Track. Control. Grow. · Made for how India pays

See where your money actually goes — without typing a single transaction.

Your bank already tells you everything. My Expense Control reads only your bank-alert emails — read-only, nothing else — and turns them into a categorized, private ledger. When we're not sure, we ask with one tap. In your language.

No SMS access — ever No ads — ever Never sold — your data works for you
SPENT · JULY 2026
₹47,320
this month · 181 transactions
⚡ 94% categorized automatically
Outside Food & Dining
Shopping & Personal Care
Groceries & Household
S
SwiggyLunch · 1:15 PM
−₹280
N
NetflixOnline Subscriptions
−₹649
M
Meridian LabsIncome · Salary
+₹1,25,000
₹280 to SWIGGY · 1:15 PM
Outside Food — Lunch?
✓ YES✗ NO
26spending categories, built for Indian life
5+1Indian languages — speak or type “oota”, it understands
<60sfrom bank alert to categorized entry
₹0ads revenue — forever. That's a promise, not a plan
The problem

Every expense tracker asks you to do the tracking.

An urban Indian makes 150–200 payments a month. Apps that demand daily data entry die in the third week — the graveyard is long. And the apps that “automate” it want to read every SMS on your phone.

⌨️

Manual entry fails

Typing ₹40 chai payments into an app every day isn't discipline, it's a second job. By month-end you're doing memory archaeology on “₹340 to q674757@ybl”.

🕵️

SMS readers overreach

Reading all your SMS means reading OTPs, personal messages, everything. We never ask for SMS access. Not launch week, not ever — it's written into our engineering constitution.

🌐

Global apps don't speak Indian money

UPI narrations, NEFT strings, kirana names, festival spikes, “kiraya” and “oota” — imported trackers guess. We were built on Indian payment rails from line one.

How it works

Three steps. Then it mostly disappears.

1

Connect, read-only

Link Gmail with Google's read-only permission — we see bank alert emails and nothing else. Cannot send, cannot delete, cannot read personal mail. Upload 3 months of bank statements and your history appears in minutes.

2

We categorize automatically

A cascade does the work: deterministic rules for payment rails, a community-taught merchant registry, your own confirmed history, and AI only as a last resort — on masked text, never your identity.

3

One tap when we're unsure

A small card appears the moment you pay: “₹280 to Swiggy — Lunch?” Tap yes and it never asks about that merchant again. Answer by voice, typing, or picking — in Kannada, Hindi, Tamil, Telugu, Malayalam or English.

The magic moment

Pay at a chai stall. Watch your phone.

Seconds after your bank's alert arrives, the transaction is parsed, categorized and saved — silently when we're confident, one tap when we're not. The app learns from every answer: yours, and (anonymously) everyone's.

🫖

It understands “oota”

Say it or type it — our community-built multilingual dictionary maps real Indian money-words to the right category in milliseconds, and gets richer with every user.

oota → Outside Foodkiraya → Rentdawai → Medicines
🔁

Forgotten subscriptions, found

“You're paying ₹1,647/month across 4 subscriptions — one you haven't opened since January.” The Subscription Radar spots recurring payments from day one, using your own history.

💳

Cards, honestly

Statement dues, utilization, reminders — and when you want fewer cards, a guided Closure Assistant with the RBI rulebook in hand. We help you need fewer cards, not more.

Our pledge — public, permanent, binding
“We will never sell your data. We will never show you ads. Your data exists to serve you — nobody else. If we ever recommend a financial product, it will be explicitly opt-in, clearly labeled, and fully disclosed — including what we earn from it.”
This exact wording ships in our privacy policy, our Play Store listing, and inside the app. Features that would violate it are rejected at design time.
Security & privacy, by architecture

Built like the stakes are your family's money. Because they are.

📧

Read-only Gmail, only

Google-verified, least-privilege scope. Bank alerts in; nothing else touched.

🚫

No SMS. No contacts.

Permanently excluded by our engineering constitution — not a settings toggle.

🔐

Encrypted at rest

Full-disk encryption on our India-resident servers; backups encrypted with keys that never touch the server.

🕶️

AI sees masked text

Account numbers, cards, emails, phones are stripped before any AI processing. Your identity and location, never.

📍

Location, blurred

If you opt in to GPS, coordinates are rounded to ~1 km before storage. DPDP Act 2023-first design.

🗑️

Raw mail, purged

Original email text is deleted after 30 days. What remains is your ledger, not your inbox.

👋

One-tap goodbye

Delete your account and every row of your data goes with it. Verified in our test suite, not just promised.

🤝

Anonymous learning

Community merchant knowledge is contributed without identity — there is no user column to leak.

Read the full security page — including our threat model →

Where we are

Building in public. Honestly.

My Expense Control is in active development by a Bengaluru SRE who got tired of doing memory archaeology on his own bank statements. No fake download counts here — just the real plan.

Now — building

Core engine: ingestion, parsing across 10+ Indian banks, the categorization cascade, and the one-tap overlay. Google CASA security assessment in progress.

Next — closed beta

Bengaluru first, Android first, small and personal. Waitlist members get first invites — and your bank + phone model below literally shapes our test matrix.

Then — account sync

Direct bank-account sync via India's RBI-regulated Account Aggregator framework — consent-based, revocable, no credentials shared. Balances and every account in one place.

Questions you should ask

FAQ

Can you read my personal email?

No. The Google permission we request is read-only and we filter to authenticated bank-alert senders only — every email must pass cryptographic sender checks (SPF/DKIM) before we even store it. We cannot send, delete, or modify anything in your inbox, and raw alert text is purged after 30 days.

How do you make money if not ads or data?

A simple premium tier (longer history, unlimited exports, budgets and smart alerts). The free tier keeps full automatic categorization forever — and privacy features are never, ever paywalled.

Why no SMS permission? Every other tracker uses it.

SMS access means access to OTPs and private messages, and Google is actively restricting it. We chose the harder, cleaner path: authenticated bank emails, PDF statements, and (soon) the RBI's consent-based Account Aggregator rails. Nothing on your phone is read that isn't a bank alert.

When can I use it? iOS?

Closed Android beta in Bengaluru first — join the waitlist below. iOS follows later; Android's real-time overlay experience is our flagship and we'd rather say that plainly than over-promise.

Is this a bank? Do you touch my money?

No and never. We hold no funds, move no money, issue no credit, and sell no financial products. We are the private ledger and brain on top of accounts you already have.

Early access

Be one of the first hundred.

Beta invites go out in order, Bengaluru first. Telling us your bank and phone brand isn't marketing — it decides which bank formats and which phones we test on next.

Your email is used for beta invites only — the pledge above applies to this form too.