HamaraFolio

Private by design · Made for Indian families

Your family's finances, sealed on your own computer.

HamaraFolio keeps a household's money and papers in one place: investments, insurance, gold, property, loans and the documents behind them. Everything is encrypted on your PC before it is saved or backed up, so the only people who can read it are you and your partner.

  • No sign-up
  • No ads, no tracking
  • Works offline
Readable on your PC, sealed in the cloud A laptop shows the family dashboard in plain view. An arrow carries only scrambled, encrypted blocks to a cloud backup. Family dashboard Net worth ₹ 1.84 Cr equity · gold · deposits Readable only here, after you unlock 9f2c e17a 04bd c3a0 5e91 7d2f a6b8 0e43 f15c Your backup: sealed blocks Amazon S3 or Google Drive
0readable copies ever leave your PC
256-bitkeys, from the audited libsodium library
Everychange signed and kept: nothing is silently overwritten
1 pageof paper brings everything back on a new PC

Take a look

Inside the app

Real screens from the app, filled with a made-up demo family (Rohit, Neha and Megha). Scroll sideways to see more.

How it works

The journey of one entry

Say you add a gold chain kept in your bank locker. Here is what happens to it, step by step.

  1. 1

    You type it in

    Gold chain · 22K · 24 g
    Bank locker, Pune

    It exists in readable form only inside the open app, in your PC's memory.

  2. 2

    Sealed on your PC

    x9Rk·Qe2v·8LpA·m0Zt…

    Encrypted with XChaCha20-Poly1305 using a key that never leaves your family's devices.

  3. 3

    Signed and chained

    #128 · signed by this PC

    The change gets an Ed25519 signature and is linked to the one before it, so history can't be quietly rewritten.

  4. 4

    Backed up, still sealed

    3a9f c01e 77b2 e1c0…

    If you switch backups on, the sealed copy goes to your own Amazon S3 bucket or Google Drive. They store it; they can't open it.

Security

What you see, and what the cloud sees

The same entry, side by side. Your backup provider, and anyone who ever breaks into it, only gets the right-hand side.

On your PC, after you unlock
Item
Gold chain, 22K
Weight
24 g
Value today
₹ 2,61,400
Where
Bank locker, Pune
Belongs to
Asha
Document
Locker agreement.pdf
In your cloud backup
7a 1f c3 90 5e e2 0b 4d  91 c6 2a 7f d8 33 6e 05
b2 49 f0 1c 8a 77 e5 3b  0d a4 6c 92 1e f7 58 c1
4e 08 bd 63 a9 2f 71 d6  e0 35 9b 4c 17 82 fa 6d
c5 30 8e 1b 74 f9 22 a7  5d 0c e8 41 b6 93 3f 7e
19 dc 66 a2 0f 85 4b e3  7c 2d 98 51 c0 3a f6 0e

Size: about 400 bytes · Changed: today

That is all the provider can learn: that a sealed block of roughly this size changed at this time.

Things that never leave your PC in readable form

  • Balances and values
  • Account and policy numbers
  • Names and nominees
  • Scanned documents
  • Saved logins
  • Your passphrase
  • Your recovery kit

Keys inside keys

Only your family holds the keys

There is no master key on a server, and no "forgot password" email. Each lock opens the next, and the first one is in your head.

  • Argon2id makes every passphrase guess slow and memory-hungry, so trying millions of guesses is impractical.
  • The device key is stored only in locked form, so a copied vault folder is useless without the passphrase. Windows Hello support will also tie it to the PC's security chip.
  • Each record and document is encrypted on its own, not as one big file.
  • A paper recovery kit, printed when you set up, is the only way back in if a PC is lost or a passphrase forgotten.

Tamper-evident history

Every change is signed, linked and kept

The vault is a chain of changes. Each one is signed by the device that made it and points to the one before. Alter or remove anything in the middle and the chain no longer checks out, so the app refuses to open it.

  1. #125Added FD, ₹5 lakhsigned · Asha's PC
  2. #126Updated gold ratesigned · Asha's PC
  3. #127Attached policy PDFsigned · Rahul's PC
  4. #128Added gold chainsigned · Asha's PC

Older versions are never purged: open any entry and see what it said before, and who changed it. Every check uses BLAKE2b hashes and Ed25519 signatures.

When things go wrong

Built for the bad day, not just the good one

Laptop stolen

The thief gets a folder of sealed blocks. Without your passphrase there is nothing to read, and nothing readable was ever written to disk.

