Hisab: a private money app that can't read your money
Track spending, stay within monthly limits and split trips, PG rent and flat bills with friends, in one app that encrypts everything on your phone.
Open to everyone. Sign in with Google and start using it.
- Industry
- Finance
- Capabilities
- Product Design, Web & App Development
- Timeline
- Live and open to everyone
- Product
- Hisab
- Built with
- ReactViteFirebaseWeb CryptoInstallable web app
The concern, and the fix.
- 01
The concernYou can't tell where your money went this month.
How it's solvedOne home screen shows income, spending and savings by category, with a plain-language insight.
- 02
The concernTrip, PG and flat costs live in WhatsApp threads and someone always loses out.
How it's solvedSplits for real life, settled over UPI with the fewest payments, and each share lands in your own report.
- 03
The concernMoney apps want your bank login and keep your data readable on their servers.
How it's solvedEverything is encrypted on your phone first. The server only stores data it can't read.
The challenge
Most people can't answer a simple question: where did my money go this month? Budget apps feel heavy and ask for bank logins, people don't want their salary readable on someone's server, and shared costs end up in WhatsApp threads where someone is always out of pocket. Tracking and splitting needed two apps that never talked to each other.
What we did
- Designed one calm home screen that answers where the money went, then lets you dig in by period and category.
- Made adding a spend take seconds, with automatic icons for custom categories and bank SMS that fills itself in.
- Built splits for real life: trips, PG rooms and messes, split equally, by amount, percentage or shares.
- Settled debts with the fewest payments, each a one-tap UPI link, and fed each person's share into their own report.
- Encrypted every amount, merchant and note on the phone with AES-256-GCM, so the server holds only ciphertext.
- Backed up each person's key to their own Google Drive, never to Hisab's servers.
- Used words people already know from payments apps: Split, Spent, Bills, and a PIN or fingerprint to unlock.
- Added notifications for bills and payments, even with the app closed, that never show an amount.
Track in seconds
A spend needs only the amount and a category; the date and account fill themselves.
Say "Spent 450 on Swiggy" or scan a receipt; read on the phone, never stored.
Paste a bank message and the amount, merchant and date are filled in.
Close the app by accident and your entry waits, encrypted, to continue.
Stay in control
- Where it went
Income, spent and saved for any period, by category and account.
- Limits that warn in time
Amber at 80%, red when crossed, and an alert the moment an entry tips it.
- Savings goals
"Goa: ₹15,000 by March", with progress and how much to put aside each month.
- Reports and Excel
A yearly report month by month, and everything exportable to Excel.
Split anything
- Trips, PG rooms and messes
Split equally, by amount, percentage, shares or days present.
- Split while you add it
Log a dinner once and split it with a friend or a group in the same step.
- Monthly bills and a common fund
Rent, Wi-Fi and the cook appear every month; the kitty shows what's left.
- Settle in the fewest payments
Pay by UPI link or QR, and share one summary image on WhatsApp.
Never chase money
- Notified when it matters
Bills added, payments marked, reminders: even when the app is closed, never showing amounts.
- Remind in one tap
On WhatsApp with your UPI ID, or as a Hisab notification.
- One-to-one IOUs
"Rohit owes me ₹300" in seconds, without making a group.
- Trips abroad
Bills in 16 currencies, converted at the live rate and settled in rupees.
Private by design
- Encrypted on your phone
Every amount, merchant and note is encrypted before it leaves; the server holds only ciphertext.
- Your key, your Drive
Backed up to your own Google Drive, so a new phone gets your history back.
- PIN or fingerprint
Unlock like a payments app, with auto-lock you choose.
- Nobody else can look
Not even Hisab's owner sees balances, merchants or amounts.
- 01
Listen
Students, flat sharers and travellers described the same four concerns: heavy apps, privacy, messy shared costs and two apps for one job.
- 02
Privacy by design
Encryption on the device, keys in the user's own Drive, and security rules covered by their own tests.
- 03
Audit and fix
A Nielsen heuristic evaluation and WCAG 2.2 AA checks on every screen, in light and dark.
- 04
Ship and test
Unit, security rule and end-to-end tests on every flow, from sign-in to export.
19 tools across 6 layers
App
- React 18Responsive, component-based screens
- Vite 6Instant development builds and a small production bundle
- Installable web app (PWA)Installs on Android, iPhone and desktop, works offline, accepts shares
Privacy and security
- Web Crypto: AES-256-GCMEvery amount and note encrypted on the phone before saving
- HKDF, PBKDF2, HMACKeys derived on the device; the server never sees them
- ECDH P-256Each shared split has its own key, sealed to every member
- WebAuthn passkeysFingerprint and Face ID unlock, bound to the device
Data and sign-in
- Firebase AuthenticationGoogle sign-in, then a PIN or fingerprint
- Cloud Firestore (Mumbai region)Offline-first cache and real-time sync of encrypted data
- Google Drive app folderEach person's key backed up to their own Drive, never to Hisab
Spreadsheets
- SheetJSExcel import and export, done entirely on the device
Hosting and notifications
- Firebase HostingGlobal CDN, HTTPS everywhere and strict security headers
- Cloudflare WorkersPush notifications, and scheduled monthly stories and friendly nudges, without a server to run
- Firebase Cloud MessagingDelivers the notifications to phones and computers
Quality
- Node test runner48 unit tests on encryption, splitting and imports
- Firebase rules unit testing15 suites proving no one can read another person's data
- PlaywrightEnd-to-end tests on every flow, from sign-in to export
- axe-coreAccessibility checks: 0 violations on 32 screens
- ESLintConsistent, error-free code
Keep exploring.
Jatna Parivar: one health record for the whole family, pets included
Product Design · Web & App Development
4.1 / 5 Usability score after audits, up from 3.2
DaanSetu: receipts, vouchers and trust accounts for ashrams and NGOs
Product Design · Web & App Development
90+ Automated tests, most on the security rules
Yuvyora Workspace: chat, hiring and HR for the whole team, in one app
Product Design · Web & App Development
6 Access levels, each seeing only its own work
Let's create what's next.
We are partnering with a select group of 5 founding clients. Each one gets our full attention, our best thinking and terms reserved for the businesses that grow with us from the start.
- Senior team on your project from day one
- Preferred founding terms, agreed in your proposal
- Direct founder involvement in every key decision
- Priority scheduling ahead of standard engagements
Apply for a founding place Or start with a free website & app audit