Privacy

Your challenges, checks and photos stay on this phone. We use PostHog for app analytics and Meta and Apple for ad measurement.

Contact: hello@tallyrow.app

Product domain: tallyrow.app

1. What never happens

• No account, sign-in or cloud sync. We collect no account email or password.
• Challenges, rules, daily checks and photos stay on this phone, with no cloud copy.
• We do not read health platforms or track weight.
• No in-app ads or sale of data.

2. Data we touch

2.1 Data on your device

Data: challenges, runs, rules, daily checks, settings and optional progress photos stored on this phone.

Used to: run the app. Sharing a compare image uses the system share sheet on your device.

Kept: until Delete everything or uninstall. Free export copies JSON and original photos without deleting them. Delete everything clears records, photos and settings after a second confirmation.

Daily reminders are local notifications, never sent through our server.

2.2 Purchase and entitlement

Data: store receipts, transaction identifiers and an anonymous app-instance identifier.

Used to: unlock Pro, restore purchases and cache offline access.

Who: Apple App Store or Google Play takes the payment; RevenueCat checks the receipt. We never see your card number.

Basis: performing the purchase contract.

Kept: by the store under its own terms; by RevenueCat while Tallyrow is on sale, so Restore purchase keeps working.

2.3 App usage analytics

Data: app opens, onboarding steps, new challenges, finished days, resets to Day 1, photos added, paywall views and purchase attempts.

Events carry fixed categories, counts, app version, platform, device details and an install channel distinguishing store, test, internal or unknown installs.

One event per install records our Apple Ads campaign, ad group and keyword IDs on iPhone, without a tracking prompt or advertising identifier.

On Android, Google Play supplies website, cross-promotion, organic or unknown sources. The raw referrer stays on your phone.

A random PostHog identifier links the events. We share it with RevenueCat to link store purchases to app use.

PostHog keeps your IP address and uses it to estimate your country, region and city.

Never: challenge names, rules, photos or anything you type.

Used to: see where people get stuck.

Who: PostHog in the United States, with no screen recording.

Basis: our legitimate interest in improving the app.

The identifier is random; we attach no account, email or name. There is no analytics switch. Uninstalling stops sending.

Kept: by PostHog under its terms; we keep no separate copy.

RevenueCat also sends store events with amounts, currency and customer attributes, including tracking permission status, to PostHog under that identifier.

2.4 Ad measurement

Data: install and app-open events from the Meta SDK, and trial, subscription, renewal and cancellation events sent by RevenueCat. On iPhone these carry an anonymous Meta app identifier and Apple's ad attribution token. They carry the advertising identifier only if you allow tracking when iOS asks. On Android they carry the Google advertising identifier, which you can reset or delete in Android settings.

Used to: measure which ads bring installs and subscriptions.

Who: Meta (Facebook and Instagram ads) and Apple Search Ads, through RevenueCat and the Meta SDK.

Never: a challenge name, a rule, a check, a photo or anything you type.

Kept: by Meta and Apple under their own terms.

On iPhone, Tallyrow asks about tracking after your first check. Meta starts only after your answer.

If you agree, Meta uses the advertising identifier for ad attribution. If you refuse, the SDK sends restricted data and supports Apple's SKAdNetwork.

Your answer does not change the app's features.

2.5 Support email

Data: what you write to hello@tallyrow.app, and your address.

Used to: answer you.

Kept: 12 months after the thread closes.

2.6 Update check

Update checks read a public file from tallyrow.app. The host receives your IP address, not your challenges.

2.7 The website

tallyrow.app does not send usage analytics or set analytics cookies. Hosting and security providers deliver the site.

Google, Microsoft, Meta or TikTok ad click IDs go to our conversion relay when an ad landing brings new IDs. Your browser keeps the IDs and an opaque reference in session storage for that session. The relay deletes its copy after 90 days. For ad-attributed purchases, server-side reporting can send the purchase to that ad platform.

3. Processors

• Apple App Store and Google Play — payment and receipts (United States).
• RevenueCat — entitlement verification, restore purchase, and passing subscription events to ad networks and PostHog (United States), under its data processing terms.
• PostHog — app usage analytics (United States).
• Meta Platforms — ad measurement for Facebook and Instagram ads (United States).
• Apple Search Ads — ad measurement for App Store search ads (United States).

4. Your rights

If you are in the EU, the UK or another place with data-protection rights, you can ask us to show, correct, delete, restrict, export or stop using data about you. You can also complain to your local supervisory authority. Write to hello@tallyrow.app; we answer within one month. Use export and Delete everything for local records. Contact the store for purchase records.

5. Children

Tallyrow is not directed at children.

6. Changes

If a change would affect what data we touch, we announce it in the app's update notes before it takes effect.

7. Contact

hello@tallyrow.app — WaveApp LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA