Local-first and privacy

Household data stays household-controlled

The browser connects to the household’s selected Tallystead server. The server, PostgreSQL database, file storage, workers, scheduler, and optional AI runtime remain under household control.

What works without the public internet

With email integrations, local AI, Cloudflare, and repository tooling disabled, the installed ledger, planner, reports, goals, exports, imports, and manual document workflows continue to function over the household network.

Connections are deliberate

Disabled until configured

SMTP notifications, IMAP retrieval, local AI runtimes, and reverse proxies are optional deployment decisions. Each has a defined data path and household-controlled configuration.

What this website collects

This static website includes no analytics, cookies, advertising, newsletter collection, contact form, third-party embed, or connection to a household Tallystead server. Normal hosting infrastructure may process connection metadata such as IP addresses to deliver the site; the final public privacy notice requires legal review before launch.

AI is not the ledger

Optional local AI may extract, suggest, rank, search, or explain. Ledger writes, balances, reserves, and final reconciliation remain deterministic or require confirmation.