Privacy Policy

Last updated 6 October 2026

Tally does not collect any data about you. It has no server of its own and no account. It talks directly to Apple from your devices.

What Tally stores

Your App Store Connect API key (the .p8 private key, its Key ID and your Issuer ID) is stored in the Keychain on your device. It stays on that device unless you turn on "Sync key with iCloud Keychain", in which case iCloud Keychain syncs it, end-to-end encrypted, to your other devices signed in to the same Apple Account. Your vendor number and an optional account name are stored with Tally's other data and synced through iCloud (see below).

If you add an optional replies key so you can answer reviews from Tally, it is stored the same way: in the Keychain, never in iCloud's database.

Your reports are downloaded from Apple and stored on your device, in a local database that Tally's widgets can also read. They include daily sales reports (units, proceeds, prices, countries and product identifiers), subscription reports (counts of active subscriptions, free trials and subscription events such as renewals and cancellations, by product and country; they identify no subscriber), App Store analytics (impressions, product page views, downloads by source, sessions and crashes) and your apps' customer reviews. Reviews are written by your customers and include the nickname they chose, their review text and their App Store country; Tally only shows them to you, along with any reply you wrote.

Exchange rates published by the European Central Bank, and for currencies it doesn't publish the open-source currency-api, are stored so proceeds can be shown in one currency.

A few settings sit alongside, in the app's preferences on the device: your display currency, chosen period, which notifications you turned on, whether the menu bar item is shown, which app Tally Free shows, and whether this device has Tally Pro.

iCloud sync

So your iPhone, iPad and Mac show the same setup, Tally syncs a small amount of data through your own private iCloud database, using Apple's CloudKit: each account's name, vendor number, Key ID and Issuer ID; your release notes; your display currency; and which app Tally Free shows. This data is stored in your iCloud account under Apple's terms, and Tally (its developer included) cannot read it. Your .p8 private key is never stored in CloudKit, and your reports aren't synced: each device downloads them from Apple itself. If you're not signed in to iCloud, nothing is synced.

If you add a Tally widget, Tally keeps a small summary of the numbers it shows (such as the latest day's proceeds and downloads and your top apps) in a shared container on your device, so the widget can read it. On a Mac, the latest day's proceeds can appear in the menu bar.

If you turn on notifications, Tally creates them on your device when a new report or review arrives. They include figures such as proceeds and downloads, or the review's rating and text, and like any notification they can appear on your Lock Screen.

Who Tally talks to

• Apple, using your API key: the App Store Connect API (api.appstoreconnect.apple.com) for your apps, sales and subscription reports, analytics and reviews (including sending, editing or deleting a reply when you choose to), and the download links Apple provides for analytics report files. Your key is only ever sent to Apple's API, never to the file download links.
• Apple's iCloud (CloudKit, your private database), for the synced items listed above.
• The European Central Bank (www.ecb.europa.eu), to download its public daily exchange rates. This request contains nothing about you or your apps.
• jsDelivr (cdn.jsdelivr.net), only when a report contains a currency the European Central Bank doesn't publish, to download that day's public rates from the open-source currency-api. The request names only the date and contains nothing about you or your apps.

If you choose "Turn on App Store analytics", Tally asks Apple, in your App Store Connect account, to start preparing analytics reports for your apps. If Apple needs an Admin key for that step, Tally uses the key you provide once and does not save it.

Nothing else. Tally has no analytics or crash reporting of its own, and no other network requests.

Purchases

Tally Pro is an optional subscription, or a one-time purchase, handled entirely by the App Store. Tally never sees your name, your Apple Account, your payment details or your purchase history. It asks the App Store whether this device is entitled to Pro, and the App Store answers on the device.

What Tally does not do

• No account, sign-in or email address.
• No analytics, crash reporting or usage measurement.
• No advertising, and no advertising identifiers.
• No tracking, and no data shared with any third party for any purpose.

Exports

CSV exports are created on your device and handed to the share sheet. Where they go from there is up to you, and Tally never sees it.

Backups

If you back up your device to iCloud or a computer, Tally's stored reports are included in that backup, under Apple's terms and encryption rather than ours. Keychain items follow the Keychain's own backup rules.

Deleting your data

Settings › Accounts › Remove deletes the key from the Keychain (including iCloud Keychain, if synced) and every report Tally downloaded for that account, on every device that syncs with iCloud. Deleting the app removes everything else Tally stored on that device. To delete Tally's iCloud data, use Settings › [your name] › iCloud › Manage Account Storage on iPhone, or System Settings › [your name] › iCloud on a Mac. Your App Store Connect key itself stays active until you revoke it in App Store Connect.

Changes to this policy

If this policy changes, for example if an optional service with its own server is added, the updated version will be posted at this address with a new date at the top before that change reaches the app.

Contact

Questions about this policy: csergay@gmail.com