Privacy Policy

Who we are

Tallyfold is operated by Elder Yew, based in the United Kingdom. When we say "we", "us", or "our", we mean Elder Yew.

For any questions about this policy or your data, contact us at support@elderyew.com.

What data we collect

When you create a Tallyfold account, we collect:

• Account information: your name, email address, and a hashed version of your password. We never store your password in plain text.
• Financial data you enter: account balances, property values, mortgage details, debt balances, and any other financial information you choose to input. This data is provided by you manually. We do not connect to your bank or any third-party financial provider.
• Settings and preferences: your salary, tax code, region, pension details, and other profile information used to personalise calculators and projections.

We do not collect data you have not explicitly provided.

How we use your data

We use your data to:

• Display your net worth dashboard, charts, and projections
• Pre-fill calculator inputs based on your profile
• Send you account-related emails (password resets, important service updates)
• Show you contextual content, advertisements, and financial product information relevant to the page or feature you are using (for example, mortgage-related content on the property page)
• Generate aggregated, anonymised insights and statistics that cannot identify any individual user

We do not sell your personal data to third parties. We do not share your identifiable financial data with advertisers or partners. Contextual advertising is based on the page you are viewing, not your personal financial details.

Aggregated and anonymised data

We may create aggregated, anonymised datasets from user activity. This data is stripped of all personally identifiable information and cannot be used to identify you. For example, we might report that a certain percentage of UK users in a given age group hold an ISA.

We may share these anonymised insights with partners, advertisers, and financial service providers. This helps us keep the service free and improve the content we show you.

Personalised recommendations (future)

In the future, we may offer personalised financial product recommendations based on your profile and financial data (for example, suggesting a mortgage broker when your fixed rate is approaching expiry). This feature will only be enabled with your explicit opt-in consent, which you can withdraw at any time from your Settings page. We will never share your identifiable financial data with third parties without your consent.

Free calculators (no account required)

Our financial calculators are available without creating an account. If you use the calculators without signing in, we do not collect any personal data. All calculations run in your browser and are not stored on our servers.

Legal basis for processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract: processing your financial data is necessary to provide you with the Tallyfold service you signed up for.
• Legitimate interest: sending essential service communications, maintaining security, displaying contextual advertising, and generating anonymised aggregated insights.
• Consent: personalised recommendations and optional communications (such as product updates) will only be sent with your explicit consent, which you can withdraw at any time.

Data storage and security

Your data is stored in a PostgreSQL database hosted by Neon, with servers in the EU. The application is hosted on Vercel. All data is transmitted over HTTPS (encrypted in transit). Passwords are hashed using bcrypt before storage.

We take reasonable measures to protect your data, but no system is 100% secure. If you become aware of any security issues, please contact us immediately.

Data retention

We keep your data for as long as your account is active. If you delete your account, all your personal and financial data is permanently deleted from our database. We do not keep backups of deleted accounts.

Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Object to or restrict processing of your data

To exercise any of these rights, email us at support@elderyew.com. You can delete your account at any time from the Settings page.

Cookies

We use a single essential cookie to keep you signed in (session cookie). We may in the future use analytics cookies to understand how people use the service and advertising cookies to support contextual advertising. If we introduce non-essential cookies, we will ask for your consent before setting them and provide a way to manage your preferences.

Third-party services

We use the following third-party services to operate Tallyfold:

• Vercel: application hosting and analytics
• Neon: database hosting (EU servers)
• Resend: transactional email delivery
• Stripe: payment processing (if applicable)

These providers process data on our behalf under their own privacy policies and data processing agreements.

We may also work with advertising partners and affiliate networks. These partners may appear on pages within Tallyfold. Any data shared with these partners will be contextual (based on the page being viewed) or aggregated and anonymised. We will not share your identifiable personal or financial data with advertising partners without your consent.

Children

Tallyfold is not intended for use by anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through the application. The "last updated" date at the top of this page shows when the policy was last revised.

Contact

If you have questions or concerns about this policy, or if you wish to make a complaint, contact us at support@elderyew.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.