Privacy policy

Thallo is run from Denmark. Thallo, Denmark, is the controller of your personal data. In this policy "we" means Thallo.

Privacy contact: privacy@mythallo.net.

Your sign-in details

Auth0, a dedicated sign-in service, handles sign-in. You can use a passkey, Google, Apple, or an email address and password.

Auth0 passes Thallo your email address, an identifier for your sign-in, and your name if your sign-in method provides one. If you sign in with Google or Apple, this comes from them through Auth0. Thallo uses it only to create your account and show your name in Settings. It isn't shared or used for advertising.

If you sign in with Google, Google sends Auth0 your name, email address and profile picture, and Auth0 passes your email address and name to Thallo. Thallo uses them only to create your account and let you sign in. It doesn't ask for access to your Gmail, Drive, contacts or anything else in your Google account, and it doesn't share this data or use it for advertising.

Thallo never sees or stores your password. If you use a password, Auth0 stores it.

What you enter

• Your accounts: the name you give each one, its type (for example Cash, Brokerage, Property or Loan), its currency, and how often you expect to update it
• The balances you type in, with their dates
• Any notes you add to an account
• Exchange rates in a spreadsheet you import
• Accounts and balances from a spreadsheet you import. The file is read in your browser and never uploaded. Only the accounts and balances you confirm are saved.

This is financial information about you. Thallo has only what you type in.

Your settings

Your display currency, whether Signals are on or off, and your analytics choice. When you are signed in, the analytics choice is saved with your settings. On pages you see before signing in, a cookie remembers it.

Usage statistics, only if you say yes

If you accept analytics cookies, Google Analytics records which screens you use. It never receives amounts, account names, notes or anything you typed. Page addresses are sent as templates, such as /accounts/[id], so an account's identifier is not sent. See the cookie policy.

Technical logs

Like most web services, our hosting and sign-in providers keep short-lived technical logs, such as IP addresses, browser type and the time of each request. They are used to keep Thallo running and secure. Balances, statement contents and tokens are never written to logs. Pages that show your numbers are never cached by the content delivery network.

• Bank, brokerage or exchange logins. Thallo has no connection to any bank and can't move money.
• Transactions. Thallo doesn't look at spending at all.
• Statements. You type a balance; Thallo never receives the document it came from.
• What is inside a brokerage account. Thallo stores one balance per account, not individual holdings.
• Payment details. Thallo is free during early access and takes no payments. This policy will be updated before that changes.

You need an email address and sign-in details to use Thallo. Everything else is up to you, though Thallo can't show a net worth without at least one account and balance.

Signals are a short weekly list of things worth a look, such as how much a fall in the dollar cost you this month. Thallo's own code finds and calculates every number. An AI model, Claude from Anthropic, picks which ones to show and writes the sentences. Signals don't make decisions about you and don't give investment advice.

For this, Thallo sends a summary of your figures to Anthropic's API: account names, amounts and dates. It never sends notes, institutions, statements or logins.

Signals are on by default for new users. This happens only while Signals are on. If you turn them off in Settings, nothing more is sent. Under Anthropic's commercial terms, it doesn't use this data to train its models.

Thallo uses these service providers. Each one handles your data only to provide its service to Thallo.

Exchange rates come from a free public service, Frankfurter, which publishes rates from central banks and official sources. Thallo downloads rates from it and sends it none of your data.

We don't sell your data or share it with advertisers, and Thallo shows no advertising. We share data with authorities only if the law requires it.

Your data is stored in a managed Postgres database (Supabase, through Lovable Cloud), encrypted at rest. Every row belongs to one user, and the database itself enforces that you can only read your own rows.

Your data may be stored in data centres in the US and Europe. Some of the providers above are based in the US. Where your data leaves the EU, it is covered by the safeguards the GDPR allows, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

• Your accounts, balances, notes and settings: until you delete your Thallo account.
• When you ask to delete your account, there is a 7-day window. Signing back in during those 7 days cancels the deletion. After 7 days everything is deleted permanently. Copies can stay in database backups for a short while after that, until the backups are replaced.
• Your Auth0 sign-in record is deleted at the same time as your account.
• Technical logs: a short time, set by each provider.
• Google Analytics data: 2 months.

Wherever you live, you can do the following.

• Access. You can download everything you've entered as CSV files from the app at any time, free on every plan. For anything else we hold, write to us.
• Correction. You can edit any account, balance or setting yourself. Email changes: write to us and we'll change it.
• Deletion. You can delete your account in the app. Everything is deleted after the 7-day window described above.
• Portability. The CSV export gives you your data in a common, machine-readable format. Export and account deletion work on every plan, whether or not you pay.
• Objection and restriction. You can object to uses based on legitimate interests, or ask us to restrict use while a complaint is looked at.
• Withdrawing consent. You can turn off analytics in your cookie settings and turn off Signals in Settings at any time. This doesn't affect what happened before.

To use a right that the app doesn't cover, write to privacy@mythallo.net. We will reply within a month. We may need to confirm it's you before we act.

If you're unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk). In the EU it is the authority in the country where you live or work, or where you think the problem happened. Our lead supervisory authority is Datatilsynet, the Danish Data Protection Agency (datatilsynet.dk).

Thallo uses a few cookies it needs to keep you signed in and to remember your cookie choice. It sets Google Analytics cookies only if you agree. See the cookie policy.

Thallo is not for anyone under 18. We don't knowingly collect data from children. If you think a child has created an account, write to us and we will delete it.

The main measures are described above and on the security page. No way of storing data is perfect. If a breach puts your data at risk, we will tell you, and Datatilsynet where the law requires it.

If we change this policy, we will update the date at the top. For a change that matters, such as a new provider receiving your data, we will email you at least 30 days before it takes effect.

Privacy questions or requests: privacy@mythallo.net