Is UPI Expense Tracker safe?

A wallet you glance at. UPI Expense Tracker is a 100% offline personal expense tracker for UPI payments. It quietly captures every payment you make, sorts it into categories, and shows your daily, weekly, and monthly spend plus an at-a-glance available balance — on the home screen and in home-screen widgets. There is no account, no cloud, no ads, and no tracking. Everything stays on your phone. W…

Developer: Goushik
Category: Finance Manager
Earliest archived version: 18 Jul 2026
License: GPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

26 Sept 2026

1.1.7

Capture only records a payment from the paying app's own Pay screen: receipts, chats, notifications and autopay setups are no longer booked. A bank SMS can't be overwritten by a later screen. SBI UPI alerts are now read, and fake bank texts are ignored. If capture is switched off you get a reminder…

Full notes →

18 Jul 2026

1.1.5

Build-only release: The APK no longer embeds the dependency-metadata block that the Android build tools add by default. It is an opaque, app-store-oriented record of the app's dependency tree that cannot be checked against the public source code. Removing it lets F-Droid accept this release and…

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.goushik.upiwallet

Latest APK SHA-256d6c8a4d440e40635a4427413220da559994130b05e219f07520f9e842c784d7d

Signing certificate04:35:18:C3:EC:65:EB:37:92:93:68:FE:13:4D:7D:A8:31:0B:AF:AB:AC:5A:8B:3E:FB:13:73:D0:5B:B3:BE:C6

MIN ANDROID31TARGET36ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / History

Archive history

2 versions in WIKI archive: earliest 1.1.5 (18 Jul 2026), latest 1.1.7 (26 Sept 2026).

No change in android.permission.* between 1.1.5 and 1.1.7.

05 / Version archive

Documented releases

2 TOTAL

VersionReleasedAndroidArchitecture

1.1.726 Sept 202631+arm64-v8a, armeabi-v7a, x86, x86_64→1.1.518 Jul 202631+arm64-v8a, armeabi-v7a, x86, x86_64→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions10 declared · 3 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessACCESS_COARSE_LOCATIONACCESS_FINE_LOCATIONRECEIVE_SMS

Declared permissions

android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.POST_NOTIFICATIONS android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECEIVE_SMS android.permission.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS android.permission.WAKE_LOCK com.goushik.upiwallet.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