New computer

Install HamaraFolio, choose Restore from a backup, point it at your S3 bucket or Google Drive and type in your recovery kit. Every entry and document is checked before it is accepted.

Forgot the passphrase

Your paper recovery kit opens the vault and lets you set a new one. Keep it somewhere safe, like a locker or with your will.

Cloud account breached

The attacker copies sealed blocks they can't open. Google Drive access is limited to the files HamaraFolio itself created.

Someone is suddenly not there

The family report lists what is held, where it is kept, the policies in force and the nominees, so the other person isn't left searching through drawers.

Kit and passphrase both lost

Then nobody can open the vault, not even us. That is the honest price of real privacy, which is why the app makes you confirm the kit at setup.

What's inside

The whole household on one screen

Net worth and cash flow

A dashboard across members, with analytics, ratios and a balance sheet.

Investments and SIPs

Stocks, mutual funds, US holdings, PPF, EPF, NPS and fixed deposits, grouped by account.

Insurance cover

Term, health and savings plans by member, with what each pays at maturity.

Gold and silver

Jewellery by location (home, locker, family), valued at today's rate.

Property and loans

Homes, plots, builder dues and loan schedules in one place.

Documents attached

Policies, passbooks and deeds stored encrypted next to the entry they belong to.

FIRE planner

When can you stop working? Thousands of simulated futures, with taxes, goals and medical costs.

Post office and more

MIS, SCSS, NSC, KVP and savings accounts, with interest worked out for you.

FIRE planner

When can you stop working? Worked out, not guessed.

FIRE means financial independence, retiring early: enough invested that the returns pay for the family's life. HamaraFolio works it out from the records already in your vault, and shows every step. Here is the demo family, Rohit (40) and Neha (38).

1 The FIRE number

Household spending a year₹12.44 L
Term and health premiums₹0.80 L
Rent that keeps coming in₹2.64 L
Allowance for tax₹0.85 L
Needed from investments each year₹11.45 L
Safe withdrawal rate3.5%
FIRE number₹3.27 Cr

3.5%, not the famous 4%: that rule was built for 30-year US retirements, and an early retirement in India has to last 40+ years with higher inflation.

2 2,000 possible futures

Market returns and medical bills are drawn at random, year by year, 2,000 times. Each future either lasts to age 92 or runs out.

4816%
5050%
5281%
5493%
5698%

Answer: retiring at 50 works in half the futures; at 54 it works in 9 out of 10.

3 What moves it

  • Invest ₹50,000 more a month2 years sooner
  • Spend 10% less1 year sooner
  • Markets fall 35% in the first year of FIRE50% → 25%
  • Keep today's mix instead of moving to 65% equity50% → 24%

Figures are the fictional demo family's. The planner is a model on your own inputs, not financial advice.

Where we are

Honest status

Today Working now

  • Windows desktop app, in private use by its founding family
  • Encrypted vault, signed history, recovery kit
  • Sealed backups to Amazon S3 (Mumbai) or Google Drive
  • Restore on a new PC from either backup

Next Being built

  • Unlock with Windows Hello
  • Encrypted backup files for a USB drive or OneDrive
  • Both partners' PCs kept in sync through a service that only ever sees sealed blocks

Later Planned

  • Open your vault in a browser, with the same encryption running in the page
  • Import from bank and mutual-fund statements
  • An estate package for your nominees

FAQ

Questions people ask

Can the people who make HamaraFolio read my data?

No. The keys are created on your PC and never sent to us. There is no account with us today, and the future sync service is designed to store and pass on sealed blocks only.

Does the app talk to the internet?

Its screens have no internet access at all. Only three things ever go out, and only when you switch them on: your sealed backups; fetching today's gold and currency rates (nothing about your household is sent); and, if you choose, reading a statement with an AI model you pick, in which case that one file goes to that provider.

Where are backups kept?

In your own Amazon S3 bucket (we use the Mumbai region) or your own Google Drive. On Drive the app may only see the files it created itself, not the rest of your Drive. You can use both.

Why a desktop app and not a website?

Because the safest place for the keys is a computer you own. A browser version is planned, but it will run the same encryption inside the page, with the keys still on your device.

What is used for the encryption?

libsodium, a widely used and audited library: XChaCha20-Poly1305 for data, Argon2id for passphrases, Ed25519 for signatures, X25519 for sharing keys between devices and BLAKE2b for hashing. No home-made cryptography.

Can I get it?

Not yet. HamaraFolio is in private use while sync between partners is finished. This page will say when that changes.