Privacy & security

How your data is handled

A plain account of where your data lives, what TallyFolio does and doesn't do with it, and what's outside the product's responsibility.

01

Data ownership

Your financial records belong to you. TallyFolio is built so that your data lives in infrastructure you control, not in a shared database TallyFolio operates on your behalf.

You can export a copy of your full record at any time — there's no lock-in by design.

02

No bank sync

TallyFolio does not connect to your bank, brokerage, or any financial institution. There's no credential sharing, no read-only bank API, and no background syncing.

You bring data in two ways: entering transactions manually, or importing a CSV statement that you review row by row before anything is saved.

One optional feature, switched off unless you turn it on, can re-download a fund's published holdings file from the fund provider — the same public document every holder of that fund can download. It sends none of your records; the provider only sees that someone asked for that fund's file.

03

No analytics or telemetry

TallyFolio contains no analytics, telemetry, or usage tracking. Page views, routes, and interactions are not sent to any third party.

The app does not include a tracking SDK in either public pages or authenticated pages.

04

Supabase project storage

TallyFolio stores your data in your own Supabase project, which you provision and control. There is no separate shared application backend holding a copy of your records.

This means database-level access, backups, and security configuration are managed through your own Supabase project settings.

05

Predictable by design

Budgets, forecasts, and report figures are calculated server-side using fixed, repeatable logic. The same inputs always produce the same outputs — nothing is estimated by a model or adjusted behind the scenes.

This applies to cash-flow forecasts, budget progress, and registered-plan contribution-room estimates alike.

06

Export and deletion

You can export your reports and app data as CSV or ZIP at any time. Because your data lives in your own Supabase project, deleting your data is ultimately within your control at the database level.

Exports are provided for your convenience and are not a substitute for maintaining your own backups.

07

Optional AI explanation boundary

AI explanations are an optional feature. When enabled, AI explains figures that have already been calculated deterministically — it does not calculate, estimate, or modify financial values itself.

If you don't enable AI explanations, no part of your data is sent to an AI provider.

08

What TallyFolio is not responsible for

TallyFolio is a personal tracking tool, not a financial institution, security service, or compliance product. To be direct about the boundaries:

TallyFolio does not provide bank-grade or enterprise-grade security guarantees — security depends in part on how you configure and secure your own Supabase project.

TallyFolio does not validate figures against the CRA or any official source — registered-plan estimates are personal estimates only.

TallyFolio does not provide financial, tax, or legal advice.

You are responsible for the accuracy of data you enter or import, and for verifying official records independently.

Start your record

Questions about how this works in practice?