Track your spending.Keep it to yourself.
A simple expense tracker that works entirely offline. No sign-up, no cloud, no ads — your transactions live on your phone and stay there. Back them up whenever you like, locked with a password only you know.
Tap the amount — that's the whole pitch.
Three habits, no friction.
Everything Privvy Ledger does is built to be logged in seconds and forgotten about until you need it.
Log it in seconds
Tap the + button to record income or expenses — amount, category, note, save. No forms, no friction.
Stay under budget
Set a monthly cap on any category. Get a push notification at 80%, then again at 100% — no surprise overspending.
Private by design
No account, no cloud, no ads. Everything stays on this device — and you can export an encrypted backup any time you want.
What it actually looks like
Real screens. No mockup gloss — this is the app you'll install.
Overview at a glance
Net worth, budgets and spending trend on one screen — masked by default.
No account required
Open the app and start logging — nothing to sign up for.
Start from zero
No budgets yet? Add one in seconds — no setup wizard required.
The technical case for trust
Most "private" finance apps just mean they don't sell your data to advertisers. Privvy Ledger means the data never has anywhere to go.
On-device SQLite, no server
Transactions, categories and budgets live in a SQLite database in this app's private storage, protected by your device's own sandbox and disk encryption. There is no backend to sync them to.
AES-256-GCM encrypted backups
Exports are sealed with a key derived from your password (PBKDF2). Without that password the backup file is unreadable — including by us.
PIN and biometrics never leave the OS
Your PIN is stored as a salted hash in the system keystore, never in the ledger. Fingerprint and Face ID are handled entirely by the OS — the app only ever receives a success/failure signal.
On-device receipt scanning
Text recognition and a quantized language model both run locally to pre-fill entries. Receipt images and extracted text are never uploaded for processing.
No ads, no tracking — crash reports only
No advertising, attribution or product-analytics SDKs, and no advertising ID. The app does send anonymous crash reports (Sentry) so bugs get fixed, with all screen content masked and no financial data attached.
Nothing leaves your device unless you ask it to. There is no account and no server — the only thing we ever receive is an anonymous, fully masked crash report when something breaks.
Read the full privacy policyReady to actually own your numbers?
Free, offline, and built so there's nothing about your spending for anyone else to see — including us.