if you add it, what you'd use Tallywo for), when you sent it, your browser type, and a one-way hash of your IP address (never the address itself), used only to stop spam. We use it only to contact you about Tallywo. We keep requests for up to 12 months, then delete them if you haven't joined. To have yours deleted sooner, use the contact form.

Contact-form messages (this website)

If you send us a message, we keep your name, email, the topic you chose, your message, when you sent it, your browser type, and a one-way hash of your IP address (never the address itself), used only to stop spam. We use it only to answer you. We keep messages for up to 12 months, then delete them.

Technical logs

Our hosting providers keep short-lived technical logs (such as IP address, browser or device type, and errors) to keep the service secure and working. We don't use them to track you.

On your iPhone or iPad, the app keeps your sign-in and a few display settings on the device. It doesn't access your contacts, photos, location, microphone or camera.

Cookies

This website doesn't use cookies. The app uses only the cookies needed to keep you signed in, plus a short-lived one (ten minutes at most) while you connect Google Calendar or Google Drive backups.

Why we use it

Only to run the app for your organization's work: showing tasks to the right people, assigning and tracking work, sending the notifications you asked for, putting time blocks on your calendar if you connect it, and keeping the service secure. We don't use it for advertising, profiling or anything unrelated to that work.

Where it's stored

• Supabase stores the app's database, handles sign-in, and keeps early-access requests and contact-form messages from this website.
• Vercel hosts the website and the server that talks to Google Calendar and sends notifications.
• Apple Push Notification service delivers notifications to iPhones; browser notifications go through your browser's push service (for example Apple, Google or Mozilla).
• Google provides sign-in, and Google Calendar if you connect it.

These providers process the information for us to run the app, under their own security and privacy terms. Information is sent over encrypted connections.

Who can see it

• Members of your organization who are signed in can see its tasks, schedules and who's on the team.
• Personal tasks are visible only to the person who made them.
• Admins can add and remove people; the super admin decides who's an admin or a leader.
• We don't sell, rent or share your information with anyone else, except if the law requires it.

How long we keep it

While you're on the team. If you leave and are removed from the team, you can no longer sign in or get notifications, and your devices are forgotten, but the work you did stays as part of your organization's records until you ask for your account to be deleted. Disconnecting Google Calendar deletes the access we stored for it. Early-access requests and contact-form messages are kept for up to 12 months (see above).

Deleting your account

Use Delete My Account in Settings (in the iPhone app or on the website), or send us a message. When your account is deleted we remove your name, email, photo and sign-in, your settings, notifications, devices, Google Calendar access and your personal tasks. Team tasks and comments you worked on stay as your organization's work records, shown as by "Former staff member".

Children

Tallywo is for work teams. It isn't meant for children, and we don't knowingly collect information from children under 13.

Changes

If this policy changes, we'll update it here and change the effective date at the top.

Contact

Questions or requests: use the contact form.