Privacy Policy

• TableTally helps you split bills with people. We collect what we need to make that work — your email, your name, the bills you create, and a few optional things like a phone number or Venmo handle.
• Today, TableTally does not use ads or sell personal information. We also do not currently use behavioral tracking or third-party analytics.
• Receipts you scan are sent to a third-party AI service to read the items off them. We don't store the image.
• If you share a bill's claim link or a trip invite link, anyone with that link can see the bill or trip.
• You can delete your account and data at any time.
• Questions? Email Questions@tabletally-app.com.

TableTally is a web app operated by Fireship LLC, a New Jersey limited liability company ("Fireship," "we," "us," "our"). The app lives at tabletally-app.com. This Privacy Policy explains what information we collect when you use TableTally, how we use it, who we share it with, and the choices and rights you have.

By using TableTally you agree to this Privacy Policy. If you don't agree, please don't use the app.

Things you give us

• Email address. Required to sign up. We use it to identify your account, send sign-in links, and contact you.
• Password (if you choose password sign-in). Stored only as a salted hash by our authentication provider. We never see your plaintext password.
• Display name. The name you'd like other users to see.
• Phone number (optional). Only if you choose to add it to your profile.
• Venmo handle (optional). Your Venmo username, if you'd like other users to see how to send you money outside TableTally. We don't connect to Venmo or move money.
• Profile information from a third-party login. If you sign in with a supported third-party identity provider, that provider sends us basic profile information, typically your email and name, to create your account.
• Bill information. When you create a bill, we store the items, prices, taxes, tips, totals, who paid, and who owes what.
• Names of people on your bills. You can add other people by name to bills and trips. Those people may or may not have a TableTally account themselves. You're responsible for entering names you have permission to use.
• Trips and groups. Names of trips you create, the invite codes used to add people, the list of trip members, and whether settlements have been marked complete.
• Receipt images (optional). If you use the receipt-scanning feature, we send the image to a third-party AI service to extract its contents. We don't keep the image after processing. See “Receipt scanning” below.
• Bug reports. If you report a bug from the account screen, we receive a free-text description, the page name, and your email if you choose to include it. The report is sent to us through our email provider.

Things we collect automatically

• Authentication session cookie. A JSON Web Token used to keep you signed in.
• Password recovery cookie. A short-lived cookie (one hour) used during password reset.
• Browser session and local storage. Used for purely functional purposes — preserving an in-progress receipt scan if you reload the page, and remembering a name you typed when claiming a bill on a public link, so you don't have to retype it on the same device.
• Receipt-scan operational telemetry. When you scan a receipt, we record limited metadata: which AI model was used, how long it took, whether it succeeded, how many items it found, an estimated processing cost, and a flag for whether a tip was detected. We do not store the receipt image or its contents in this telemetry.

What we do not collect

• We do not collect payment-card numbers, bank account numbers, or any payment credentials. The optional Venmo handle is a public username, not a payment credential.
• We do not collect government IDs, biometric data, geolocation, or health data.
• We do not use third-party analytics, behavioral tracking, advertising trackers, or marketing pixels.

We use the information we collect to:

• Provide and operate the bill-splitting and trip-tracking features.
• Authenticate you and keep you signed in.
• Send you transactional emails such as sign-up confirmation, password reset, and magic-link sign-in.
• Process receipt images you upload, through a third-party AI service, to extract the line items.
• Monitor the quality and cost of our receipt-scanning feature using aggregate metadata only. We do not read your receipts for this.
• Respond to bug reports and support questions.
• Enforce our Terms of Service and protect against fraud and abuse.

We do not use your information for behavioral advertising, profiling unrelated to running the app, or sale to third parties. We do not send marketing or promotional emails.

We share information only with service providers who help us run TableTally, and only with what they need to do their job. Today, TableTally does not sell personal information.

We may also disclose information if required by law, to comply with valid legal process, to protect our rights or the rights of others, or in connection with a sale or merger of our business, in which case we'll let you know.

