Most trackers stop at the points balance. Cracker carries on to the redemption, so the number on screen is the gap between what a point is meant to be worth and what your own redemptions actually returned. Your cards, your rules, your rates — nothing is assumed, and nothing leaves the phone.
No internet permission · No account · Encrypted on the device
There is no internet permission in this app. Not a policy and not a setting someone could quietly flip — a line missing from the Android manifest, which the operating system itself enforces. You can check it on your own phone: Settings → Apps → Cracker → Permissions. There is no network entry.
Three things a balance screen does not: the card as it actually behaves, the statement read on the phone, and the redemption valued after the fees came out.
Add each card with its limit, statement close day, due day, annual fee and fee-waiver condition. Then describe how it earns: base rate, category accelerators, monthly caps, milestone thresholds. Cracker applies those rules to every transaction, so the points figure on screen is derived from the card in your wallet rather than from an average.
Bank statements arrive password-protected. Cracker builds the password from details you enter once — name, date of birth, card digits — and tries them against the file, on the device. The PDF is read, parsed, reconciled against the totals the bank printed, and staged for review. The ledger is not touched until you have seen the verdict, and a committed statement can be undone whole.
Ten issuers are supported today: HDFC, Axis, ICICI, IndusInd, HSBC, Bank of Baroda, Punjab National Bank, SBI Card, CSB Bank and AU Small Finance Bank. Anything else can still be logged by hand.
Log what you redeemed, what it cost in points, and what it actually returned in rupees — minus booking fees and taxes. Cracker blends those into a realized value per point, weighted by points, per programme. A ₹9,600 airline transfer costing ₹1,180 in fees is ₹0.84 a point, not ₹0.96. That number is derived from your history and is never typed in.
Points retire oldest-first, so the expiry runway reports the date that is actually next, not the date a single blended balance would suggest.
Each lens answers one question, with a financial-year stepper at the top and a table view behind every chart.
Three panels on one month axis with a shared crosshair — and an indexed view, because rupees, a percentage and rupees-redeemed do not share a scale.
Months stacked by card, a category × month heat grid, and like-for-like movers against last year.
What you actually earned against the best your own cards could have paid, money left on the table, and fee ROI.
Earned against redeemed over time, realized value per route, and the share of points you ever convert.
Leaderboard, recurring charges detected across distinct months, day-of-week rhythm.
Each card's close and due dates over 60 days, and the interest-free run a purchase made today would earn.
Scheduled and fired locally, off until you turn them on.
April to March, switchable year by year.
One file, openable only with a passphrase you choose, and the route back from a lost phone.
Every transaction, to read in a spreadsheet. Not a backup.
A fingerprint in front of the app, and a separate one in front of your date of birth and card digits. Both ship switched off.
Destroys the encryption key rather than deleting rows, so what is left is unreadable to anything.
There is no account, no sign-in and no server. The ledger is a SQLCipher-encrypted database whose key is generated on your phone and held by the Android Keystore, so the file is unreadable to anything that copies it off — a backup tool, a file manager, another app. Your identity details live in Keystore-backed secure storage, not in the database at all, and derived statement passwords are never stored.
The release build declares two permissions that grant anything, and both grant almost nothing: USE_BIOMETRIC, which is the fingerprint prompt itself, and ACCESS_NETWORK_STATE, which Google Play's billing library brings with it for the Donate screen and which reads whether a network exists without being able to use one. Notifications and boot-completed are requested only if you switch reminders on. The full account is in the privacy policy.
Because nothing is uploaded, nothing can be recovered for you. If the phone is lost, reset, or the app is uninstalled, the data is gone unless you wrote a backup file yourself and remember its passphrase. Nobody holds a copy. Nobody can reset that passphrase.
Everything the app does and everything you accept by using it, written out rather than summarised.