Privacy Policy

The short version

Tilly has no accounts and no servers. Everything you type into it — your entries, categories, budgets, accounts and recurring rules — is stored on your device and is never sent to us. We do not collect analytics, we do not use advertising or tracking, and we cannot see your money.

The one exception is purchases, which are necessarily handled by Apple and by our payment provider. That is described below.

What Tilly stores on your device

• Entries: amount, type, date, note, category and account.
• Categories, accounts, budgets and recurring rules you create.
• Preferences: your currency, language, daily reminder time, app lock setting and the tab you last used.
• A small summary shared with the Tilly widget, kept in an app group on the same device so the widget can draw your month.

This data lives in the app's own storage. If your iPhone is backed up to iCloud or a computer, it is included in that backup under Apple's terms — Tilly itself does not write anything to iCloud.

What leaves your device, and why

Purchases. When you buy Premium or start a trial:

• Apple processes the payment. We never see your card, your name or your Apple Account. Apple's handling of that is covered by Apple's Privacy Policy.
• RevenueCat validates the purchase and tells the app whether Premium is active. It receives an anonymous identifier that the app generates on your device, the purchase receipt from Apple, and basic technical details such as the app version, platform and store country. It never receives your entries, notes, budgets or amounts. See RevenueCat's Privacy Policy.

Apart from purchases, Tilly makes no network requests. Using the free version, the app never contacts anything at all.

Photos and receipt scanning

If you scan a receipt, iOS shows you its own photo picker and passes only the picture you chose to the app. Tilly reads the text with Apple's on-device Vision framework to guess the amount and date. The image is not saved, not attached to the entry and not uploaded. Tilly never asks for access to your photo library as a whole.

Face ID and Touch ID

If you turn on the app lock, iOS performs the check. Tilly receives only a yes or a no. Your biometric data never leaves Apple's Secure Enclave and is never available to us.

Notifications

The daily nudge and the trial reminder are scheduled locally on your device. There are no push servers, so no notification content ever passes through us.

Export and backup

CSV export and backup files are created on demand and handed to the iOS share sheet. Where they go from there — Files, Mail, another app — is entirely your choice, and Tilly has no visibility into it.

Children

Tilly is not directed at children under 13 and does not knowingly collect anything from them. Since the app collects nothing from anyone, there is nothing to delete.

Your rights

Because we hold no personal data about you, there is nothing for us to access, correct, export or erase on your behalf. You control everything directly:

• Export — Settings → Export CSV, or Back up data.
• Erase — Settings → Erase all data. This is immediate and final; there is no cloud copy to restore from.
• Uninstall — deleting the app removes its storage with it.

For purchase records held by Apple or RevenueCat, contact them directly using the links above, or write to us and we will help.

Changes

If this policy changes, the effective date at the top changes with it and the updated version is published on this page.

Contact

Questions about this policy: unclelife931@gmail.com.