1. Scope and our role

TallyTap is a voice-first expense-recording application initially offered in Canada. This policy applies to information processed through the app, the website, support communications, and the backend services used to transcribe and organize expense entries.

The current MVP does not include user accounts, cloud synchronization, advertising, or behavioural analytics. If those features are introduced, this policy will be updated before or when they become available.

2. Information we collect and process

Depending on how you use TallyTap, we may process:

• Expense information: vendor, amount, category, job or site name, date, notes, and other details you provide.
• Voice information: audio recorded after you activate the microphone and the resulting transcription or extracted expense information.
• Device and technical information: device type, operating system, network information, IP address, request timestamps, and diagnostic or security information reasonably required to operate and protect the service.
• Communications: information you provide when contacting TallyTap or joining an interest or testing list.

Please avoid speaking unnecessary sensitive personal information into an expense entry.

3. Microphone access and consent

TallyTap requests microphone access so you can create an expense entry by voice. The microphone is used only when you initiate a recording through the app. You may deny or withdraw microphone permission in your device settings, although voice-recording features will then be unavailable.

By choosing to record and submit audio, you consent to that audio and the resulting text being securely transmitted to TallyTap’s backend and relevant service providers for transcription and expense parsing. Where consent is the basis for processing, you may withdraw it for future processing, subject to legal or operational requirements.

4. How we use information

We use information to:

• transcribe voice recordings and convert them into draft expense records;
• display, save, edit, delete, and export expense information at your direction;
• operate, troubleshoot, secure, and improve the reliability of the service;
• respond to support, privacy, or other inquiries;
• prevent misuse and comply with applicable law; and
• communicate about testing or product updates when you have requested them.

We do not sell personal information or use MVP data for advertising or behavioural profiling.

5. Local storage and exports

Expense records are normally stored locally on your device. TallyTap does not currently provide account-based cloud synchronization in the MVP. You can delete locally stored expenses through the application. Removing the app or changing devices may affect your ability to recover locally stored information, so keep appropriate backups or exports.

When you export expense records, you control the resulting file. Its security, storage, sharing, and deletion are your responsibility after export, including when it is saved to another app, cloud drive, email account, or device.

6. Service providers and processing locations

TallyTap relies on service providers to operate the voice-processing workflow:

• Render hosts the TallyTap backend that receives requests and communicates with processing services.
• OpenAI provides services used to transcribe audio or process extracted expense information.

Audio does not always remain on your device. When you submit a voice entry, audio and related information may pass through TallyTap’s Render-hosted backend and OpenAI systems. These providers process information under their own contractual, security, and retention practices.

OpenAI states that API data is not used to train its models unless the customer explicitly opts in. OpenAI’s published retention treatment varies by API endpoint and configuration; some processing may generate abuse-monitoring or other service records. TallyTap therefore does not promise zero third-party retention.

Service providers may process information outside Canada, including in the United States or other jurisdictions. Information processed abroad may be subject to the laws and lawful-access requirements of those jurisdictions.

7. Retention

Locally stored expense records remain on your device until you delete them, remove relevant application data, or otherwise manage them through your device. TallyTap retains information under its control only for as long as reasonably necessary for the purposes described in this policy, to provide and secure the service, and to meet legal obligations.

Voice requests are transmitted for processing. Provider-side technical logs, security records, or temporary processing data may be retained under provider policies and the configuration of the services used. Exact provider retention may change and can depend on the specific endpoint or account settings; TallyTap does not state a universal retention period or guarantee zero retention.

8. Safeguards

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of the information, including encrypted network transmission where supported, restricted service credentials, and efforts to minimize the information processed. No electronic service can guarantee absolute security.

You are responsible for protecting access to your device and exported files, using current device security, and reviewing entries before relying on them.

9. Your Canadian privacy rights

Subject to applicable Canadian privacy law and permitted exceptions, you may ask to access personal information under TallyTap’s control, request correction of inaccurate information, withdraw consent for future processing, request deletion where appropriate, or raise a concern about our privacy practices.

Because MVP expense records are normally stored only on your device, TallyTap may not possess or be able to retrieve those local records. You can generally review, correct, export, or delete them directly in the app.

We may need to verify your identity before completing a request. If you are dissatisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.

10. Children

TallyTap is designed for adults managing business expenses and is not directed to children. We do not knowingly seek personal information from children. If you believe a child has provided information through the service, contact us so we can assess and address the situation.

11. Changes to this policy

We may update this policy as the product, service providers, or legal requirements change. We will post the revised policy at this address and update the effective date. Material changes may also be communicated through the app or website where appropriate.

12. Contact

Privacy questions or requests may be directed to:

Owner confirmation required: activation and monitoring of privacy@tallytap.com must be confirmed before a paid public launch.

13. Nature of the service

TallyTap is an expense-recording aid. It does not provide accounting, tax, legal, or financial advice. Users remain responsible for reviewing entries and maintaining the original receipts and records required for their circumstances.