Privacy Policy

Last updated: 14 May 2026

Tally ("we", "us", "our") is a social sports scoring app operated by ChangeLab HQ Ltd (company number 11449760). We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, and your rights.

Data controller

The data controller responsible for your personal data is ChangeLab HQ Ltd (11449760), contactable at privacy@tallysport.com.

What we collect

• Email address — to sign you in via magic link. We don't use passwords.
• Display name and team name — shown to other league members.
• Profile photo — optional, shown to league members.
• Proof photos and videos — images and videos you upload to prove you're watching or participating during matches, visible to your league.
• Push notification token — to send you match alerts and voting updates. Optional.
• Usage data — proofs submitted, votes cast, predictions made, and points earned within your leagues.

Device permissions

Tally may request access to the following device features:

• Camera — to take photos or videos as proof of watching or participating during matches.
• Photo library — to select existing photos or videos to submit as proof.
• Push notifications — to alert you about match events, voting requests, and proof approvals. You can disable this at any time in your device settings.

All permissions are optional. The app will ask before accessing each feature and you can deny or revoke access at any time through your device settings.

How we use it

We use your data solely to run the game — sign you in, show you to your league, process proofs and votes, deliver predictions, and send notifications you've opted into. We don't sell your data, run ads, or share it with third parties except as needed to operate the service:

• Resend — for sending magic link emails
• Expo — for delivering push notifications
• Cloudflare R2 — for storing uploaded photos and videos
• Railway — for hosting the database and application

Data storage

Your data is stored on servers in the EU/US (Railway for the database, Cloudflare R2 for photos). All connections are encrypted via TLS.

Your rights

Under GDPR and applicable data protection laws, you have the right to:

• Access your personal data
• Correct inaccurate data (via your profile settings)
• Delete your account and all associated data (via the app settings or by contacting us)
• Withdraw consent for notifications at any time via your device settings
• Object to processing of your data
• Lodge a complaint with the Information Commissioner's Office (ICO) or your local data protection authority

To exercise any of these rights, email us at privacy@tallysport.com.

Data retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised, aggregated data (e.g. league statistics) may be retained.

Children

Tally is not intended for children under 16 or under the minimum digital consent age in your country, whichever is higher. We do not knowingly collect data from children under this age. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes

We may update this policy from time to time. We'll notify you of significant changes via the app or email.

Contact

Questions about privacy? Email privacy@tallysport.com. See also our Terms of Service.