Privacy Policy

Tally is designed to help users earn rewards at Participating Venues and help Participating Venues understand, reward, and engage with their customers.

When you use Tally in connection with a Participating Venue, including when you shop at, earn rewards from, redeem rewards with, join a group connected to, participate in a challenge for, appear on a leaderboard for, or otherwise interact with that Participating Venue through Tally, we may share information with that Participating Venue so that the venue can operate its loyalty program, understand customer activity, provide rewards, prevent fraud, support customer service, and improve its customer experience.

This may include your name, email address, phone number, username, profile photo, Tally user ID, reward activity, venue visit history, eligible transaction activity at that Participating Venue, points, status, leaderboard activity, challenge participation, group activity, reward redemptions, and related loyalty or engagement information.

Participating Venues do not receive your online banking login credentials, full financial account credentials, or full card numbers from Tally.

Tally does not allow Participating Venues to export user email addresses or phone numbers from Tally’s venue dashboard unless we expressly provide that functionality and the use is permitted by applicable law and our agreements. Participating Venues may access certain user contact information inside Tally for permitted Tally-related purposes, such as operating rewards, supporting customers, preventing fraud, and managing their relationship with customers through the Services.

Participating Venues may not use Tally-provided contact information to send marketing emails, text messages, or other commercial electronic messages outside of Tally unless they have any consent required by applicable law and comply with applicable laws, including email, SMS, anti-spam, and consumer protection laws.

This Privacy Policy applies to personal information we collect, use, disclose, or otherwise process through:

• the Tally website;
• the Tally mobile application;
• Tally user accounts;
• Tally venue dashboards and business tools, including web-based venue onboarding and dashboard access through tallyrewards.com;
• customer support, sales, demo requests, venue onboarding forms, billing communications, and other communications with us;
• card-linked rewards, loyalty, challenge, group, leaderboard, status, and redemption features;
• marketing, referral, invite, venue signup, waitlist, demo request, and promotional features; and
• other connected services and features that help users earn, track, and redeem rewards at Participating Venues.

This Privacy Policy does not apply to third-party services that are not owned or controlled by Tally, including banks, payment networks, Plaid, Apple, Stripe, Datadog, Cloudflare, Infisical, PlanetScale, or Participating Venues’ independent websites, apps, services, or privacy practices.

When you use third-party services, their own terms and privacy policies may apply.

We may collect the categories of personal information described below.

3.1 Information You Provide Directly

We may collect information you provide when you create an account, use the Services, contact us, submit a venue onboarding form, request a demo, access the venue dashboard, or otherwise interact with Tally, including:

• name;
• username;
• email address;
• phone number;
• date of birth or age-related information;
• profile photo;
• profile information;
• account login information;
• venue owner, manager, staff, or administrator name and role;
• business name, business address, business phone number, business email address, website, and venue profile information;
• venue onboarding details, business verification information, reward setup information, and venue preferences;
• billing contact information, invoice information, payment status, subscription status, and payment method metadata handled through Stripe or other payment providers;
• communication preferences;
• support messages and other communications with us;
• referral, invite, or promotional information;
• information you submit through forms, demo requests, venue signup flows, onboarding forms, surveys, feedback tools, or customer support; and
• other information you choose to provide.

3.2 Information From Your Use of Tally

We may collect information about your activity in the Services, including:

• rewards earned;
• points balances;
• status levels;
• venue visits;
• streaks;
• milestones;
• challenges joined or completed;
• leaderboard activity;
• group activity;
• reward views and redemptions;
• Participating Venues you interact with;
• app, website, dashboard, or web portal screens and features used;
• referral and invite activity;
• customer support history;
• preferences and settings; and
• other activity related to your use of Tally.

3.3 Financial, Card-Linked, and Transaction-Related Information

If you link a payment card, bank account, or other eligible financial account through a third-party connection provider such as Plaid, we may receive information needed to operate card-linked rewards and related features.

This may include:

• account or card metadata;
• account identifiers or tokens;
• financial institution information;
• merchant name;
• transaction date and time;
• transaction amount;
• transaction category;
• transaction location or merchant location information;
• transaction status;
• information needed to determine whether a purchase is eligible for rewards; and
• related fraud prevention, compliance, and verification information.

Tally does not receive or store your online banking username or password. Tally does not receive full card numbers from Plaid or participating financial institutions unless expressly stated at the point of collection. We use tokens and other limited identifiers to help operate the Services.

