What it cannot do
Most of these you would find out eventually — a month in, or the day something mattered. We would rather you knew now and decided with the whole picture.
It cannot go and get your money data
There is no bank connection anywhere in the app, which is the point and also the cost.
It never logs into your bank, so it cannot fetch anything you did not give it
No credentials, no account aggregation, no read-only bank link. Everything in your ledger got there from a file you imported, a message on your phone, or your own typing.
There are five ways in, and which ones you get depends on your phone
A PDF statement, a CSV export, your bank's text messages, a shared receipt, or typing it yourself. Reading the SMS inbox is Android-only — Apple does not let an app read your messages, so on iPhone the equivalent is a Shortcut you set up, and that route is part of Premium.
PDF import is only offered for banks whose layout we have actually worked through
Five in India — HDFC, ICICI, SBI, Axis, Bank of Baroda — and five in the US — Chase, Bank of America, Capital One, Discover, SoFi. Others are not in the picker rather than in it and failing. Worth knowing how far that goes: the profiles reconcile against the published layout of a statement, not against your statement.
Outside India and the US, PDF import is not validated
The app knows about other regions, but no bank statement layout has been worked through for them. CSV and manual entry still work everywhere.
The texts your bank sends are not a complete record
This is the limitation people are most surprised by, because it looks like a bug in the app and is not.
A payment your bank never texted about cannot appear
There is nothing to read, and no way for the app to know something is missing. When we checked our own statements line by line, 8 of 37 lines had no message behind them — all of them bank-initiated charges and small interest credits under ₹500.
The gap is set to widen in January 2027, by regulation
The RBI's Amendment Directions of 25 June 2026 make instant alerts mandatory only for electronic transactions above ₹500 from 1 January 2027. Below that it becomes the bank's choice. Some have already stopped — HDFC dropped alerts for small UPI amounts back in 2024.
The fix is a statement, and we would rather say so
A ledger built only from messages thins out at the bottom by design. Importing a statement is what closes it, which is why that route exists and why we reconcile against one ourselves.
It will read some messages wrong
We measure how often, and publish it including the weeks it gets worse.
About 4 in 100 payments were read wrongly the last time we counted
On a hand-labelled random sample of one real inbox: 5 of 116, with a confidence interval running from 1.9% to 9.7%, because a sample that size cannot say more precisely. Your banks and your phone will give a different number.
Anything it cannot read waits for you rather than being guessed at
Unreadable messages, unknown categories and suspected duplicates go to a review queue. Nothing imported is written into your ledger unsupervised.
It cannot tell you about a mistake it does not know it made
A message read confidently and wrongly looks exactly like one read correctly. That is why the number above exists and why the queue is not the only safeguard we rely on.
It cannot put a value on things that have no price
The app holds no price feed of any kind, and will not invent one.
A home or a car is worth whatever you typed
That figure is never estimated, adjusted or revalued. It is your number, sitting where you put it.
Investments are recorded, not tracked against a market
There is no quote behind a holding, so the app cannot show you profit and loss over time or tell you what something is worth today.
Currency conversion is not live
Rates ship inside the app and you can edit them yourself — deliberately, because fetching them would mean telling a server what you hold. The bundled set was reconciled on 11 August 2026 and ages from there. Where a converted figure could be mistaken for a current quote, the app says how old the rate is instead of quietly using it.
You can record money in dollars or rupees, and nothing else
Other currencies are recognised when reading a statement and formatted correctly, but they are not something you can keep your own accounts in.
It is a ledger, and stops there
It will show you what happened and what is scheduled. It does not have opinions about what you do next.
It will not tell you what to buy, sell or hold
It is not built to, and in India that is a registered capacity we do not hold. The app records what your money did. What to do about it is yours.
It promises no outcome
No figure on any screen is a claim about how much you will have later. The forward-looking screens project your own recorded habits forward and say so; they are arithmetic on your history, not a prediction about markets or prices.
Year-on-year comparison needs a year of history first
Below thirteen months of recorded data the app tells you how many months you have rather than comparing two periods it cannot really compare.
You can lose your data
No company can shut your data down. Only you can lose it — and that sentence has real consequences worth spelling out.
Lose the phone with no backup, and it is gone
There is no copy on a server, because there is no server. We cannot recover it for you, restore it to a new phone, or see it at all.
