Questions and answers

Yes. There are no ads, no in-app purchases, no subscription and no account to create.

Yes. Quilleaf is Passbook’s new name. Same app, same data on your phone. There’s nothing to move. You may still see the name Passbook under the app’s icon in version 0.14.0, in file names and in your Google Drive.

The standard edition reads new bank SMS from your messages app’s notifications, once you allow Notification access. It can’t read messages that came before, but you can paste or share those. The SMS edition asks for SMS permission, reads new bank SMS as they arrive and can import past ones: the last 3 months, a year, or everything. Everything else is the same. We suggest the standard edition, as it needs no SMS permission. Which edition is for you?

It’s in internal testing on Google Play right now. When it’s open to everyone, we’ll link it from the download page. Until then, you can install it from there.

More than 60 Indian banks, card issuers and wallets by name. That includes SBI, HDFC Bank, ICICI Bank, Axis, Kotak, PNB, Bank of Baroda, Canara, Union Bank, IDFC FIRST, IndusInd, Yes Bank, Federal Bank, small finance banks, co-operative banks like Saraswat and Cosmos, American Express, OneCard, Paytm, PhonePe and Amazon Pay. Alerts from other banks are often read too, when they name the account they’re about. Anything Quilleaf can’t place waits for you under To review.

It looks at them, but it doesn’t keep or use them. To find bank alerts, Quilleaf checks each message on your phone: in the standard edition, the notifications from your SMS apps; in the SMS edition, your SMS inbox. Messages from phone numbers and saved contacts, OTPs and offers are passed over straight away. Nothing of them is saved, and nothing is sent anywhere.

Fix the entry like any other: tap it, change what’s wrong and save. An entry made from an SMS says From a bank SMS, and View shows the message it came from. To take out an entry that shouldn’t be there, remove it from Added from SMS on the Bank SMS screen. If that was a mistake, Add back puts it back. Change a category once, and Quilleaf remembers it for that merchant. Would you rather check every message first? Turn off Add recognised messages automatically, and each one waits under To review.

English alerts work best. Simple Hindi alerts are understood too, the ones that say डेबिट, खर्च, निकासी, जमा or क्रेडिट with a ₹ or रु amount. Alerts in other languages, or Hindi written in English letters, may be missed. Paste those in or add them by hand. When Quilleaf can’t tell if money came in or went out, it asks you instead of guessing.

No. Quilleaf can’t make payments, and it never asks for your bank login, card number or UPI PIN. It only reads the alerts your bank already sends you.

No. There’s no Quilleaf account, and no Quilleaf server that your data goes to. Your ledger and your bank SMS stay on your phone, and Drive backups go to your own Google Drive. We couldn’t look at your data even if we wanted to. How Quilleaf keeps your money private

No. Everything works offline. The Android app goes online only for Google Drive backup, if you turn it on, and to check Google Play for updates. The web app needs a connection to open, but your data is saved in your browser, not on a server.

Only if you set a backup password, and we suggest you do. Then each backup is encrypted on your phone before it’s uploaded, with AES-256-GCM and a key made from your password (PBKDF2-SHA256, 310,000 rounds). Your password is never sent or stored. If you forget it, nobody can open those backups, not even us. Without a password, the backup is a plain database file in your Drive, and the app marks it “Not encrypted”.

Yes. Turn on App lock in Settings → Security. It uses your fingerprint, face, or your phone’s PIN, pattern or password, and locks again right away or after 1, 5 or 30 minutes. While app lock is on, Quilleaf also stays out of screenshots, screen recordings and the Recents preview. For someone looking over your shoulder, tap the eye on Home to hide every amount.

On Android, go to Settings → Privacy → Erase all data. It deletes everything Quilleaf keeps on your phone, and can also delete your Drive backups and remove Quilleaf’s access to your Google account. Uninstalling the app deletes everything on the phone too. In the web app, use Settings → Erase everything. Files you exported yourself stay until you delete them. The privacy policy has every step.

The daily backups live on your phone, so they’d go with it. That’s why we suggest turning on Google Drive backup with a backup password. On your new phone, install Quilleaf, connect the same Google account in Settings → Backups, pick a backup and type your password. In a copy installed from our website, Google sign-in may not work yet: there, keep a recent Export .db file somewhere safe instead. With app lock on, whoever finds your old phone can’t open Quilleaf without your fingerprint, face or phone PIN.

Any of these works:

• Google Drive. On the new phone, install Quilleaf and connect the same Google account in Settings → Backups. Quilleaf offers the backups it finds there. Pick one, and type your backup password if it has one. (Google sign-in may not work in a copy installed from our website.)
• Phone-to-phone transfer. When you set up the new phone from the old one, with a cable or over Wi-Fi, your ledger and settings come along (Android 9 or newer). If you use a backup password, type it again in Settings → Backups on the new phone.
• A backup file. On the old phone, go to Settings → Backups → Export .db. Get the file to the new phone, then use Import .db there.

Bank SMS records stay behind in every case. They’re never part of a backup.

Yes. Settings → Backups lists the copies on your phone: one for each of the last 30 days on which something changed. Tap Restore on the one you want. Your data from just before is kept as Before a restore, so you can switch back.

Yes. Make a group for a trip, a flat or a function, add who paid for what, and split it equally, by ratio, by percentage or by exact amounts. Quilleaf shows who owes whom and the payments that settle it. The difference: it’s your own record on your phone. Your friends don’t need the app, and nothing is shared with them unless you show them.

Yes. Open the entry in your passbook and choose the group under Split with a group…. The expense goes into the group, paid by you, and your passbook entry stays as it is, linked to it. Nothing is counted twice.

No. On an iPhone, iPad or computer, use the web app at app.quilleaf.com. It has the same ledger, cards, budgets, reminders, groups and investments, and it can import an Excel passbook. It can’t read bank SMS; that needs Android. Your data stays in that browser. To move it between your Android phone and the browser, use Export .db on one and Import .db on the other.

In your browser, on that device. It isn’t sent to our server, and the web app sets no cookies. So another browser or device won’t see it, and clearing the site’s data in your browser deletes it. Use Export .db in Settings now and then to keep a copy. Done on a computer that isn’t yours? Use Settings → Erase everything.

Not on its own. There’s no server in between to sync through. Move your data by hand instead: Export .db on one, and Import .db on the other. Importing replaces what’s there. Your phone keeps a copy of what it replaced, and the web app lets you undo an import.