3.4 Information From Participating Venues

Participating Venues may provide us with information to operate rewards, verify redemptions, support customers, prevent abuse, or manage their Tally account, including:

• venue account information;
• venue owner, manager, staff, administrator, and authorized user information;
• business contact information, location information, venue profile details, and onboarding information;
• billing contact information, subscription information, invoice information, and payment status;
• reward, offer, challenge, campaign, event, and promotion information;
• staff user information;
• redemption confirmations;
• customer support notes;
• suspected fraud or abuse reports;
• campaign or challenge information;
• venue-specific loyalty rules;
• staff account permissions and dashboard activity;
• customer lookup, reward configuration, redemption management, and audit log information; and
• other information related to their use of Tally.

3.5 Device, Technical, and Usage Information

We may collect technical and usage information automatically when you use the Services, including:

• IP address;
• device identifiers;
• device type;
• operating system;
• browser type;
• app version;
• referring and exit pages;
• log files;
• crash reports;
• diagnostics;
• approximate location inferred from IP address or technical signals;
• pages or screens viewed;
• buttons, forms, dashboard actions, customer lookup/view activity, reward setup or edit activity, campaign creation, admin permission changes, redemption management, or other features used;
• timestamps;
• session activity;
• cookie and similar technology information; and
• performance, reliability, and analytics information.

3.6 Location Information

We may infer approximate location from your IP address, device information, or transaction/merchant information. We may also collect location information if you enable location-based features or grant device permissions.

If we request access to precise device location, we will do so through the permission settings available on your device. You can control device location permissions through your device settings.

3.7 Information From Third Parties

We may receive information from third parties, including:

• Plaid and other financial connection providers;
• payment networks and financial partners;
• Participating Venues;
• Apple and iOS platform services;
• Stripe and other payment or billing providers;
• Datadog and other analytics providers;
• fraud prevention and security providers;
• marketing and communications providers;
• referral and invite features;
• Cloudflare and other infrastructure, hosting, edge, security, or performance providers;
• PlanetScale and other database providers;
• Infisical and other secrets management or security providers; and
• publicly available or commercially available sources where permitted by law.

We may use personal information for the purposes described below.

4.1 To Provide and Operate Tally

We use information to:

• create, verify, and manage your account;
• authenticate users;
• connect eligible cards or accounts;
• identify qualifying transactions;
• calculate points, rewards, status, streaks, milestones, and challenge progress;
• display eligible activity in your account;
• support leaderboards, groups, challenges, and social features;
• support reward redemption;
• provide venue discovery and venue-specific experiences;
• operate Participating Venue dashboards, venue onboarding flows, venue billing, web-based business tools, staff/admin access, and audit logs;
• provide customer support;
• process subscriptions, Apple native customer billing, Stripe venue billing, invoices, payments, refunds, taxes, or other billing where applicable; and
• otherwise provide the Services.

4.2 To Share Relevant Activity With Participating Venues

We use and disclose information so Participating Venues can:

• operate loyalty and rewards programs;
• identify customers participating in their Tally program;
• view customer activity connected to their venue;
• understand visit frequency, spend, rewards, points, status, and redemptions;
• support customer service and reward issues;
• verify and process redemptions;
• manage challenges, groups, leaderboards, and campaigns;
• detect and prevent fraud or abuse;
• improve their customer experience; and
• measure performance of their Tally program.

4.3 To Personalize and Improve the Services

We use information to:

• personalize rewards, venue recommendations, challenges, groups, and app experiences;
• understand how users engage with Tally;
• improve reliability and performance;
• develop new features;
• troubleshoot bugs and technical issues;
• measure marketing and product performance;
• conduct research and analytics; and
• improve our business and Services.

4.4 To Communicate With You

We may use information to send:

• account messages;
• reward and redemption updates;
• security alerts;
• support responses;
• service updates;
• subscription and billing notices;
• policy or Terms updates;
• app notifications;
• marketing messages from Tally where permitted by law;
• venue-related messages within Tally; and
• other communications related to your use of the Services.

You may opt out of certain marketing communications as described in this Privacy Policy. You may still receive transactional, account, security, legal, or service-related messages.

4.5 For Safety, Security, Fraud Prevention, and Compliance

We may use information to:

• verify identity and account activity;
• detect, investigate, and prevent fraud, abuse, misuse, security incidents, unauthorized activity, unauthorized dashboard access, and improper access to or use of customer information;
• enforce our Terms of Service and other agreements;
• protect the rights, safety, and property of Tally, users, Participating Venues, and others;
• comply with legal obligations;
• respond to lawful requests; and
• maintain business records, audit logs, access logs, billing records, and compliance records.

