Privacy Policy

Last updated: 24 August 2026

On-device first

TabTell stores your ledger in SQLite on this device. Opening the app does not create a TabTell account. A random device id is generated locally so anonymous AI quotas and event invites can work.

What we receive

If you use AI capture, query, or receipt scan, the text or image you send is processed by our Worker and the model provider (OpenRouter). If you publish an event invite, that event’s members, transactions, and attachments sync to D1 so joiners can see them. Optional encrypted snapshots are ciphertext only — we cannot read your personal ledger.

Payments

App Store, Google Play, and Paddle process Pro purchases. We store store identifiers and a bound device id for Restore Purchases. We do not use a TabTell password.

Your choices

Export JSON anytime. Skip backup and a new phone cannot restore personal data. Contact privacy@tabtell.app for deletion of cloud snapshots or shared events you created.