Privacy Notice
Last updated: 12 April 2026
1. Who we are
Tally Up is an income and expense tracking service for Isle of Man sole traders, operated by Tally Up Limited. We are registered in the Isle of Man (company number 138973C) with our registered address at 15 Birch Hill Grove, Onchan, Isle of Man, IM3 4EL. We are registered with the Isle of Man Information Commissioner as a data controller. This Privacy Notice applies to our website at tallyup.im, the Tally Up application, and any communications between you and Tally Up Limited. For data protection purposes, Tally Up Limited is the controller of your personal data. If you have questions about how we handle your data, you can contact us at [email protected].
2. What data we collect
We collect and process the following categories of personal data:
Account data
Your name and email address - used to create and manage your account.
Business data
Your business name, business email address, business phone number (optional), business address (mandatory if VAT registered), VAT registration number, and tax reference number - used to support your income, expense, and tax record-keeping.
Financial records
Income, expenses, invoices, and estimates you create within the service - this is the core data you manage using Tally Up.
Customers and Suppliers data
Names, addresses, and contact details of your customers and suppliers - used for invoicing and expense tracking.
File attachments
Receipts, documents, and images you upload - stored securely with an EU-based cloud storage provider.
Receipt scanning data
When you use our receipt scanning feature, your receipt image is sent to a third-party AI service for text extraction. The image is processed in real-time and is not stored by the AI provider. The extracted data is returned to you for review before being saved.
Payment data
If you subscribe to a paid plan, payments are processed through PayPal. We do not store your card details - PayPal handles all payment information directly.
Technical data
Authentication tokens and basic device information to keep your account secure and support the app on your devices.
3. How we use your data
We process your personal data on the following legal bases under the Applied GDPR:
Contract performance
Most of the data we process is necessary to provide you with the Tally Up service - managing your account, storing your financial records, processing invoices, and running receipt scans.
Legitimate interest
We use technical data to maintain security, prevent fraud, and improve the service. We balance our interests against your rights and only process data where the impact on you is minimal.
Legal obligation
We may retain certain records where required by Isle of Man tax or company law.
4. Who we share your data with
We share your data with the following categories of service providers who help us run Tally Up:
- Hosting infrastructure providers (EU-based) - to run the application
- Cloud storage providers (EU-based) - to store your file attachments securely
- AI processing providers (US-based) - to process receipt scans. Only the receipt image is sent, processing is transient, and no data is retained by the provider
- Payment processors - to handle subscription payments via PayPal
- Email service providers - to send you transactional emails such as account verification and notifications
- Professional advisers - our legal, accounting, and other professional advisers where necessary
- Regulatory and legal authorities - where we are required to do so by law
We will never sell your personal data to third parties.
5. International data transfers
Your data is primarily stored and processed within the European Union, which has an adequate level of data protection recognised by the Isle of Man. When you use the receipt scanning feature, your receipt image is sent to a US-based AI provider for processing. This transfer is transient - the image is processed in real-time and not stored. We ensure appropriate safeguards are in place for any transfers outside the EU/IoM adequate zone.
6. How long we keep your data
We keep your data for as long as your account is active and you continue to use the service. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain records for legal purposes (for example, tax records may be retained for up to 6 years from the end of the relevant tax year, in line with Isle of Man requirements). Financial records you create are retained for the duration of your account to support your tax record-keeping obligations.
7. Data security
We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it, including: • Encryption of data in transit and at rest • Access controls to limit who can view your data • Regular review of our security practices In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Isle of Man Information Commissioner and, where required, notify you without undue delay.
8. Your rights
Under the Applied GDPR, you have the right to:
- Access - request a copy of the personal data we hold about you
- Rectification - ask us to correct any inaccurate data
- Erasure - ask us to delete your data (subject to legal retention requirements)
- Restriction - ask us to limit how we process your data
- Portability - receive your data in a portable format
- Objection - object to our processing of your data
- Withdraw consent - where we rely on consent, you can withdraw it at any time
To exercise any of these rights, contact us at [email protected]. We will respond within one month.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Isle of Man Information Commissioner: Isle of Man Information Commissioner P.O. Box 69, Douglas, Isle of Man, IM99 1EQ Telephone: +44 1624 693260 Email: [email protected] Website: https://inforights.im
9. Cookies
Tally Up uses only strictly necessary cookies for authentication and core app functionality. We do not use any tracking, analytics, or advertising cookies. Because we only use essential cookies, no cookie consent banner is required.
10. Children
Tally Up is a business tool designed for sole traders. It is not directed at children under the age of 16, and we do not knowingly collect data from children.
11. Changes to this notice
We may update this Privacy Notice from time to time. If we make material changes, we will notify you by email. The "last updated" date at the top of this notice will always show the most recent version.
12. Contact us
If you have any questions about this Privacy Notice or how we handle your personal data, please contact us at: Tally Up Limited 15 Birch Hill Grove Onchan Isle of Man IM3 4EL Email: [email protected] You can also contact the Isle of Man Information Commissioner: Isle of Man Information Commissioner P.O. Box 69, Douglas, Isle of Man, IM99 1EQ Telephone: +44 1624 693260 Email: [email protected] Website: https://inforights.im