Privacy Policy

1. About this policy

This Privacy Policy explains how Tillday (“Tillday”, “we”, “us” or “our”) handles information when you use the Tillday mobile application and this website. It is intended to meet the transparency requirements for apps distributed through the Apple App Store.

2. Information you enter or import

You may choose to enter information such as your pay cycle and payday, income names and amounts, hours worked, hourly rates, optional PAYG estimate settings and results, expense names and amounts, budget categories, bill due dates, payment status, and spending activity. You may also choose a CSV or QIF bank statement export and select transactions to add to your activity.

In the mobile app, statement files are copied temporarily into the app’s cache so Tillday can read them on your device, then the temporary copy is deleted. In the web app, statement files are read locally by your browser. Tillday does not upload or retain the original statement file. Transactions you confirm become budget activity and are securely transmitted to Tillday’s cloud database so they can be synchronised with the people you invite to your household.

3. Information we collect

To provide accounts and shared budgets, Tillday processes your email address, authentication identifiers and records, household membership, invitation activity, and the budget and confirmed imported transaction information you choose to add. Imported activity may include transaction dates, descriptions, amounts, whether money was paid or received, the budget item selected, and a duplicate-detection identifier. We do not collect bank login details or automatically retrieve bank transactions.

Tillday does not include advertising software, cross-app tracking, or access to your location, contacts, photos or health information. If you enable Face ID or Touch ID app lock, authentication is performed by iOS. Tillday receives only the result and never receives or stores your biometric data.

4. Website and web app information

The public Tillday website does not require an account. The optional Tillday web app uses the same account, household membership and securely synced budget information as the mobile app. When you log in, your browser stores a session so you remain signed in, and the web app retrieves only household information that your authenticated account is permitted to access.

Like most hosted websites, the infrastructure provider may process limited technical information—such as an IP address, request time, browser type and security logs—to deliver and protect the service. We do not use this information to build advertising profiles or track you across other services.

5. Home and Lock Screen widgets

If you add a Tillday widget, the app provides a limited snapshot containing Available now, Still planned and the current pay-period label to the iOS widget extension on your device. Widget values are marked as privacy-sensitive for supported iOS display protections. The widget can open Tillday or Quick Spend but does not provide data to an advertising or analytics service.

6. How information is used

We use account, budget and confirmed imported transaction information only to authenticate you, deliver password recovery and account notices, provide Tillday’s budgeting, pay-estimate, statement-import, widget and insights features, prevent duplicate imports, synchronise changes across your devices, and share the household budget with members you invite. A household invitation code is single-use and expires after seven days.

7. Storage, retention and deletion

Tillday’s cloud account and budget data is hosted using Supabase infrastructure. A local cache remains on your device to support offline use. Deleting the app removes its local data and widget snapshot but does not automatically delete the cloud account or shared household data.

You can permanently delete your account from Settings in the app. If you are the only member of a household, its budget is deleted with your account. If other members remain, ownership passes to a remaining member and the shared household budget remains available to them. Your account and household membership are removed. Limited records may remain temporarily in protected backups or where retention is required by law.

If you cannot access the app, email richard@tripleit.com.au from your registered address for help with a privacy or deletion request.

8. Sharing and service providers

We do not sell or rent your personal or financial information. Budget information is visible to the members of the household you create or join. We use service providers, including Supabase and an email delivery provider, to host and secure account data, budget data and essential account emails. Information may also be disclosed where required by law or necessary to protect Tillday, its users, or the security of the service.

9. Security

Tillday uses authenticated accounts, encrypted network connections and household-based database access controls. Locally cached data also relies on the security of your device and operating system. You should use a device passcode, Face ID or Touch ID and keep your operating system up to date. No storage method is completely secure.

10. Children’s privacy

Tillday is not directed to children under 13, and we do not knowingly permit children under 13 to create accounts or provide personal information. Contact us if you believe a child has created an account.

11. International users

Tillday is developed in Western Australia. Account, budget and website information may be processed by infrastructure providers in Australia or other locations where they operate. By using Tillday, you understand that information may be processed outside your state or country.

12. Changes to this policy

We may update this policy when Tillday’s features, service providers or legal obligations change. We will publish the revised policy here and update the effective date.

13. Contact

Questions, privacy requests or concerns can be sent to richard@tripleit.com.au. Please do not include sensitive financial information in your message.