We may disclose personal information as described below.

5.1 Participating Venues

We may disclose information to Participating Venues where you shop, earn rewards, redeem rewards, participate in venue-related activity, or otherwise interact with that venue through Tally.

This may include:

• name;
• email address;
• phone number;
• username;
• profile photo;
• Tally user ID;
• visit history at that Participating Venue;
• eligible transaction information at that Participating Venue;
• transaction date, time, amount, and merchant information;
• points and rewards activity;
• status, streak, and milestone information;
• challenge participation;
• leaderboard information;
• group activity;
• reward redemptions;
• fraud prevention or support information; and
• other information reasonably needed to operate Tally features for that Participating Venue.

Participating Venues do not receive information about your transactions at unrelated venues unless that information is made available through a Tally feature you use, is aggregated or de-identified, or you otherwise direct or permit us to share it.

5.2 Service Providers

We may disclose information to vendors and service providers that help us operate Tally, including providers of:

• our own backend services, including systems we operate under names such as Abacus;
• hosting, infrastructure, edge, security, and performance services, including Cloudflare;
• database services, including PlanetScale;
• secrets management and security services, including Infisical;
• analytics and product analytics services, including Datadog;
• app performance and crash reporting;
• customer support;
• communications;
• venue billing and payment processing, including Stripe;
• customer subscription billing through Apple native in-app purchase systems;
• Apple native push notifications and related iOS platform services;
• fraud prevention;
• security;
• identity verification;
• marketing tools;
• professional services; and
• other business operations.

These providers are authorized to use personal information only as needed to provide services to us or as otherwise permitted by law and contract.

5.3 Financial Connection and Payment Providers

We may disclose information to Plaid, Stripe, Apple, app stores, financial institutions, card networks, and other partners as needed to connect accounts, match eligible transactions, process venue billing, manage customer subscriptions through Apple native billing, prevent fraud, and operate card-linked rewards.

5.4 Platform and App Providers

We may disclose information to Apple, iOS platform providers, Apple native notification services, app store services, and device service providers as needed to provide app functionality, notifications, customer subscriptions, analytics, security, and app distribution.

5.5 Business Transfers and Financing

We may disclose information in connection with a merger, acquisition, financing, investment, corporate reorganization, bankruptcy, sale of assets, due diligence process, or similar transaction.

5.6 Legal, Safety, and Compliance

We may disclose information if we believe disclosure is reasonably necessary to:

• comply with law, legal process, or governmental request;
• enforce our Terms of Service or agreements;
• protect the rights, property, or safety of Tally, users, Participating Venues, or others;
• detect, investigate, or prevent fraud, abuse, or security incidents;
• respond to claims or disputes; or
• protect the integrity of the Services.

5.7 With Your Direction or Consent

We may disclose information when you direct us to do so, consent to the disclosure, or use features that involve disclosure of information.

5.8 Aggregated or De-Identified Information

We may create, use, disclose, share, license, monetize, or otherwise commercialize aggregated, anonymized, de-identified, or statistical insights that are not intended to identify you personally. We may use this information for analytics, reporting, research, benchmarking, product development, marketing, business development, and other lawful business purposes.

Participating Venues are independent businesses. They may use information received through Tally only for purposes permitted by Tally and applicable law, including operating their Tally loyalty program, understanding customer activity, supporting rewards and redemptions, preventing fraud, improving customer experience, and communicating with customers through Tally-enabled features.

Participating Venues may not sell Tally-provided personal information, export Tally-provided email addresses or phone numbers from the venue dashboard where export functionality is not provided, or use Tally-provided contact information for direct marketing outside of Tally unless they have any legally required consent and comply with applicable law.

Once you interact directly with a Participating Venue outside of Tally, such as by making a reservation, joining the venue’s own mailing list, purchasing directly from the venue, using the venue’s website, or otherwise providing information directly to the venue, the venue’s own privacy practices may also apply.

Tally is not responsible for a Participating Venue’s independent privacy practices outside of the Services.

7.1 Tally Communications

We may send you emails, text messages, push notifications, in-app messages, or other communications about your account, rewards, subscriptions, security, policy updates, support, and the Services.

Where permitted by law, we may also send marketing or promotional messages about Tally, Participating Venues, rewards, offers, challenges, groups, events, or features.

You can opt out of marketing emails by using the unsubscribe link in the email. You can control push notifications through your device settings. You can reply STOP to certain text messages where that option is provided. Even if you opt out of marketing, we may still send transactional, account, legal, security, billing, or service-related messages.

