Tallyleaf: privacy

Last updated 7 October 2026

Tallyleaf is a client for an Actual Budget server that you run or rent yourself. It lets you enter expenses on your phone and sends them to that server. It is a small Android app I build on my own (com.growingpeas.actualclient on Google Play). This page says what it keeps, what leaves your phone, and why it asks for each permission. The controller is Lawrenza SRL, trading as Growing Peas; full details are on the legal notice.

What leaves your phone

• Your transactions go to your own server, and only there. The app connects to the address you type in and to nothing else. That server belongs to you or to the host you chose; I have no access to it and never see what you send.
• Connections use HTTPS. Plain HTTP is accepted only for addresses on your local network (localhost, .local, .lan, .home.arpa, .internal).
• Your server password is sent once, to sign in, and is never stored. The session token the server returns is kept on the phone, encrypted with a key held by the Android Keystore.
• Purchases. The Pro upgrade is a one-time purchase handled by Google Play. Google processes the payment under its own privacy policy; I receive no card details, only the order record Google shares with every developer (order number, product, price and country).

There is no account, no sign-in, no analytics, no advertising, no crash reporting and no server of mine. The app contains no third-party tracking code.

What stays on your phone

• A copy of your budget file, so the app works offline.
• Entries waiting to be sent while you are offline.
• Receipt photos (Pro), picked through the Android photo picker and shrunk to a small JPEG. They are never uploaded, not even to your server.

Android backup is switched off for this app: its data is not copied to your Google account, so uninstalling the app deletes it for good.

Permissions

• Internet: to reach the server address you entered, and Google Play for the purchase.

The app never asks for your location, your contacts or your files.

Limits of use

Tallyleaf is not affiliated with or endorsed by the Actual Budget project. It records what you enter; it gives no financial advice.

Deleting your data

Everything is on your phone, so you delete it there: in the app, or with Settings, Apps, Tallyleaf, Storage, Clear storage, or by uninstalling. I hold no copy to delete. Files you exported or shared stay where you put them.

Children

The app is not directed at children under 13.

Changes and questions

If this page changes, the date at the top changes with it. Write to [email protected] about anything here.