FAQ

No. The release build has no internet permission at all, so the app cannot open a network connection even if it tried. There is no account, no sign-in, no server, no analytics, no advertising and no crash reporting. You can verify the permission yourself in Settings → Apps → Cracker → Permissions.

Whoever can unlock your phone and open the app — unless you turn on App lock, which puts a fingerprint in front of it. Nobody else: not the developer, not a hosting provider, not an analytics vendor. There is no copy anywhere.

Only to build the password on your bank's statement PDF, which is derived from exactly those details. They are stored in Keystore-backed secure storage rather than in the database, are masked when shown back to you, and the passwords built from them are never saved. If you never import a statement, you never need to enter them.

Yes. The whole ledger is a SQLCipher-encrypted database whose 256-bit key is generated on your phone and held by the Android Keystore, so copying the file off the device yields nothing readable. Your identity details sit in separate Keystore-backed secure storage, and can be sealed under an additional key that the hardware will not release without your fingerprint.

No, neither. The app declares no SMS permission of any kind and the build fails if one ever appears. It reads no notifications either: there is no notification listener in it, and the same build check fails if one is ever added. Spend is entered by you or read from a statement you hand it, and nothing else.

No, and no. There is nothing to sell — no data ever reaches anyone who could sell it.

HDFC, Axis, ICICI, IndusInd, HSBC, Bank of Baroda, Punjab National Bank, SBI Card, CSB Bank and AU Small Finance Bank. Every other card can still be tracked — transactions are logged by hand, and every figure in the app works the same way on hand-logged rows.

The usual cause is a mismatch between what you entered in Settings → Your details and what the bank actually holds — a middle name, a differently ordered date of birth. Correct it and try again, or type the password directly when the app asks. Only the rule that worked is remembered; the password never is.

Duplicates are flagged and skipped, never merged — the row already in your ledger may carry a correction you made, and overwriting it with the bank's raw string would discard that work. Every flag is overridable in the review list, and re-importing the same file is refused outright.

Yes — a committed statement can be removed whole, taking every row it brought with it. And nothing is written at all until you have reviewed the staged rows and committed them.

Because it has no evidence yet. That figure is blended from your own redemptions after fees and taxes, weighted by points. Log one redemption and it appears. The app will not substitute a published or assumed rate — the gap between the assumed rate and your real one is the entire point of the app.

Cracker measures against your last statement close, which is the balance a credit bureau actually sees. Your bank may be showing live outstanding including spend since that close.

Yes. Settings → People lets you attach cards to different people in the same household. It is a grouping inside this one install — there is no login and no separate profile.

Identically. Nothing in the app has ever needed a connection.

The data is gone, unless you wrote a backup file yourself. Nothing is stored in a cloud, Android's own cloud backup is deliberately disabled for this app because it would defeat the encryption, and nobody holds a copy that could be sent to you. Write a backup from Settings → Backup and restore and keep it somewhere the phone is not.

No. It is the key to the file; there is no recovery route, no reset link and no support channel that could bypass it. That is a consequence of the encryption being real, not an oversight.

No. It is a copy to read — unencrypted, and it cannot be restored into the app. The encrypted backup file is the copy to put back. Once a CSV leaves the app it is an ordinary file on your device, readable by anything you share it with.

Settings → Erase everything, confirmed by typing the word. It destroys the encryption key rather than deleting rows, and takes the write-ahead log, the identity vault and the biometric seal with it. Uninstalling the app removes it too. There is no account to close, because there was never one to open.

Enrolling a new fingerprint invalidates the hardware key that the seal depends on, and the sealed details go with it. That is intended: someone who adds their own finger to a found phone must not inherit access. Re-enter the details and seal them again.

No grievance officer is appointed and there is no support desk. There is a contact address — praveen.dev.mys@gmail.com — for questions about the app, though no reply is undertaken. It cannot reach your data: the app holds no data of yours anywhere off your device, so there is no account to investigate, no record to produce and nothing to retrieve. Everything that can be done about your data is done by you, in Settings.

No. Cracker arranges figures you entered and figures read from your own statements. It is not advice, not a recommendation to use or not use any card, and not a substitute for your bank's own statement — which remains the authoritative record of what you owe and what you earned. Verify anything before you act on it.

You are, for anything you do on the strength of it. The app and its creator accept no responsibility or liability of any kind — for the accuracy of a figure, for a missed payment, for a lapsed reward, for a fee that was not waived, or for data that is lost. This is set out in full in the terms and conditions.

The pieces of the icon assemble themselves while the encrypted database is being opened — that unlock is real work, and the introduction covers it rather than a spinner following it. It collapses to its final frame if your phone is set to reduce motion.

Yes — Settings → Donate offers a yearly amount through Google Play. It is entirely optional and unlocks nothing: the app is the same whether you do or not. Google Play takes the payment; this app has no internet permission, sees only that a subscription exists, and stores nothing about it. Cancel any time in Google Play → Payments & subscriptions → Subscriptions.