This Privacy Policy describes how Dakota Labs LLC ("Dakota Labs," "we," "us," or "our") collects, uses, and handles information when you use Tally at tally.dak-labs.dev. Tally is a web application — it runs in your browser and does not require any mobile app installation.
We do not sell your personal data. We do not share it with advertisers. We do not build profiles for third-party targeting. Full stop.
Birthdate. The core function of Tally requires your birthdate. This is the only piece of personal information required to use the app. It is used to calculate your life statistics and is stored on our servers if you have a signed-in account. Guest users' birthdates are stored locally in your browser only.
Account information. If you choose to sign in, we collect the minimum information needed to create your account:
Saved stats and preferences. If you are signed in, we store the life statistics you generate (including your questions and the AI-generated responses), your tone preference (Contemplative, Wry, or Celebratory), and your view preference (grid or list). This lets you pick up where you left off on any device.
Payment information. If you purchase Tally's one-time unlock, payment is processed by Stripe. We do not receive or store your payment card details. We receive a confirmation event from Stripe indicating that a successful purchase was made, which we use to unlock premium features on your account.
Session cookie. When you sign in, we set a single HttpOnly session cookie to keep you signed in. This cookie is strictly necessary for authentication and is exempt from cookie consent requirements. We do not use tracking cookies or advertising cookies.
Basic usage data. We may log basic request data (errors, response times) to keep the service running. This is not linked to your identity for any advertising or profiling purpose.
We do not use your information for advertising, profiling, or any purpose beyond operating Tally.
Stripe. Payment processing for the one-time $0.99 unlock. Stripe handles all card data under their own privacy policy. We receive only a payment confirmation event. Stripe's privacy policy: stripe.com/privacy.
Google (Sign-In). If you choose Google Sign-In, Google authenticates you and passes us your Google ID and email. Google's privacy policy governs what Google collects. We receive only what Google passes to us.
Apple (Sign in with Apple). If you choose Apple Sign-In, Apple authenticates you and passes us a stable user identifier and optionally your email. Apple's privacy policy governs what Apple collects.
Groq (AI Generation). Custom life stats are generated using Groq's language model API. Requests include your question and relevant context (e.g., your age in years). Requests are not linked to personally identifiable information. Groq's privacy policy: groq.com/privacy-policy.
Railway (Backend Hosting). Our server infrastructure is hosted on Railway. Your account data and saved stats are stored on Railway-managed servers. Railway does not access your data for its own purposes.
Cloudflare. Our DNS and web traffic may pass through Cloudflare's network for performance and security. Cloudflare may log request metadata per their own policy.
We retain your account data and saved stats for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law.
Guest usage (no account) generates no persistent data on our servers. Your birthdate is stored in your browser's local storage only, and is cleared when you clear your browser data.
We use industry-standard practices to protect your data: HTTPS/TLS for all connections, HttpOnly cookies, bcrypt for password hashing (cost factor 12), and access controls on our backend systems. No method of transmission or storage is completely secure — we cannot guarantee absolute security.
Access and correction. Contact us to request access to your personal data or to correct inaccurate information.
Deletion. You may request deletion of your account and all associated data by emailing hello@dak-labs.dev. We will process deletion requests within 30 days.
Session cookie. You can sign out at any time to clear your session cookie. Clearing your browser cookies also removes it.
Google / Apple access. You can revoke Tally's access to your Google or Apple account at any time via your Google or Apple account security settings.
Tally is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of Tally after changes constitutes acceptance of the updated policy.
If you have any questions or requests regarding this Privacy Policy:
Dakota Labs LLC
Email: hello@dak-labs.dev
Web: dak-labs.dev