Offline by default
Nothing is uploaded. Record in a lift, on a train, in aeroplane mode. The ledger is a file on your phone, and it opens without a connection.
Android · free · no account needed
Three taps to record something. Totals add up on the phone, not on a server. Personal stays on your device; a family is the only thing that is shared.
Android 8 and up · 17 MB · signed debug build, so your phone will ask before installing. Other builds
Nothing is uploaded. Record in a lift, on a train, in aeroplane mode. The ledger is a file on your phone, and it opens without a connection.
Amount, reason, who paid. Expense, income or transfer. Mark it a need or a want, and correct it later without rewriting history.
Personal never mixes with the household. "Both of us" is a choice on a row, not a mode you have to remember to leave.
A household balance only works if both people see the same number, so a family lives in your account and not on one phone. Personal stays where it is.
Only the family needs an account. Signing in does not upload anything you recorded in Personal.
One name, created in your account. Available in Settings the moment you are signed in.
A link you can revoke, good for seven days. The inviter decides who joins, and the database refuses everyone else.
Personal expenses, notes, accounts and backups stay on the device, always. Only a family's rows are stored in the cloud, and only because both people need to read the same ones. Every total you see is arithmetic done on the phone.
A direct download, not a store. The build is rebuilt from the repository on every change, so what you install is what the tests just passed.
Installing an APK outside a store: open the file, allow installs from your browser once, and Android will warn you that the app is unsigned by a store. That warning is expected.