Gentle Tally Privacy Policy

Data you create

Household names, caregiver names, children’s names, point entries, and notes stay in the app’s protected local database. Signing keys and household secrets stay in the device Keychain.

Nearby sharing

When you start an invitation or Nearby Sync, Gentle Tally exchanges signed ledger information directly with an approved device. The connection uses TLS 1.2 with a pre-shared key and AES-GCM. Each participating device keeps its own copy; the developer cannot access it.

Clock sync

Gentle Tally uses Kronos to request the current time from Apple’s public time service. That request does not contain household or ledger data. The time service necessarily receives network details, such as the requesting IP address, to return a response.

Device permissions

• Camera: scan a caregiver invitation QR code.
• Local network: find approved nearby devices and sync entries.

Device backups and recovery

The household database is excluded from system backups. Signing keys stay on the device that created them and cannot be restored to another device. Keep another trusted caregiver device synced before replacing or erasing a device. The developer cannot recover your household.

If saved history exists without its signing key, the app preserves it for viewing and export. A new invitation from the owner lets you rejoin the same household. An exported history file is a readable record, not an importable backup. Copies you export are stored wherever you choose and are subject to that destination’s privacy and backup settings.

Retention and deletion

The in-app ledger is append-only, so corrections are recorded as new entries. Removing Gentle Tally removes its local database. Security credentials are managed by the iOS Keychain and replaced when a new household is configured. Copies already shared with other caregivers remain on their devices until they remove the app.

Children’s privacy

Gentle Tally is a caregiver tool. It does not create child accounts, advertise to children, or send children’s information to the developer.

Contact

Questions about this policy can be sent to support@gentletally.com.