Security
What is protected, and what is not.
Each protection sits next to its limit.
Protections and their limits
| Protected | Its limit or not built |
|---|---|
| Sync updates are encrypted on the device before they leave. | The relay may see which devices sync, which space, update size and timing. |
| An invite carries the space key, and TallieUp never sees it. | Anyone with the invite can join, and can view and update this space. Only share with devices you trust. |
| Devices prove who they are with a signing key. No passwords. | Removing a device is cooperative: it keeps the copy it has, and the key isn’t rotated automatically. |
| Group keys use the operating system secure store. | The local database holds readable records. TallieUp adds no app PIN and doesn’t encrypt it. |
| An encrypted backup needs the file and a separate recovery code. | Lose the code and the backup can’t be opened. |
| Not built | No app PIN, biometric lock or automatic relock. No direct peer-to-peer LAN sync. |
You can start with a demo plan.
When the app is available to you, its first screen offers four ways in. One is a demo plan.
Try a demo plan · Restore encrypted backup · Join with an invite · Create a new space
These are sample numbers, kept separate from your real plan.
Opens an email to hello@tallieup.io. No reply time is promised.