When you upload a receipt for scanning, the image is sent to a third-party AI service to extract the items, prices, tax, tip, and total. That provider processes the image under its own terms and may temporarily retain it for abuse prevention or model evaluation. We don't store the receipt image after processing.

You should not upload receipts that contain information you are not permitted to share. The AI service may make mistakes, so please verify what it returns before relying on it.

Two features in TableTally make data available to people through a link:

• Claim links for bills. When you share a claim link for a bill, anyone who has that link can see the bill — the items, amounts, the participants' first names, and totals — and can claim items. They don't need a TableTally account. You decide who to share the link with.
• Trip invite codes. Anyone with a trip's invite link can see the trip name and member list, and can join the trip if they're signed in.

We don't publish your data to any public directory, search engine, or social network.

We use:

• A session cookie, set by our authentication provider, to keep you signed in.
• A short-lived recovery cookie during password reset.
• Browser session and local storage for functional purposes only — preserving in-progress receipt scans, and remembering a claimer's typed name on the same device.

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Because TableTally is currently US-only, we don't display a cookie consent banner. If we expand outside the US, we will add one.

We keep your account information and the bills, trips, and settlements you create as long as your account exists, unless you delete them sooner. We don't auto-delete historical bills or trips.

When you delete your account, we delete your associated profile, bills you created, trips, settlements, and authentication record. Bills you created and shared with others may remain visible to those other participants in their own accounts, since the data is also theirs. Backups and operational logs may persist for up to 90 days after deletion before being overwritten.

Bug reports you send us are retained in our email inbox.

You can delete your TableTally account and the data associated with it at any time. Use the Delete my account button in the Account tab inside the app.

TableTally is currently available only to users in the United States. State privacy laws give you certain rights about your information.

If you live in California (CCPA / CPRA)

You have the right to:

• Know what personal information we have about you and how we use it.
• Delete the personal information we have about you, with limited exceptions.
• Correct inaccurate personal information.
• Opt out of sale or sharing of your personal information for cross-context behavioral advertising. Today, TableTally does not sell or share personal information for cross-context behavioral advertising.
• Non-discrimination. We won't deny you service or charge you a different price for exercising your rights.

We don't run financial-incentive programs in exchange for your data.

If you live in New Jersey

The New Jersey Data Privacy Act gives NJ residents rights to access, correct, delete, and opt out of certain processing of their personal information.

If you live in another US state with a comprehensive privacy law

If you live in a state such as Colorado, Connecticut, Virginia, Texas, Oregon, or another state with a comprehensive privacy law, you generally have rights to access, correct, and delete your personal information.

How to exercise your rights

Email Questions@tabletally-app.com from the email address on your account. We may need to verify your identity before responding. We respond within the timeline required by your state's law.

TableTally is for adults aged 18 or older. We don't knowingly collect information from anyone under 18. If we learn that we've collected information from someone under 18, we will delete the account and the associated data.

We take reasonable measures to protect the information we collect, including:

• Passwords are hashed by our authentication provider; we never see plaintext passwords.
• Database access is governed by row-level security, so users can only access their own data and data shared with them.
• All traffic between your browser and TableTally is encrypted in transit using HTTPS.

No security system is perfect. We can't guarantee that your information will never be accessed in a way you didn't intend, but we work to reduce the risk.

When you create a bill or trip, you can enter the names of other people. Those people don't agree to this Privacy Policy directly. By entering their names you confirm that you have the authority to do so, and you agree that you're responsible for how you use that information.

TableTally is offered only to users in the United States. We don't intend the service for users in the European Economic Area, the United Kingdom, or other jurisdictions outside the US, and we haven't designed it to comply with those jurisdictions' privacy laws.

We may update this Privacy Policy from time to time. When we make material changes, we'll update the effective date at the top of this page and notify you by email. Continuing to use TableTally after the new policy takes effect means you accept the changes.

Questions, requests, or concerns about this Privacy Policy or your information?

Email: Questions@tabletally-app.com