Guides
Privacy and encryption
What TmCount stores, how encryption works, and how ads are used on the Free plan.
01
Account and group data
TmCount stores your email, display name, and hashed password. Groups store members, categories, expenses, and change history. Invite links let people join, and notification tokens let the app send updates to your device.
Payment providers handle card details. TmCount stores your plan status, not your full card number. See the Privacy Policy for the full details of how data is used.
02
Amount encryption
Expense amounts are encrypted at rest on the server for every group. The server decrypts them when calculating balances, stats, or notifications.
This default encryption covers amounts, not descriptions and other metadata. It isn’t end-to-end encryption: the server can still read the amounts.
03
Optional end-to-end encryption
Premium and partner plans can enable end-to-end encryption for a group. Expense contents are then encrypted on members’ devices. The server stores the encrypted content and the metadata needed to deliver it to the right group. If you lose every device holding a key and have no recovery method, the data may become unreadable.
A placeholder without an account can’t receive a device key. Everyone who needs access to a strictly encrypted group should have a TmCount account. Read the in-app notices and discuss the change with your group before enabling it.
04
Ads on the Free plan
The Free web app may show Google AdSense ads. Premium and partner accounts are ad-free. Google and its partners may use cookies or device identifiers as described in the Privacy Policy and Google’s advertising policies.
In the European Economic Area, the United Kingdom, and Switzerland, a consent message appears where required before personalized ads. You can change or withdraw consent through that message or your browser settings.