Collect your own purchase and transaction history into one structured record, on your own device.
Your record of what you have spent is scattered. The supermarket holds your itemised receipts, your bank holds the debits, a payment provider holds the online purchases, and some of it arrives only as email that is never collected anywhere. Each service shows a fragment of the month and none shows the whole, so a simple question — what did I actually spend, and on what — has no single place that can answer it.
orvi gathers those fragments into one structured record that you hold. It reads the receipts and transactions that already belong to you, extracts the date, amount, counterparty and, where a receipt provides them, the individual line items, and stores the result on your own device.
orvi runs on your computer or phone. You connect the sources you want, each one separately and each one optional. It then collects new records in the background and keeps them in one place where they can be searched, totalled and exported.
It is local-first. Your records are stored on your device, encrypted. There is no account to create, no server of ours that holds your financial history, and nothing to sign in to in order to read your own data. That is a deliberate privacy property: a central database of people's spending does not exist here, so there is none to breach, subpoena or sell.
Nothing below is required. orvi is usable with no source connected at all, by entering records by hand or importing files you already have. Each source you do connect is authorised separately and can be disconnected at any time.
| Source | What it reads | Why it is needed |
|---|---|---|
Gmailgmail.readonly |
Only messages matching a search for known transaction senders. From each: the date, amount, counterparty and reference. Receipts attached as PDFs are parsed for their line items. | Several records exist only as email — a shop receipt, a payment notification, a bank debit notice. There is no other interface that returns them. The scope is read-only: orvi cannot send, modify, label or delete any message, and the search runs on Google's servers so non-matching mail is never transferred. |
| Payment accounts | Date, amount, counterparty, reference and description of each transaction on accounts you link. | The bank's own ledger is the authoritative record of what left your account, and it reaches further back than any notification. Access is account information only — orvi cannot initiate a payment or move money. You register your own access with a licensed provider, authenticate at your own bank, and may withdraw consent there at any time. |
| Retailer receipts | Your digital receipts and their line items from retailer accounts you hold. | Only the retailer's receipt says what you bought. A bank statement shows a total; the receipt shows the basket, which is the difference between knowing you spent 48 EUR and knowing what on. |
| Statement files | Statement exports you have downloaded yourself. | Read from your device for the authoritative history, and uploaded nowhere. |
A household's finances are often shared, so orvi can share one set of records between family members you invite. What travels is an encrypted log of changes, encrypted on your device with keys that stay on your devices — so whoever stores it receives only ciphertext and cannot read it, including us. You choose whether it is stored on infrastructure we operate or on your own cloud storage. If you do not share with family, nothing is ever transmitted.
Anyone who wants their own financial history in one place and under their own control, rather than distributed across the services that each hold a piece of it. You must be at least 16, and may connect only accounts that are yours.