7.2 Venue Communications Through Tally

Participating Venues may be able to reach users through Tally-enabled features, such as in-app messages, rewards, challenges, campaigns, notifications, or other venue-related features. These communications are part of the Tally service and may be based on your interactions with that Participating Venue.

7.3 Venue Communications Outside Tally

Participating Venues may not use Tally-provided contact information to send you marketing emails, SMS messages, or other commercial electronic messages outside of Tally unless they have any consent required by applicable law and comply with applicable legal requirements, including unsubscribe or opt-out requirements.

We and our service providers may use cookies, software development kits, pixels, local storage, device identifiers, session logs, dashboard analytics, and similar technologies across our website, mobile app, venue dashboard, and related Services to:

• operate the Services;
• remember preferences;
• authenticate users;
• analyze usage;
• measure performance;
• diagnose errors;
• prevent fraud;
• improve features;
• support marketing; and
• understand how users interact with Tally.

You may be able to control cookies through your browser settings. Mobile operating systems may provide settings to limit certain tracking or analytics. Some features may not work properly if cookies or similar technologies are disabled.

We retain personal information for as long as reasonably necessary to provide the Services, operate rewards and loyalty features, maintain business records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and protect the Services.

In general:

• account information is retained while your account is active;
• reward, redemption, and transaction-related records may be retained as needed for loyalty, tax, accounting, audit, fraud prevention, dispute resolution, and compliance purposes;
• linked account tokens or access credentials are revoked or deleted when you disconnect the applicable account or as otherwise required by our providers and retention practices;
• support records may be retained as needed to resolve issues and maintain business records;
• analytics, access logs, dashboard activity logs, customer lookup logs, and technical log data may be retained on rolling schedules;
• venue onboarding, billing, invoice, staff access, audit, and compliance records may be retained as needed for business, legal, accounting, security, and compliance purposes; and
• backup copies may remain for a limited period before deletion according to our backup practices.

If you request deletion of your account, we will delete or de-identify personal information unless we need to retain certain information for legal, security, fraud prevention, accounting, dispute resolution, compliance, or legitimate business purposes.

10.1 Account Deletion

You may request deletion of your Tally account by contacting us at privacy@tallyrewards.com or through any account deletion feature available in the app.

After receiving a deletion request, we may need to verify your identity. We will delete or de-identify personal information as required by applicable law, subject to permitted retention for legal, security, fraud prevention, dispute resolution, accounting, or legitimate business purposes.

10.2 Disconnecting Linked Accounts

You may disconnect linked accounts or cards through the app where available or by contacting us. Disconnecting a linked account may prevent you from earning rewards automatically and may limit your ability to use certain Services.

Disconnecting a linked account does not automatically delete historical reward, transaction, redemption, or business records that we are permitted or required to retain.

10.3 Marketing Choices

You may opt out of marketing emails by using the unsubscribe link in the message. You may manage push notifications through your device settings. You may opt out of certain SMS messages by following instructions in the message.

10.4 Profile, Social, Group, and Leaderboard Choices

Tally may provide settings that allow you to control certain profile, social, group, or leaderboard features. Availability of these controls may vary by feature. Some information may remain visible where needed to operate rewards, prevent fraud, verify redemptions, or maintain the integrity of venue programs.

Depending on where you live, you may have rights under applicable privacy laws. These rights may include the right to:

• access personal information we hold about you;
• request correction of inaccurate personal information;
• request deletion of personal information;
• request a copy of certain personal information in a portable format;
• withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice;
• object to or restrict certain processing;
• opt out of certain marketing communications;
• opt out of certain sales, sharing, or targeted advertising where applicable;
• limit certain uses or disclosures of sensitive personal information where applicable; and
• appeal a privacy rights decision where applicable law provides that right.

To exercise privacy rights, contact us at privacy@tallyrewards.com.

We may need to verify your identity before processing your request. We will not discriminate against you for exercising rights provided by applicable law.

Some rights may be limited by law, our legal obligations, fraud prevention needs, security requirements, or the need to provide the Services.

Tally is incorporated in Delaware and operates in the United States and Canada. Depending on your state of residence and our legal obligations, you may have additional privacy rights under state privacy laws.

