Tally My Cash — Privacy Policy

1. Introduction

Welcome to Tally My Cash ("TallyMyCash"), operated by ThinkingLevel ("we", "us", or "our"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Android mobile application (package ID: com.addas.tallymycash) and our website (https://addas.thinkinglevel.com/tallymycash/).

TallyMyCash helps businesses and individuals count cash denominations, maintain Debit/Credit Khata, generate sales and purchase bills, record daily Cashbook entries, manage stock inventory, track income and expenses, run multi-agent collections, reconcile bank vaults, and generate financial reports. We are committed to protecting your privacy and ensuring the security of your data. We strictly value user privacy, display zero third-party advertisements in the app, and do not sell user data for research, promotional, or third-party marketing purposes.

2. Information We Collect

By default, TallyMyCash stores your financial calculations, ledgers, bills, stock records, and attachments locally on your device. You may use local features without signing in. Depending on the optional features you choose to use, we collect and process the following categories of information:

• Account & Email Address (Google Sign-In): We collect your email address and Firebase Authentication user identifier (UID) only when you choose to sign in using Google Sign-In (via Android Credential Manager) to use Cloud Backup & Restore, TallyMyCash Pro subscriptions, Agency Collection cloud sync, or the Refer & Earn program.
• Calculation, Business & Accounting Data (Cloud Backup): Cash denomination tallies, Khata records, bills, inventory, expenses, loanbook entries, vault records, business profile details, and attached images/documents that you input into the app remain on your device unless you explicitly initiate a manual Cloud Backup in the Back Up section.
• Agency Collection Multi-User Sync Data: If you use the Pro-gated Agency Collection module as a Super Agent (Owner) or Collection Agent, the app synchronizes agency names, retailer contact directories, collection agent names and 10-digit mobile numbers, 6-digit invitation codes, daily target assignments, collection/deposit/transfer records, and optional compressed receipt photos with our cloud backend so Super Agents and field agents can collaborate in real time.
• Subscription & Billing Verification Data: When you purchase or restore a TallyMyCash Pro subscription through Google Play Billing, we process your Firebase UID, email address, Google Play purchase token, product ID, and a SHA-256 obfuscated account identifier to verify and bind your Pro entitlement to your account.
• Device, Integrity & Referral Signals: To protect cloud endpoints from abuse and verify referral rewards, the app uses Firebase App Check (with Google Play Integrity), Google Play App Set ID, and the Google Play Install Referrer API. For crash diagnostics, the app generates an anonymized identifier derived from a hash of the device build fingerprint along with app version and language preference.
• Analytics & Crash Reporting Data: In the Android app, we use Google Analytics for Firebase and Firebase Crashlytics to collect anonymized crash logs, non-fatal error diagnostics, and standard app usage events. On this website, we use Google Analytics 4 (Measurement ID: G-FVLLDEZQBR) to measure aggregated page views and interactions (such as Google Play download button clicks, pricing toggle usage, and support link clicks).

We do not intentionally collect personal data beyond what is described above.

3. App Permissions and On-Device Processing

TallyMyCash requests only the Android permissions necessary for specific user-initiated features:

• Camera (CAMERA): Used only when you scan a bill/receipt or capture a photo attachment. Bill text scanning uses bundled on-device Google ML Kit Text Recognition directly on your phone.
• Phone Call (CALL_PHONE): Used only when you explicitly tap a call button inside Khata, Agency Collection, or WhatsApp Chatter to dial a contact.
• Notifications & Exact Alarms (POST_NOTIFICATIONS, SCHEDULE_EXACT_ALARM, RECEIVE_BOOT_COMPLETED): Used to trigger local due-date reminders that you schedule for bills, khata entries, or loans.
• Contacts: TallyMyCash does not request the READ_CONTACTS permission. When you choose to pick a contact, the app uses the standard Android system Contact Picker so you share only the single contact you select.
• Android Auto Backup Exclusion: To prevent unintended background copying of sensitive financial databases, TallyMyCash excludes its local database and attachment files from automatic OS device-to-device backup; cloud backups occur only when you explicitly use the in-app Cloud Backup feature.

4. How We Use Your Information

We use the collected information strictly for the following purposes:

• Email Address & Firebase UID: Used to authenticate your account, store and retrieve your manual Cloud Backups, link your TallyMyCash Pro subscription entitlement, synchronize Agency Collection workspaces, and attribute referrals.
• Calculation & Backup Data: Used solely to provide backup and restore functionality, ensuring you can recover your data if needed.
• Agency Collection Data: Used to synchronize daily retailer targets, collections, deposits, and verification statuses between a Super Agent and their authorized Collection Agents.
• Analytics & Crash Data: Used to monitor app stability, identify and fix crashes or database migration issues, and improve user experience.
• Device & Integrity Signals: Used to prevent unauthorized API access (via Firebase App Check) and prevent referral fraud.

The legal basis for processing your personal data is the performance of a contract (providing the app features and subscriptions you request) and our legitimate interests (maintaining security, preventing fraud, and improving stability).

5. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing or promotional purposes. Information is shared only in the following limited circumstances:

• Google / Firebase Infrastructure & Google Play: We use Google Cloud and Firebase services (Firebase Authentication, Firebase Crashlytics, Google Analytics, Firebase Remote Config, Firebase App Check, Firebase Realtime Database, and Google Cloud Run / Firestore) and Google Play Billing to operate authentication, crash reporting, subscription verification, and Agency Collection sync. Google processes this data in accordance with Google's Privacy Policy.
• Within Your Agency Collection Workspace: If you join or operate an Agency Collection workspace, relevant collection targets, retailer names, and submitted collection/deposit entries are shared between the Super Agent (Owner) and the authorized Collection Agents of that agency.

6. Your Rights and Choices

You have the following rights regarding your personal data:

• Access and update your personal information
• Request deletion of your data
• Use the app locally without signing in
• Object to or request restriction of the processing of your data
• Data portability (including exporting your records to PDF and Excel directly in the app)

These rights apply in accordance with applicable data protection laws, including the Digital Personal Data Protection Act (DPDPA) in India, the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and the Brazilian General Data Protection Law (LGPD). To exercise these rights, please contact us using the information in Section 11.

7. Data Retention and Deletion

We retain your online data only for as long as necessary to provide you with our services and as described in this Privacy Policy. You can delete your online backup data at any time through the app's settings.

8. Data Security

We implement appropriate technical and organizational security measures—including HTTPS/TLS encryption in transit, Firebase Authentication ID token verification, and Firebase App Check (Play Integrity) attestation—to protect your personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

9. Children's Privacy

Our app is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy. We review this policy at least annually to ensure it remains accurate and up-to-date.

11. Data Controller and Contact Information

The data controller for the information you provide or that is collected by Tally My Cash is:

Tally My Cash (ThinkingLevel)
Email: tallymycash@addas.thinkinglevel.com

Data Protection Officer:
Akashdeep Das (ThinkingLevel)
Email: tallymycash@addas.thinkinglevel.com

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: tallymycash@addas.thinkinglevel.com
• Telegram Support: https://telegram.me/tallymycash?direct