Changelog

What changed, and who caught it.

Every release, in plain language. Where a fix came from someone reporting it, their name is on it — that is the whole deal, and it is why this page exists.

Found something broken?

Tell me which bank's statement or receipt breaks it and it becomes a permanent test, so it cannot break again quietly. If a release fixes something you reported, your name goes next to it here — unless you would rather it didn't, which is equally fine. Send it over.

5 October 2026

Safe and whole

Every currency counts toward your totals, backups happen by themselves, and budgets can carry what's left into next month.

Net worth, period totals, top spending and every Insights figure now include all your currencies, converted into your default one and marked “≈” because they use today's rate. Each transaction still keeps the currency it was entered in.
Settings → Exchange rates shows the rate in use for each currency, and takes the rate you actually get — through Grey, Payoneer or a dom account — which then always wins over the market rate.
With no rate yet, an amount is left out and named (“Excludes USD — no exchange rate yet”), never counted as if it were naira. Rates are fetched at most once a day, only when you hold another currency, and the request carries none of your data.
Automatic backup: choose a folder and a password once, and Privvy saves an encrypted backup there whenever you open the app after making changes, keeping the last three days. The files open with the ordinary Restore button on any phone, and Privvy only ever deletes its own.
Opt-in reminders: a Sunday “your weekly summary is ready”, and “anything to log?” after three days with nothing added. Neither ever shows an amount, because notifications appear on the lock screen.
Budgets can roll over what's left: unspent money adds to next period's limit and overspending comes out of it. It counts from when you switch it on, and changing the amount later never rewrites past periods.
“Hide balance when opening” starts your net worth hidden at every unlock; with it off, Privvy now remembers if you last hid it.
Ledgers without any backup get a quiet reminder on the dashboard, at most once a month, once there's enough in them to be worth losing.
The privacy policy was updated for the exchange-rate request and automatic backups, and the app now tells existing users what changed, once, in plain words.
Fixed: the dashboard's spending trend could stay stale after adding a transaction, and Settings → Privacy policy opened an outdated copy.

14 September 2026

Know where it's going

Spending trends ranked by how much actually moved, recurring rules that match real life, and a safety net for the accident that inspired it.

Insights now compares every category against the previous period, ranked by how much actually moved rather than by percentage — a 300% jump on a small category no longer buries a bigger rise in a bigger one.
A rolling 12 months of net savings, one bar per month, dipping below the line in months you spent more than you made. Months before you started using Privvy are left out rather than padding the chart with blanks.
The dashboard now shows your biggest category for the period and its share of the total.
Recurring rules can run every 2 weeks, every 3 months, on a specific day of the month, and at a set time of day — a rule created at 3:42pm no longer fires at 3:42pm forever. A day like the 31st runs on the 28th in February and returns to the 31st in March.
Categorising any transaction now offers to tag every matching one, not just during import, and applies to matching transactions already sitting in your ledger. It never overwrites a category you set yourself.
Privvy now keeps up to 5 encrypted snapshots of your ledger on the device, taken automatically on unlock and restorable from Backup & Restore. They survive the lock screen's “erase & start over” on purpose — that is the accident they exist for — but not an uninstall or a factory reset, so an exported backup is still worth keeping. They shipped to beta only writing on a PIN unlock, silently producing nothing for anyone using biometrics; fixed before release, and the how it works page has the full story.
Wallets like OPay's OWealth record both sides of moving money into and out of a savings balance, inflating totals with money that never actually moved. Mark a category as an internal transfer and those rows stay visible in History but leave your totals and charts alone.
Import is now offered on your very first run, so bringing your history in doesn't depend on already knowing the feature exists.
Fixed: the net savings chart could draw outside its own card, History's filter chips were squashed to an untappable size, and a Play Store review prompt could show an error over your ledger on devices without the Play Store installed.
Unlocking and restoring a backup got roughly 10x faster. Key derivation was costing real seconds on-device for protection the database wasn't actually gaining from it, being unencrypted and sandboxed either way — see how it works for the full reasoning.

24 August 2026

Bring your history in

Import the statement your bank actually gives you, and teach the app to categorise it once.