12.1 Categories of Personal Information Collected

Depending on how you use the Services, we may collect:

• identifiers, such as name, email address, phone number, username, device identifiers, IP address, and Tally user ID;
• customer records information, such as account details and contact information;
• commercial information, such as rewards, redemptions, venue interactions, subscriptions, purchases, and eligible transaction information;
• financial-related information, such as linked account metadata, transaction information, and payment-related information;
• internet or electronic network activity information, such as app usage, log data, and analytics;
• geolocation information, such as approximate location inferred from IP address or transaction/merchant location and, where enabled, device location information;
• audio, electronic, visual, or similar information, such as profile photos or support communications;
• inferences, such as preferences, engagement patterns, venue interests, and reward activity; and
• other information you provide or that we collect as described in this Privacy Policy.

12.2 Purposes for Collection and Use

We collect and use these categories of information for the purposes described in this Privacy Policy, including providing the Services, operating rewards, sharing relevant activity with Participating Venues, preventing fraud, improving Tally, communicating with users, and complying with law.

12.3 Disclosure of Personal Information

We may disclose the categories of personal information described above to:

• Participating Venues;
• service providers;
• financial connection and payment providers, including Plaid and Stripe;
• Apple and iOS platform providers;
• analytics providers, including Datadog;
• infrastructure, edge, security, database, and secrets management providers, including Cloudflare, PlanetScale, and Infisical;
• professional advisors;
• authorities or third parties where legally required; and
• parties involved in business transfers.

12.4 Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. This does not restrict Tally from creating, using, sharing, licensing, monetizing, or otherwise commercializing aggregated, anonymized, de-identified, or statistical insights that are not intended to identify you personally.

We do not allow Participating Venues to buy user contact information from Tally or export user email addresses or phone numbers from Tally’s venue dashboard unless we expressly provide that functionality and the use is permitted by applicable law and contract.

Some U.S. privacy laws define “sale,” “share,” or “targeted advertising” broadly. If we engage in activities that require an opt-out right under applicable law, we will provide the required notice and choice.

12.5 California Shine the Light

California residents may request information about certain disclosures of personal information to third parties for their direct marketing purposes, if applicable. To make a request, contact us at privacy@tallyrewards.com with “California Shine the Light Request” in the subject line.

If you are located in Canada, including Quebec, we handle personal information in accordance with applicable Canadian privacy laws, which may include the Personal Information Protection and Electronic Documents Act, Quebec Law 25, and substantially similar provincial privacy laws.

By using Tally, creating an account, linking a card or account, and interacting with Participating Venues through the Services, you consent to the collection, use, and disclosure of personal information as described in this Privacy Policy, including disclosure of relevant information to Participating Venues where you shop or interact through Tally.

You may withdraw consent, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent to uses or disclosures that are necessary to provide core Tally features, we may not be able to provide some or all of the Services to you.

If you are in Canada, your personal information may be transferred to, stored in, or accessed from the United States or other jurisdictions where we or our service providers operate. Personal information processed outside Canada may be subject to access by courts, law enforcement, governmental authorities, or regulators in those jurisdictions.

To contact us about Canadian privacy rights, email privacy@tallyrewards.com.

We may process, store, and transfer personal information in the United States, Canada, and other countries where we or our service providers operate.

These countries may have privacy laws that differ from those in your jurisdiction. Where required, we use appropriate safeguards designed to protect personal information transferred across borders.

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, disclosure, alteration, and destruction.

These safeguards may include access controls, encryption in transit, vendor controls, logging, monitoring, audit logs, access reviews, and additional protections for sensitive credentials, tokens, financial connection data, venue dashboard access, and customer information available to Participating Venues.

No method of transmission over the internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us if you believe your account has been compromised.

Tally is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Users may be asked to provide their date of birth or age-related information so Tally can support account features, venue rules, rewards, promotions, compliance, fraud prevention, and age-restricted experiences where applicable.

Some Participating Venues, rewards, promotions, events, or features may be age-restricted, including bars, nightlife venues, alcohol-serving venues, or alcohol-related promotions. Tally may restrict access to certain features, venues, rewards, or promotions based on age, location, venue rules, or applicable law.

If you believe a child under 13 has provided personal information to Tally, contact us at privacy@tallyrewards.com and we will take appropriate steps.

The Services may contain links to third-party websites, apps, services, offers, payment flows, or venue pages. We are not responsible for the privacy practices of third parties. Your use of third-party services is subject to their own terms and privacy policies.

We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date and may provide additional notice through the app, website, email, or other reasonable means.

Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

If you have questions about this Privacy Policy or want to exercise privacy rights, contact us at:

Tally Rewards, Inc.
1007 N Orange St., 4th Floor, #4890
Wilmington, DE 19801
New Castle County, United States
Email: privacy@tallyrewards.com

If you contact us by email, please include your name, the email address associated with your Tally account, and a description of your request.