I. General Information
This Privacy Policy explains how personal data is processed when using the tallo mobile application (“App”) and the website https://talloapp.io.
Protecting your data and your family’s data is very important to us.
We process personal data strictly in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR).
II. Data Controller
Dear Friend Digital GmbH
Emilienstraße 9
90489 Nuremberg
Germany
Represented by Managing Directors
Dorothea Utzt and Werner Hoier
Email: support@talloapp.io
III. Nature of the Service
tallo is a virtual pocket money and savings management app for families.
Important:
-
tallo is not a bank or financial service provider
-
No real money is processed or transferred
-
All amounts shown are purely virtual values
-
No payment accounts or payment instruments are provided
IV. Hosting & Data Processing
We use hosting and infrastructure services to operate the App and website.
-
Legal basis: Art. 6(1)(f) GDPR
-
Data processing agreements pursuant to Art. 28 GDPR
-
Data is processed exclusively within the EU
V. App Data Processing
1. Account Registration
Processed data includes:
-
Email address
-
First name
-
Encrypted password hash
-
Language & timezone
-
Authentication provider (Email, Apple, Google)
-
OAuth identifiers
-
Device information
Legal basis: Art. 6(1)(b) GDPR
2. Family & Child Profiles
Parents or legal guardians manage family and child profiles.
Processed data:
-
Child’s name
-
Avatar
-
Color preference
Children do not enter into a contract with us.
3. Virtual Financial Data
The App processes virtual financial data, including:
-
Virtual balances
-
Virtual transactions
-
Saving goals and progress
-
Recurring virtual entries
-
Currency settings
These values:
-
do not represent real financial accounts
-
are stored securely and encrypted
Legal basis: Art. 6(1)(b) GDPR
4. Device & Usage Data
Processed to ensure functionality and security:
-
OS and app version
-
Device model
-
Push notification token
-
App settings and last activity
Legal basis: Art. 6(1)(b) and (f) GDPR
VI. Purchases & Subscriptions
Premium features are purchased via Apple App Store or Google Play Store.
-
Payments are handled exclusively by the stores
-
We do not receive payment details
-
Subscription status is managed via RevenueCat
Legal basis: Art. 6(1)(b) GDPR
VII. Apple & Google Sign-In
If you sign in via Apple or Google, we receive:
-
Email address
-
Display name
-
Provider user ID
Used solely for authentication.
VIII. Website Usage
When visiting our website, technical access data is processed to ensure security and functionality.
Legal basis: Art. 6(1)(f) GDPR
IX. Analytics & Tracking
-
No advertising tracking in the App
-
No cross-app tracking
-
No data selling
-
Website analytics only with consent
Google Analytics and Google tag
After your explicit consent, this website uses the Google tag with ID GT-PJ4PLFVB for audience measurement through Google Analytics. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use Google Consent Mode v2 in its basic implementation. Consent is denied by default. Before you agree, the Google tag is not loaded and no connection to Google Analytics is established. If you enable analytics, data such as page views, time, approximate region, device and browser information, referrer and interactions may be processed. We do not intentionally send names, email addresses or family data entered into Tallo to Google Analytics.
Google technically processes IP addresses for transmission and approximate location. According to Google, IP addresses from users in the EU, Switzerland and the United Kingdom are discarded before they are logged. Processing by Google LLC in the United States or other third countries nevertheless cannot be ruled out completely.
Legal basis: Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Your choice is stored as an essential setting in your browser's local storage. You can change or withdraw it at any time through the permanently available “Cookie settings” button. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
More information is available in Google's Privacy Policy. Data retention in Google Analytics follows the retention period configured for our property and applicable legal requirements.
X. Contact via Email
Emails are processed solely for communication purposes.
XI. Data Retention & Deletion
-
Data is stored only as long as necessary
-
Accounts can be deleted anytime in the App
-
Legal retention obligations remain unaffected
XII. Your Rights
You have the right to access, rectification, deletion, restriction, data portability, objection, and withdrawal of consent.
Supervisory authority:
Bavarian State Office for Data Protection Supervision
Ansbach, Germany
XIII. Data Security
-
Encrypted transmission
-
Access controls
-
EU-based servers
XIV. Changes
This Privacy Policy may be updated.
The current version is always available on our website.
Last updated: 14 July 2026