Your usage stays yours.
TALLY is built so that your usage figures go from your AI providers to your Mac to your desk, and nowhere else. This policy says exactly what we do collect, and why.
Effective: October 23, 2026In short. TALLY and TALLY Link never send your usage, your sign-ins or your chats to us. On this website we use Google Analytics to count visits, and in Europe only after you agree. We don't run ads, and we don't sell or share personal data. We only hold what you send us: an email for an order notice, a message, or an order.
1. Who we are
TALLY (the device, its firmware, the TALLY Link helper for Mac and this website) is operated by Meta Studios Creative Agency KK (META STUDIOS CREATIVE AGENCY株式会社), Tobu Bldg. 5F, 6-28-9 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan. Representative: Guillermo Alarcon. We are the business operator handling personal information (個人情報取扱事業者) under Japan's Act on the Protection of Personal Information (APPI) and the controller under the EU and UK GDPR. Privacy questions: hello@tallymeter.io.
2. TALLY and TALLY Link
TALLY Link runs on your Mac. To show your limits it reads the Claude Code and Codex sign-ins already stored on that Mac and asks Anthropic and OpenAI for your own usage figures (percentages and reset times). It may renew the Claude Code sign-in when it expires and save it back where Claude Code keeps it. It then sends the figures to TALLY over the USB cable.
- Your sign-ins are used only to talk to Anthropic and OpenAI, and only from your Mac. They are never sent to us or anyone else, and never written to TALLY Link's log.
- TALLY Link does not read the content of your chats or code.
- TALLY itself has no internet connection. It stores its settings, a week of usage history for its own display, and any icons you add, on the device.
- TALLY Link keeps a log on your Mac (~/Library/Logs/TALLY-Link.log) to help you fix problems. It stays on your Mac unless you choose to send it to us.
Your requests to Anthropic and OpenAI are governed by their own privacy policies, as your existing providers.
3. This website
| Data | Why | Recipient |
|---|---|---|
| Server request logs: IP address, time, page, browser | Delivering the site and keeping it secure | Netlify, Inc. (USA), our host |
| Email and chosen edition in the "notify me" form | Writing to you once when ordering opens | Netlify Forms, then us |
| Name, email and message from the contact form | Answering you | Netlify Forms, then us |
| Company, name, work email, quantity, message and logo file from the company editions form | Preparing a quote | Netlify Forms, then us |
Analytics. We use Google Analytics 4 to understand which pages people read and how they found us: pages viewed, approximate country and city, device and browser type, and the page that referred you. Google Analytics sets cookies (named _ga and _ga_*) that last up to 2 years. If you visit from the EU, EEA, UK or Switzerland, these cookies are only set if you choose Accept in the banner; until then Google receives only cookieless signals with no identifiers. Elsewhere analytics is on by default, and anyone can turn it off with Privacy settings at the bottom of every page. We don't use Google's advertising features, and we don't link analytics data to orders.
The site runs no ads. Its fonts are served from our own host, so it makes no requests to font services. We keep your analytics choice in your browser's local storage so we don't ask again.
4. When you order
Name, delivery address, phone number (required by the carrier), email, the items ordered, your answer to the import duties question at checkout, and order history. Card payments are handled by Stripe; we never receive or store your full card number.
5. Purposes and legal bases
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Orders, delivery, invoices and tax records | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Answering messages and support | Legitimate interests / contract (Art. 6(1)(f), (b)) |
| Order notices you asked for | Consent (Art. 6(1)(a)); withdraw any time |
| Site security | Legitimate interests (Art. 6(1)(f)) |
Under the APPI we use personal information only within these purposes, which we have specified and published here. We make no decisions about you by automated means.
6. Who else processes data
| Recipient | Role | Country |
|---|---|---|
| Netlify, Inc. | Website hosting and forms | USA |
| Google LLC | Website analytics (Google Analytics 4) | USA |
| Stripe, Inc. / Stripe Japan | Payments | USA / Japan |
| Cloudflare, Inc. | Domain name service | USA |
| Japan Post / Yamato Transport | Delivering orders | Japan |
They process data on our behalf under contract, or as independent controllers for their own services. We disclose personal information to anyone else only with your consent or where the law requires it.
7. International transfers
Several providers above are in the United States, which has no single comprehensive federal privacy law equivalent to the APPI; protection there relies on sector-specific and state laws and on each provider's contractual and technical safeguards. We provide this information as required by APPI Article 28 and can share details of a provider's safeguards on request. Transfers from the EEA and UK rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.
8. How long we keep it
| Data | Retention |
|---|---|
| Server logs | As kept by Netlify, typically up to 30 days |
| Notify, contact and company requests | Until the purpose is fulfilled, at most 24 months |
| Orders and invoices | 7 years, as required by Japanese tax law |
9. Your rights
Japan (APPI). You may request notification of the purposes of use, disclosure of your retained personal data and of records of provision to third parties, correction, addition or deletion, and suspension of use or of provision to third parties (APPI Articles 32–35). We verify the request and respond without delay, normally within two weeks, free of charge.
EEA, UK and Switzerland (GDPR). Access, rectification, erasure, restriction, portability, objection and withdrawal of consent; we respond within one month. You may complain to your data-protection authority.
California and other US states. The right to know, delete and correct, and not to be discriminated against. We do not sell or share personal information.
Send requests to hello@tallymeter.io.
10. Children
This site and our products are not directed to children under 13, and we do not knowingly collect their personal information.
11. How we protect it (安全管理措置)
- Organisational: a named person responsible for personal data; access limited to those who need it; this policy reviewed at least yearly.
- Technical: TLS encryption in transit; form data held in our host's protected dashboard; work devices encrypted.
- Physical: work devices locked and kept in our Tokyo office.
- External environment: we have checked the privacy regimes of the countries in section 7.
12. Changes
We post changes here with a new effective date.
13. Contact and complaints
Meta Studios Creative Agency KK, Tobu Bldg. 5F, 6-28-9 Jingumae, Shibuya-ku, Tokyo 150-0001, Japan · hello@tallymeter.io. You may also contact Japan's Personal Information Protection Commission (個人情報保護委員会) or your local data-protection authority.