Privacy notice
Privacy at OtterTally.
Learn what information OtterTally collects, how it is used, and where it is stored across the website and macOS app.
Scope and operator
This notice covers the OtterTally website and the OtterTally macOS app, including accounts, provider connections, purchases, support, and diagnostics. You can contact OtterTally about privacy at bugs@ottertally.app.
Information collected on the website
When you join the product update list, we collect your email address, the form source, your optional marketing choice, and the time you gave that choice. Website hosting and security systems may also process request details such as IP address, browser type, requested page, and request time.
Account and purchase information
When you create an OtterTally account, Supabase Auth processes your email address and authentication information. If you use Google sign-in, Google provides basic account information needed to authenticate you. OtterTally stores account and subscription entitlement details needed to provide account access and Premium features. Checkout and payment details are handled by the payment provider; OtterTally does not receive your full payment card number.
Provider connections
RevenueCat access uses OAuth. The app stores the resulting tokens in your Mac’s Keychain; authorization-code exchange and token refresh pass through OtterTally’s server without storing your RevenueCat grant or reporting data there. Depending on the permissions you approve, the app reads RevenueCat project details, aggregate metrics, charts, and recent activity. It may process subscription identifiers on the Mac to check for overlap with Stripe data; customer identities are not displayed or persisted. Stripe restricted keys are stored in Keychain, and the app sends reporting requests directly to Stripe. Stripe balances, payments, subscriptions, invoices, and limited customer data may be processed locally to calculate metrics; customer identifiers are not saved in reporting archives. You choose which accounts and projects to connect.
Reporting data and device storage
Provider reports, account and project selections, and cached reporting snapshots are stored locally on your Mac. Reporting snapshots are encrypted with a device-local key. OtterTally does not synchronize provider reporting data through its servers. Cached reports may remain available offline until you remove the local data.
Support reports and diagnostics
If you submit a bug report in the app, we receive the report fields you provide, any contact email you enter, and the app and macOS versions. Reports are linked to your OtterTally account. The app does not attach logs, credentials, customer details, or provider reporting data. You can also copy a report or open it in email or macOS sharing. Optional diagnostics sharing sends limited aggregate provider-failure counts; it does not include raw error text, account or customer identifiers, provider records, or credentials.
How information is used
We use information to operate the website and app, authenticate accounts, provide licenses and Premium access, connect the providers you choose, respond to support reports, protect our services, and send product emails when you separately opt in. Marketing consent is optional and is not required to create an account or use the app.
Service providers and disclosures
We use service providers for website hosting, account and database services, hosted checkout and payments, and email delivery when configured. RevenueCat and Stripe process requests you authorize from the app under their own terms and privacy notices. We may disclose information when required by law or when reasonably necessary to protect users, OtterTally, or the public. Providers may process information in countries where they or their infrastructure operate.
Retention and deletion
We keep account information while your account is active and as needed for licensing, security, support, and legal records. You can request account deletion from the app; the deletion flow removes account-linked server records and attempts to erase this Mac’s local reporting data. Use Forget this Mac to remove local credentials, reports, preferences, and session data without affecting another Mac. Update-list records and support reports are retained only as long as needed for their stated purposes and applicable obligations. Service-provider backup retention may continue for a limited period under their policies.
Your choices and rights
You can disconnect RevenueCat, remove Stripe accounts, export or erase local app data, and opt in or out of product emails. To ask for access, correction, or deletion of information held by OtterTally, email bugs@ottertally.app. Rights available to you depend on the laws that apply to your request. You may also contact your local data-protection authority.
Children's information
OtterTally is intended for developers and businesses and is not directed to children. We do not knowingly collect personal information from children.
Changes and contact
We may update this notice when the app, website, or data practices change. Material updates will be posted on this page with a revised date. Privacy questions and requests can be sent to bugs@ottertally.app.
Last updated: 26 October 2026