The default automatic backup is removed when the app is
It writes to private storage belonging to the app, which the operating system deletes on uninstall. Choosing your own folder is the only destination that survives — and the only one that can stop working on its own, if a permission is revoked or a cloud folder goes offline.
A few things do not travel in a backup
Paired devices and trusted networks, the list of senders still awaiting your review, and the assistant's search index. They are rebuilt or re-answered on the new phone rather than carried across.
Not everything on the device is encrypted
The ledger database is. Saying more than that would be untrue, so here is the full list of what is not.
A bank message can occasionally be buffered in the clear
Incoming messages wait in a sealed buffer before the app reads them. If sealing fails twice, that one entry is kept unencrypted rather than dropped, so a temporary key error costs you a delay rather than a transaction. It still sits in storage private to the app, and the buffer is emptied after seven days.
On iPhone, messages handed over by the Shortcut are not encrypted by the app
They rely on the operating system's own file protection while they wait, and are excluded from iCloud backup.
The home-screen widget's data is plain text, on purpose
It holds this month's totals and no transactions, merchants or account names. Encrypting it would only defend against someone who already holds the database key.
Encryption at rest does not stop everything
It does not protect against code running as the app on an unlocked phone, or forensic access that can ask the keystore the same questions the app does. If you set a PIN, the recovery copy of the key is protected by that PIN alone, and a short PIN can be attacked offline by someone holding the file.
Things that exist but are switched off
Built, sometimes finished, and deliberately out of reach in this release. Listed because "coming soon" on a website usually means something less honest.
Receipt scanning is not available on any platform
The desktop path works through a separately installed tool; the phone path is unfinished. Rather than ship it on one platform and not the other, the whole feature is off, which is also why photos cannot be shared into the app on iPhone yet.
Splitting bills and settling up with other people is turned off
Groups, splits and settlements are written and working, and held back from this release rather than rushed into it.
Syncing between two devices is not available
The local network transport carries a check that the data has not been tampered with, but the contents are not confidential in transit, so it stays disabled. Treat every install as independent until that changes.
There is no PDF export
The app reads PDF statements; it does not produce them. There is no screen and no service for it. You can export everything you have to a file for yourself.
What you get depends on the device
One codebase, but the platforms genuinely differ, and the differences are not cosmetic.
Premium can only be bought on Android and iOS
Those are the two stores the app sells through. Paid capabilities are built into the app everywhere and unlocked by Premium, so on desktop there is no way to unlock them at all.
The web version is a demonstration, not a release
It has no database of its own, cannot be installed, and does not carry your data. It exists so you can try the app before installing anything.
Desktop and macOS builds are not released
They build from the same code, and are not something we are asking you to run yet. On macOS and Linux the app cannot deliver a local notification at all, so bill reminders would not arrive.
A reminder arrives on the morning of, not at a set minute
Reminders are scheduled in a way that lets the phone batch them for battery, so the operating system may delay one. Do not rely on one landing at a particular time.
What the assistant cannot do
Ask answers questions about your records. Its limits are deliberate and worth knowing.
It cannot change anything
There is no writing counterpart to the tools it can reach — not a disabled switch, but no such capability in the app at all. It cannot add, edit, delete or categorise a record however you phrase the request.
It will say it does not know
Asked something about you or the app that its notes do not cover, it declines rather than filling the gap. It is tuned to err that way, and sometimes errs too far and declines a general money question it could have answered.
The figures you see are the app's, not the model's
Money amounts in an answer are rendered by the app from the same calculations its screens use. A number the model produces that does not match one is replaced by a pointer to the card rather than shown to you — small models are prone to mangling a figure mid-sentence.
It needs a 2.59 GB download, and is not available on the web
The model downloads once and runs offline afterwards. On recent iPhones the system's own model is used and there is nothing to download. Everything else in the app works without it.
Why this page exists
A features page is a list of reasons to say yes, and every app has one. This is the other half, and it is the half that decides whether the app is right for you. If one of these is a dealbreaker, better you find it here than after a month of entering data.
It is also the only kind of claim we can make that is worth anything. Anyone can say their app is private. Publishing what it fails at, and how often it fails, is a claim that costs something to make — which is why it is worth reading.
None of it asks you to take our word. What the app sends over the network, you can watch for yourself.