Import a bank statement as CSV, PDF or XLS — including the password-protected PDF your bank emails you. Zenith, FirstBank, Access and OPay layouts are read directly.
The password only ever touches your phone. The file is unlocked and read on the device, like everything else in Privvy.
Before you are asked to confirm anything, the statement's own printed totals are checked against what was read. If they disagree you are told, and nothing is imported.
Teach it once: categorise a row, tap Tag all & remember, and every matching row sorts itself — in this import and every future one. Settings → Auto-tag rules shows everything it has learned, and lets you delete anything it got wrong.
Duplicates are checked against your ledger rather than against the file, so re-importing an overlapping statement can't double your spending — but genuine same-day repeats are left alone.
Changed your mind? Undo a whole import in one tap. It removes exactly the rows that import added and never touches anything you entered yourself.
Rows that can't be read are flagged rather than silently dropped, and uncategorised rows import fine and wait in History.

July 2026

Receipts, level 2

PDF receipts, a much harder-to-fool parser, and three fixes that came straight from testers.

PDF receipts now scan. Upload the receipt your bank emailed you and page one is rendered on the device, then read by the same offline pipeline as a photo.
The offline parser was rebuilt against real receipts from LAPO, GTCO, OPay, FirstBank, Access and PalmPay — wrapped narrations no longer truncate, transfer boilerplate is stripped, and OCR noise can no longer masquerade as an amount or a merchant.
Editing a transaction's date now actually saves. It used to revert silently, and the only way round it was to delete the entry and type it again.Reported by a tester
Locking your phone mid-scan no longer loses your place. Unlocking returns you to the screen you were on, with your parsed receipt waiting.Reported by a tester
Minimising the app no longer restarts the smart-scan model download from zero. Partial files are kept, downloads pause and resume with the app, and the screen stays awake while it runs.Reported by a tester
Take a tour: load a realistic demo ledger from the welcome screen, explore everything, then wipe it and start fresh.
Starting balance (Settings → Preferences) — money you had before your first entry now counts towards your net worth, so logging old receipts no longer drags the total below reality.

Launch crash hotfix

v1.5.0 failed to open. This replaced it the same day.

Fixed a crash that stopped v1.5.0 opening at all. A native module had been installed at a version built for a different SDK, which killed the app before any of it loaded.

The Vault redesign

A new face, and financial figures that finally line up.

Two themes: Vault, a midnight navy-black with an emerald accent, and Paper, a warm off-white. Pick either or follow your system in Settings → Appearance.
Every figure in the app is now set in a monospaced face, so digits line up vertically down a column — dashboard, history, budgets, keypads, charts and exported PDFs.
A rebuilt dashboard hero: mask your balance with one tap, switch between today, week, month and year, and add an expense or income without leaving the screen.
Net worth is now genuinely all-time. It used to show only the selected period, so the balance dropped to near zero at the start of every month.
Insights now compares a period to the one before it — up 20% on last month, and what led the increase.
Clear transaction history (Settings → Data) wipes your transactions without touching your profile, categories or budgets.
Confirmations, warnings and validation messages are Privvy's own throughout, and the wording across lockout, backup and reset was rewritten to be reassuring rather than robotic.
Allocations became Budgets and Ledger became History, because that is what people called them.

Smart scan

An optional on-device model for the receipts the plain parser finds hard.

Opt-in smart scan runs a model on your phone to pull structure out of a receipt. It downloads once, then works with no network at all.
Receipt scanning now reads the transaction date as well as the amount and merchant — tested against real receipts from nine Nigerian banks and fintechs, in both labelled and unlabelled layouts.
The review screen shows the extracted date before the transaction form, so a wrong read is caught before it is saved.

Parser and dashboard polish

Fewer wrong reads, and a first run that starts somewhere.

A year like 2026 is no longer mistaken for an amount when the line it sits on reads like a date.
Receipt scans pause on a review screen, so a failed scan is visible instead of silently filling the form with nothing.
A brand-new ledger opens on a starter sheet rather than an empty dashboard.
Category chips wrap onto a second line instead of hiding in a horizontal strip.

Receipt OCR hotfix

More bank receipts mapped to the right fields.

Better merchant-versus-sender selection across Kuda, PalmPay, Access, VFD and OneBank layouts, and narration text is preserved more faithfully when it fills in your note.

Receipt scanning

Point the camera at a receipt instead of typing it in.

Scan a receipt with the camera or upload an image. Text recognition runs on the device and fills in the likely amount and merchant.
Neither the image nor the recognised text is ever stored.
CSV and PDF export gained a range picker with presets and custom dates.

Curious how any of it actually works? The technical page goes through the machinery.

Back to site