Privacy policy
Effective 4 October 2026
TallyHopp is an app for planning trips with friends and splitting the bills. This policy explains what the app collects, why, who it is shared with, and how you can delete it. Questions: support@tallyhopp.com.
What we collect
Your account
- Your email address, used to send you a sign-in code. If you sign in with Google, we receive your Google account's email address and basic profile from Google.
- The name you choose, shown to the people in your trips.
What you add to the app
- Trips: name, destination, dates, and who is in them.
- Bills: amounts, currency, items, who paid and who had what, and receipt photos.
- Payments between members, and any payment screenshots you attach as proof.
- Payment QR codes (DuitNow, Touch 'n Go) you add to your profile so others can pay you.
- Itinerary stops and saved places: titles, addresses, times and notes.
- Plan with AI chats: your messages and the photos or PDFs you send in them.
- Group fund amounts and payments.
- Feedback you send from the app, and any screenshot you attach, saved with the app version and phone model.
Notifications
- If you allow notifications, the app registers your phone's push notification address with your account, so we can tell you when someone marks a payment to you as paid and when a trip is 7 days away. Signing out or deleting your account removes it.
Crash reports
- When the app crashes or hits an error, it sends a report: what went wrong, the app version, your phone's model and system version, and your account's ID number. It does not include your name, email address or what you entered.
What we do not collect
- We do not track your device's location. Places come only from what you type or pick.
- We do not read your contacts, and the app has no advertising or advertising trackers.
- We never handle your money: payments are made in your own bank or e-wallet app.
How it is used
- To run the app: sign you in, keep your trips in sync between members, and work out who owes whom.
- To read receipts, suggest places, work out travel times and answer Plan with AI, as described below.
- To fix problems and improve the app, from crash reports and the feedback you send.
- We do not sell your data or use it for advertising.
Who can see it
- The members of a trip see that trip's bills, receipts, payments, itinerary and saved places, and the names and payment QR codes of the people in it.
- Your Plan with AI chat is private to you. Changes you apply from it go on the shared itinerary.
Services we use
These companies process data for us only to provide the parts of the app listed:
- Supabase: stores your account and everything above, and handles sign-in. Servers in Singapore.
- Resend: delivers sign-in emails (your email address and the code).
- Google: Google sign-in, if you use it; and Google Maps for place search, place suggestions and travel times (what you search for, the trip's destination, and the places on your itinerary).
- Moonshot AI: reads receipt photos into items, ranks place suggestions, and powers Plan with AI (the trip's plan and the messages, photos and PDFs you send in the chat).
- Expo and Google Firebase: deliver app updates and notifications to your phone (the notification's title and text).
- Sentry: receives crash and error reports. Servers in Germany.
On your phone
The app keeps a copy of your trips on your phone so it works offline. Signing out or deleting your account removes it.
How long we keep it
We keep your data while you have an account. Crash reports are kept for up to 90 days. A bill, payment or receipt you delete is removed. A trip deleted by its owner is removed with everything in it.
Deleting your account
You can delete your account in the app (Profile → Delete account) or by email. See Delete your account for the steps and what is kept.
Security
Data travels encrypted (HTTPS). Access rules in the database let you see only your own trips, and receipts and QR codes are served through short-lived private links.
Children
TallyHopp is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has an account, email us and we will delete it.
Changes
If this policy changes, we will update this page and its effective date.