01 / Digital product
Split expenses. Keep good company.
A shared, exact ledger for money between people — encrypted on the device that writes it, so the only party who can read your expenses is the group that spent them. Shipping as an Android app built from one shared Rust core, with the product site live on the web.
Every shared expense says something about you: who you live with, who you travel with, where you were and what you spent. Most bill-splitting apps store all of it in readable form on their servers, and many fund themselves through ads or by limiting what free users can do. Meanwhile, the alternatives — a spreadsheet, a notes app, one friend “keeping track” — are error-prone, lose cents to rounding, and fall apart when someone disagrees. Forretas nas Contas gives groups a shared, exact ledger that nobody but the group can read, including us.
Your spending is someone else’s data.
End-to-end encrypted; we can’t read your bills.
Every expense is encrypted on the phone that entered it. What reaches a server is ciphertext, so there is no readable expense list to mine, leak, sell or hand over.
“Free” usually has a catch.
No ads, no data selling, and joining is always free.
The product is paid for by the people who create more than 3 projects: if you need more, you can subscribe.
Privacy is often an upsell.
Every privacy and security feature is free.
Spreadsheets and mental math go wrong.
Exact to the cent, every split adds up.
Splits are computed in integer minor units, so the parts always sum to the exact total.
One person ends up as the group’s accountant.
A shared history everyone sees, where every change is recorded.
Apps fail where trips happen: abroad, on roaming, in places with no signal.
Keeps working when the network doesn’t.
An expense is written to the phone and returned to you immediately; synchronisation catches up in the background when there is a connection, never as a condition for recording what you spent.
Getting everyone on board is a chore.
Add friends as names; they join later, or never.
Your data is hard to take back.
Delete your account in the app anytime.
Fourteen things that are true of the product today. None of them is a roadmap item, and none of them is reserved for a paid plan.
That is the direct consequence of encryption done properly. Nobody at Forretas holds a copy of your key, so nobody — including us — can restore an account that has lost both. Store the recovery code somewhere you will still have it in two years.
The invite secret travels in the link and never reaches our servers, so we cannot add someone to a group. A server-mediated invite still relies on the service returning the genuine public key of the person joining — the same posture every end-to-end messenger accepts. The QR path removes even that window.
The shared Rust core is portable, but a client is not a core. Until an iOS client exists and has been tested, this page will not imply one does.