Is Cashiro safe?

Cashiro — Free & Open-Source, private SMS-powered expense tracker Automatically extracts transaction data from bank SMS messages and PDF Statements [Gpay & Phonepe UPI] using pattern-based parsing. Works 100% offline - no internet connection required. Key Features: • Multi-Source Transaction Extraction - Automatically parses SMS and PDF Statements [Gpay & Phonepe UPI] with pattern-based extractio…

Developer: Ritesh Kanwar
Category: AI Chat
Earliest archived version: 12 Apr 2026
License: GPL-3.0-only (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

12 Apr 2026

2.1.61

Integrated BPCE and Prime Commercial Bank parsers. - Stability: Brand icons now persist correctly across app updates. - Refreshed UI: New onboarding, filter sheets, and transaction card designs. - Features: Unified currency, swipe to edit subscriptions, and custom billing cycles. - Enhancements…

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.ritesh.cashiro

Latest APK SHA-256f55cfad874a188e3fcb5a4418278b95b98fca5b22f89adf3bebd1d280db007c9

Signing certificateF2:23:92:51:90:BF:34:5D:97:ED:AE:DC:6F:B1:DF:95:BD:7A:E0:D2:6C:FC:70:4E:9D:C3:3A:FC:B4:26:4D:11

MIN ANDROID26TARGET36ARCHITECTUREarm64-v8a · armeabi-v7a

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

2.1.6112 Apr 202626+arm64-v8a, armeabi-v7a→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions12 declared · 2 sensitive

Signaturepresent

Anti-featuresTetheredNet

Sensitive accessREAD_SMSRECEIVE_SMS

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.INTERNET android.permission.POST_NOTIFICATIONS android.permission.READ_SMS android.permission.RECEIVE_BOOT_COMPLETED android.permission.RECEIVE_SMS android.permission.SCHEDULE_EXACT_ALARM android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT android.permission.WAKE_LOCK com.ritesh.cashiro.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