1. Data on your device
Client names, balances, commissions, accounts, operations and documents in the main ledger are stored on your iPhone. Using the local ledger does not upload its contents to SMAL GROUP. We do not run advertising or behavioural analytics in the public app. Online confirmation links, backups and files you choose to share are separate cases described below.
2. Client confirmations
When you choose to create a receipt link, the app sends the operation type, amount, currency, date and recipient name to our confirmation service. The service stores those details, a random receipt identifier, hashes of access keys, and creation, expiry, confirmation and revocation timestamps. This is used to display the receipt and its status. Bank account details, your complete ledger, balances and notes are not included in this request. Share only information you are entitled to provide.
3. Who can open a link
Anyone who has the complete link can view its details and confirm receipt. The service does not verify their identity. Opening or previewing a link is not a confirmation; the holder must explicitly press the confirmation button. A confirmation does not execute a payment or prove bank settlement. You choose the recipient through your messaging or email service, whose own privacy rules apply. The website demonstration is local and sends no receipt data.
4. Retention and revocation
Unconfirmed links expire 30 days after creation. Receipt records become eligible for deletion after 90 days from creation; the current service removes them on its next request, so deletion is not tied to an exact clock time. Revoking a link blocks access but does not immediately erase the stored record. Editing or deleting a local operation, or removing the app, does not automatically revoke a link or delete the server record. Revoke it from its status in the operation history, or contact support to request deletion. We may need sufficient information to locate the record and verify your authority; do not send management keys by email.
5. Backups and exports
You choose whether to save a backup to your iCloud or to a file, and whom to send exported reports to. Password protection is available for backups. Apple or the storage and messaging service you choose processes these files under its own terms. Delete backup and export copies separately. Receipt management keys are kept in this iPhone’s Keychain without synchronisation and are not included in ledger backups. Moving a ledger to another phone does not move control of old links. Some Keychain entries can remain after uninstalling the app.
6. Device permissions
Camera and document scanning start when you request them; text recognition is performed on the device. Speech search uses on-device recognition when supported; otherwise Apple may process audio under its privacy policy. Face ID or passcode protection uses the system authentication result; we do not receive your biometric template. Reminders are scheduled locally. You can change permissions in iPhone Settings. Refusing an optional permission affects the corresponding feature, not access to unrelated ledger functions.
7. Apple subscriptions
Apple processes subscription purchases. TallyPro uses StoreKit transaction information, such as product identifiers, validity and renewal status, to unlock Pro and restore purchases. We do not receive payment card details. Manage or cancel subscriptions in your Apple account settings; Apple handles refund requests.
8. Website, hosting and support
Our hosting provider, IONOS, processes network and technical information needed to deliver and protect the service, including IP addresses, request times, browser details and error information. The confirmation service uses a keyed hash of an IP address for short-lived rate limits; expired limit records are removed during subsequent requests. Hosting logs follow the host’s configured retention periods and are used for service operation and security, not advertising. This website stores your language preference locally and uses no advertising or analytics cookies. If you email support, we receive your email address, message and attachments to respond, resolve the issue and handle related legal obligations. Support correspondence is kept only as long as needed for those purposes.
9. Purposes and recipients
We use server data to provide requested confirmations, prevent abuse, answer support requests and comply with applicable law. Where a legal basis is required, these uses rely on providing the requested service, our legitimate interests in operating and securing it, legal obligations, or consent where required. Data may be processed by our hosting and communications providers, by Apple for features you choose, by people you share with, or where law requires disclosure. Providers acting for us must protect data to a standard consistent with this policy and applicable requirements. We do not sell personal data or share it for cross-app advertising. Providers may process data outside your country; applicable transfer safeguards must be maintained for such processing.
10. Security and your choices
Confirmation requests use HTTPS; access keys are separated and server records contain their hashes rather than the raw keys. No system can guarantee absolute security. Protect your device, backups and complete receipt links. You can stop using confirmations, revoke links, remove local records and delete your own backup copies. Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, withdraw consent for future processing, and complain to a competent privacy authority. Contact support@smalgroup.com. We may verify a request and retain information where a legal obligation requires it. No account deletion flow is needed because the public app creates no TallyPro account.
11. Children and changes
TallyPro is a business record-keeping tool and is not directed at children. If you believe a child’s information was sent to us, contact support. We publish policy updates on this page and update the effective date. Material changes to data use will be explained before they take effect, with renewed consent where required.
12. Contact
SMAL GROUP, INC. · 16192 Coastal Hwy, Lewes, DE 19958, USA. Privacy and support: support@smalgroup.com. General enquiries: info@smalgroup.com. Phone: +1 (323) 654-3500. D-U-N-S: 149994610.
13. Planned optional assistant
The optional TallyPro Assistant is planned for a future public update, with Claude API (Anthropic) and OpenAI API as planned providers. It is not enabled in the public edition covered by this policy, and that edition does not send assistant requests to either provider. Before enabling it, we will update this policy and the in-app disclosure to identify the selected provider, the exact information sent, purposes, retention, access terms and available controls. Requests may contain your prompt, follow-up notes, a previous draft, text extracted from documents you select, and selected transaction fields such as client or company names, dates, amounts, currencies, bank details and notes. The final implementation must disclose these fields and obtain explicit permission before transmission. AI drafts require human review before use. Neither the website nor the current public edition offers a live AI chat.