TallyyTallyy is an attendance-points app that employers use to track attendance policy for their teams. This policy explains what information Tallyy handles, why, and the choices you have. Tallyy is operated by Richard Huynh (“we”, “us”).
In short: Tallyy holds the attendance records your employer keeps in it, plus the details needed to sign you in and notify you. We don’t sell your information, show ads, or track you across other apps or websites.
Who decides what is recorded
Accounts are created by employers, not by individuals. Your employer (the company that gave you your Employee ID) decides what attendance records are kept about you and who in the company can see them. We store and process that information on your employer’s behalf. For questions about a specific record, start with your employer.
Information we handle
- Account details: your name, Employee ID, role (employee, manager or admin), department, and the company you belong to. Your PIN is never stored in readable form.
- Contact details you add: an email address and/or phone number, if you choose to add and verify them in the app.
- Attendance records: attendance infractions, points, dates, drop-off dates, notes, and voided entries recorded by your employer.
- Files: documents your employer attaches to your record, such as write-ups.
- Notifications: if you allow notifications, a push token for your device, and the messages we send you.
- Security and audit information: sign-in attempts (to protect against guessing), and a log of sensitive actions in your company, such as PIN resets or department changes.
Tallyy does not collect your location, contacts, photos library, microphone, camera, browsing history, or advertising identifiers, and contains no third-party analytics or advertising.
How information is used
- To sign you in and show you and your company’s authorized staff the right records.
- To send attendance notifications (by push, email or text, where your company has turned them on).
- To keep the service secure, prevent misuse, and keep an audit trail of sensitive changes.
- To provide support when you or your employer contact us.
Who can see your information
- Your employer: admins and authorized managers in your company, according to the roles your company sets. Companies are fully isolated — no other company can see your records.
- Service providers that run Tallyy for us, only to provide the service: Cloudflare (hosting, database and file storage), Resend (email delivery), Twilio (text message delivery), and Expo / Apple Push Notification service (push notifications).
- Legal requirements: if required by law or to protect the rights, safety and security of users and the service.
We never sell or rent personal information.
Retention and deleting your account
Information is kept while your company uses Tallyy and your account is active. You can delete your account at any time in the app under Settings → Delete Account. When you do:
- Your account is deactivated immediately and you are signed out. Your company’s admins are notified.
- For 30 days, your company’s admin can reinstate the account at your request.
- After 30 days, your identity is removed from the account: your name, Employee ID, email, phone, PIN and notification data are erased. Your employer’s attendance records may be kept in anonymized form, no longer linked to your name.
Your employer can also remove your account and records. To ask about deletion or a copy of your information, contact your employer or us.
Security
Data is encrypted in transit (HTTPS). PINs are stored only as salted hashes, with a separately encrypted copy so authorized company admins can help you sign in. Access is restricted by company and role.
Children
Tallyy is a workplace tool and is not directed to children under 16.
Changes
We will update this page if our practices change, and revise the effective date above.
Contact
Questions or requests: contact@tallyy.us