Privacy Policy — TallyBook

Effective date: December 7, 2025

This Privacy Policy explains how TallyBook (“we”, “us”, “our”) collects, uses, discloses and protects personal information in relation to the app and services, including features that enable upline / downline (team) communication and rewards.

Note: The upline/downline communication feature described below may not be active in your version of the app yet. When enabled, the described data flows and controls will apply.

1. Scope & Definitions

This policy covers data collected through our mobile apps, website and admin systems. Terms:

User — a person who installs or uses TallyBook.
Upline — the chain of referring users above a given user (direct/indirect referrers).
Downline — users referred by a given user (direct/indirect referees).

2. Information We Collect

We collect two types of information:

a) Personal / Identifying Information

Mobile number, name (if provided), profile details.
Payment details you submit for payouts (bank account, UPI id) — stored securely and masked.
Device identifiers, IP address and basic device metadata.

b) Usage & Team Data

Daily entry records (date, items, points earned).
Referral relationships (who referred whom) — required to compute rewards.
Activity timestamps (last-active, entries per day).
Aggregate analytics (impressions, ad clicks) — non-identifiable unless needed for support.

3. Why We Collect This Data (Purposes)

To provide core services: record keeping, calculation of work totals and monthly summaries.
To operate the rewards & 5-level income system (compute points, balances, and payout eligibility).
To enable upline/downline communication (notifications, templates, leaderboards) when the feature is active.
To send transactional messages (payout alerts, important account messages) via SMS, WhatsApp or push.
To comply with legal, accounting and anti-fraud obligations.

4. Upline / Downline Communication — How It Works & Data Shared

When the team communication feature is enabled, the app may facilitate the following:

Notifications to Upline: summary alerts about new members, team performance, and reward eligibility. These notifications contain minimal data (user id or masked mobile, points earned) not sensitive financial details.
Notifications to Downline: messages from their upline (invites, encouragements, team messages) using in-app messaging or via channels you consent to (WhatsApp templates, push notifications).
Leaderboards & Team stats: public or semi-public leaderboards show aggregated scores (points, ranks). These display either the user’s display name or masked mobile as per user settings.

Important: We do not share your bank account or full UPI details with other users. Payout and sensitive financial info remain private and visible only to authorized admin and the individual user.

5. Communication Channels & Third-Party Services

We may use third-party providers to send messages:

WhatsApp / AiSensy / Other providers: for template-based messages (payout alerts, onboarding). Your mobile number and template parameters are sent to the provider to deliver the message.
Push notification services: (FCM/APNs) to send in-app notifications — we send device tokens to the provider.
SMS gateways: for critical SMS alerts.

Third parties process data on our behalf and are contractually prohibited from using it for other purposes.

6. Legal Basis & Consent

By installing and using TallyBook, you consent to collection and processing of your information as described. For marketing or non-transactional messages we will obtain explicit consent where required by law.

7. Sharing & Disclosure

We share minimal profile and points data with your upline/downline only to operate the referral & rewards system.
We share data with service providers (payment processors, messaging gateways, analytics) on a need-to-know basis.
We may disclose information to comply with lawful requests, protect rights, and prevent fraud.

8. Payouts & Financial Privacy

Payouts are processed using linked payment providers (Cashfree, PayU or bank transfer). Your payout destination (bank account/UPI) is stored encrypted and masked in our admin panel. We never display your full bank or UPI details to other users or to your upline/downline.

9. Data Retention

We retain your account, entry and rewards data as long as your account exists and for up to legal or accounting retention periods (typically 3–7 years) for audit and compliance. Aggregate anonymized data may be stored indefinitely for analytics.

10. User Controls & Opt-Out

Profile visibility: you can set a display name or choose to remain with masked identity in team lists.
Notifications: you can opt-out of marketing messages and non-essential communication via Settings → Notifications.
Delete account: you can request account deletion. We will remove personal identifiers while retaining anonymized historical records needed for audits.

11. Security

We follow industry best practices — HTTPS/TLS, database encryption for sensitive fields, role-based admin access, and periodic security reviews. However, no system is 100% secure — in case of a breach we will notify affected users promptly and take corrective measures.

12. Children

Our services are not intended for children under 13 (or local age of consent). We do not knowingly collect personal data from children. If discovered, we will remove such data on request.

13. Changes to This Policy

We may update this policy. We will post the updated policy with a revised effective date and notify users where required.

14. Contact Us

If you have questions, or wish to exercise your rights (access, correction, deletion, data portability), contact us:

TallyBook
Email: support@tallybook.co.in