Privacy Policy

Effective date: May 15, 2026

TallyMint is a desktop application built by ks-bytebox. We believe your financial data is none of our business. This policy explains what information TallyMint collects (very little), how it is used, and your rights.

Your Financial Data Stays on Your Computer

TallyMint stores all of your financial data — accounts, transactions, budgets, categories, and reports — in a single encrypted file on your computer. This file is protected with AES-256-GCM encryption and secured by your master password.

We do not operate cloud servers that store your financial data. We cannot access, read, or recover your data. You are in full control of your file and can back it up however you choose.

License Activation

When you purchase TallyMint and enter your license key, the app performs a one-time activation request to our payment provider, Lemon Squeezy, to validate the key. This request includes:

• Your license key
• A machine identifier (used to enforce the per-device activation limit)

After successful activation, the license status is cached locally. TallyMint does not phone home on every launch.

Update Checks

TallyMint periodically checks for software updates by contacting tallymint.app/api/update/. This request includes:

• Your current TallyMint version
• Your platform and architecture (e.g., Windows x64)

No user data, license keys, financial information, or personally identifiable information is sent during update checks.

Bank Sync via SimpleFIN

If you choose to connect your bank accounts, TallyMint uses SimpleFIN Bridge, a third-party service, to download transactions. Here is how it works:

• You create your own SimpleFIN account and provide your access token to TallyMint.
• TallyMint calls the SimpleFIN API directly from your computer. Your bank credentials are never sent to or through our servers.
• Your SimpleFIN access token is encrypted locally with AES-256-GCM alongside your other data.

SimpleFIN has its own privacy policy governing how it handles your banking connection. We encourage you to review it at simplefin.org.

Website

The TallyMint website (tallymint.app) does not use cookies, analytics tools, tracking pixels, or any form of user tracking. We do not collect visitor data.

Data We Do Not Collect

To be explicit, TallyMint does not collect:

• Your financial data (transactions, balances, account numbers)
• Your bank credentials
• Usage analytics or telemetry
• Personal information (name, address, phone number) outside of what you provide to Lemon Squeezy at purchase
• Browsing or app usage patterns

Third Parties

We do not sell, share, rent, or trade any user data to third parties. The only third-party services TallyMint communicates with are:

• Lemon Squeezy — for license activation (one-time)
• SimpleFIN Bridge — for bank sync (only if you opt in)
• tallymint.app — for update checks (no user data sent)

Data Retention

Since your data lives entirely on your computer, you control retention. Deleting the TallyMint data file permanently removes all your financial data. We have nothing to delete on our end because we never had it.

Children's Privacy

TallyMint is not directed at children under 13. We do not knowingly collect information from children.

Changes to This Policy

If we update this privacy policy, we will post the revised version on this page with a new effective date. Material changes will be communicated through the application or website.

Contact

If you have questions about this privacy policy, contact us at support@tallymint.app.