Is TallyMint safe? How your data is protected
Short answer: yes. TallyMint is built so your financial data never leaves your computer. Everything lives in a single encrypted file on your own PC, locked with your master password. There is no cloud account, no telemetry, and no tracking, so there is no online database of your finances for anyone to break into.
Your data stays on your computer
TallyMint stores all of your accounts, transactions, budgets, categories, and reports in one file on your PC. We do not run servers that hold your financial data, and we cannot read, access, or recover it, because we never receive it in the first place. You decide where the file lives and how it is backed up.
Encryption
Your file is protected with strong, industry-standard cryptography:
- AES-256-GCM encryption protects sensitive data at rest, including your saved bank connection credentials.
- Argon2id is used to derive the key from your master password. Argon2id is a modern, memory-hard password hashing algorithm designed to resist brute-force attacks.
- Your master password is never stored. If you lose it, not even we can recover your data, which is the point.
What TallyMint sends over the network
TallyMint is designed to be quiet. The only times it talks to the internet are:
- License activation: a one-time request to validate your license key when you enter it. After that, the license is cached locally and TallyMint does not phone home on every launch.
- Bank sync (only if you opt in): TallyMint calls the SimpleFIN API directly from your computer to download transactions. Your bank credentials are never routed through our servers.
- Update checks: TallyMint checks for new versions. These requests contain your version and platform only, never any user or financial data.
No tracking, no analytics
TallyMint does not include analytics, telemetry, advertising, or usage tracking. The website does not use cookies or tracking pixels either. We do not build a profile of you, and we have nothing to sell to third parties.
You stay in control
Because your data is a normal file on your machine, you own your backup and recovery strategy. You can copy the file, store it in Google Drive or OneDrive, or keep it on an external drive. If you ever stop using TallyMint, your data does not vanish into a closed cloud account, it stays right where you put it.