Privacy Policy
TALA Future Self
This policy explains how this application handles information and how to contact us about privacy.
Information we process
TALA Future Self stores the scenario names, monthly income, fixed and variable expenses, starting savings, decision amounts, types, rates and terms, and actual financial period records that you enter. These records are stored in a SQLite database on your device and sent to the application backend for private synchronization. Your optional profile name, currency, language, default horizon and reminder preference are stored locally and are not sent in synchronization. The app generates a random installation secret and stores it in the device Keychain. The server stores a SHA-256 hash of that secret to separate installation data. Requests to the API and public website also reach Railway infrastructure, which processes network metadata such as IP addresses, request paths, times and response status. The app has no accounts, advertising SDK, analytics SDK, bank connection, location tracking or contact access.
How we use information
Financial information is used to save and synchronize your scenarios, decisions and actuals and to calculate projections on the device. The installation secret authorizes access to only that installation's server records. Local preferences control presentation. If you enable reminders, iOS schedules local notifications on your device; no notification delivery service or email system is used. Infrastructure request information is processed to deliver and protect the hosted API and public pages and diagnose service failures. Financial projections use your assumptions and do not retrieve market or bank data.
Service providers and sharing
The backend and this public privacy page are hosted by Railway. Railway and its infrastructure providers process hosted application data and network metadata to provide the service. The application does not sell your information or share it with advertising, analytics or marketing services. The backend's application logs contain startup events and generic internal error identifiers rather than financial payloads or authorization secrets. Infrastructure logs may contain request metadata; this application does not control or promise a specific Railway infrastructure log retention period. Opening the privacy page sends an ordinary HTTPS request to its host. If you email the privacy contact, your email provider and the recipient's email provider process that correspondence.
Data retention
Local records remain until you delete them or remove the application's local data. Keychain secrets can remain after app removal according to iOS behavior; uninstalling alone does not request deletion from the server. Server financial records are kept on the service's persistent SQLite volume until an authorized deletion or service retirement; no automatic expiry is configured. Local files may be included in device backups managed by your operating system settings. The installation secret uses a device-only Keychain accessibility class and is not designed for migration to another device. No application-managed server backup schedule is configured. Infrastructure copies, snapshots or logs, if retained by the hosting provider, follow that provider's practices; immediate erasure of every provider copy is not promised.
Deleting your information
Use Profile > Delete all data to clear the local financial records and profile and request authenticated deletion of this installation's server records. The app also cancels its scheduled reminders. If offline, local records are cleared immediately and a deletion request remains queued on the device until a connection succeeds. The server deletes the installation row and checkpoints its SQLite write-ahead log. The device installation secret remains available to authorize queued deletion and future use; it is not an account and does not contain your financial data. Removing the app before queued deletion completes may prevent completion. Deleting a scenario also removes its linked decisions and actuals. Deletion from active storage does not alter backups under your control or guarantee immediate removal of provider-managed infrastructure copies. Contact the privacy email for assistance with privacy requests; without an installation secret the operator cannot reliably identify anonymous installation records, and no recovery through login is offered.
Permissions and your choices
Local notifications are optional and requested only when you enable a reminder. You can turn reminders off in Profile or withdraw notification permission in iOS Settings at any time. Withdrawing permission prevents notification delivery and does not remove your financial records. The app does not request location, camera, microphone, photos or contacts permission. Internet access is used for private synchronization and the privacy policy link. Core calculations and editing remain available offline.
Your privacy rights
You can inspect and edit your scenarios and profile in the app and delete your installation's data there. Depending on your location, you may have rights to request access, correction, deletion, restriction or information about processing and to complain to a relevant data protection authority. Send privacy inquiries to jack.ed.tarsh@icloud.com. This address is a privacy contact only, not an account or in-app messaging service. Do not send your installation secret or sensitive financial details by email. Because there are no user accounts or identity records, verification and the ability to locate server records may be limited without the app's authenticated controls.
Security
The deployed API uses HTTPS. A separate cryptographically random 32-byte installation secret authorizes private requests, and the server uses its hash as the storage key. The secret is stored in Keychain with a device-only accessibility class; it is never a shared credential embedded in the app. The backend validates record shapes and limits, checks installation authorization before private routes, bounds request sizes and applies rate limits. Local records are in the app's SQLite storage, protected by the device operating system and your device security settings. Financial payloads are not additionally encrypted by the application in SQLite. No security mechanism guarantees absolute protection; protect access to your device and do not share the installation secret.
Children’s privacy
TALA Future Self is designed for adults planning personal financial decisions, particularly adults aged 25 to 45. It is not directed to children and does not knowingly seek children's personal information. The app has no account registration or age profiling system. If you believe a child has provided information, contact jack.ed.tarsh@icloud.com or use the installation's deletion control.
Changes to this policy
This policy describes the current app and backend behavior as of the effective date above. If processing changes, the policy will be updated at this public privacy URL with a new effective date. Review this page for the current version. Material changes that require additional notice or permission will be handled as applicable to the change. Privacy questions may be sent to jack.ed.tarsh@icloud.com.