Personal Expense Tracker

Personal expense tracking that never leaves your phone.

Personal Expense Tracker is a simple ledger for your money: what came in, what went out, and what is left until the end of the month. No sign-up, no cloud accounts, no ads.

RECORD IT IN SECONDS • Expenses and income in a few taps — amount, category, wallet • Transfers between wallets, including across currencies • Several accounts: cash, card, savings — each with its own currency • Any entry can be edited or deleted, and a wrong move undone with a single tap

SEE WHERE THE MONEY GOES • Reports by day, week, month or a period of your own • A ring and bars by category • A calendar in three modes: dots, totals or heat map • Search and filters across every entry • Category limits — with suggestions built from your real history, and a notification when you are getting close to the line

YOUR DATA IS ENCRYPTED, AND THE KEY IS YOURS ALONE The database sits on your phone under SQLCipher, and the key to it is sealed in the secure chip (Secure Enclave) — a separate piece of silicon it cannot be pulled out of, even with full access to the phone's memory. The ledger opens with Face ID or your password, and nothing else.

The copies that leave your phone — an exported file and an iCloud backup — are encrypted separately, by your recovery key rather than by the chip. You choose the strength: Everyday — AES-128-GCM, and a copy that opens almost instantly; Fort Knox — AES-256-GCM, with the key itself put through Argon2id (64 MB, three passes), deliberately slow, to make guessing passwords pointlessly expensive.

We cannot see your data. There is no server to send it to — and no us in the chain to be asked to hand it over. The other side of that is honest: if you lose both the phone and the recovery key, no one opens the ledger, us included.

TWO LANGUAGES Fully in Ukrainian and English. Switch whenever you like, right in Settings.

For anyone who wants the details: SQLCipher (AES-256) for the database, ECIES over a P-256 key in the Secure Enclave to wrap the data key, and Argon2id for exports and backups.