Dark app-glass is reserved for the product itself: net worth, growth curves, import proof, and privacy surfaces that need a more concentrated viewing field.
Kapers flagship · local-first finance · dark app-glass
Garden
Garden
A ledger for people who want their money records to remain theirs.
Garden keeps your financial life in an encrypted vault on your device. Statement import happens locally. Categorization happens locally. The ledger remains readable offline after first load. That is not a fallback path. It is the point of the product.
582Tests gate the engine
0Decrypted ledgers on servers
3Platforms, one product model
Field guide
Import, reconcile, and keep a record that can be checked.
Garden reads statements on-device: CSV, OFX/QFX, and PDF. The first rows of the ledger appear without handing the statement to a third party. From there the product stays in the same posture. Recurring charges remain named. Debt payoff remains grounded. Exports and backups remain part of the surface, not hidden behind support articles.
Statement in, locally.
CSV, OFX/QFX, and PDF parsing happen before a server gets a vote.
A record, not an engagement loop.
Manual entries, imported rows, reconciled balances, and a structure made for checking with a clear head.
—
−6.75
—
−31.18
—
−84.02
Type a descriptor and watch the category change.
Ledger on this page
−121.95
That categorizer just ran here, in your browser. Nothing was sent anywhere.
Tending
Recurring charges become named rows, and payoff becomes a date.
Garden points at the quiet leaks without turning them into spectacle. A recurring list is useful because it names what has settled into the ledger. A payoff projection is useful because it turns fog into sequence. The math is the point. The interface just keeps it legible.
Recurring list
Streaming you forgot15.49
The gym from January39.00
An app called "Zen"9.99
Total, monthly64.48
$64.48/mo = $2.12 every day, including today. Since you opened this page: $0.000000
Debt payoff
Privacy and ownership
Nothing to breach because the ledger was never there.
Garden’s vault is encrypted on-device with a passphrase-derived key the company never sees. When sync is enabled, traffic passes through a stateless relay that retains no decrypted ledger data. If the servers disappeared tonight, your ledger would still know itself because it never lived there in the first place.
What we hold / what you hold
What we hold
What you hold
Nothing.
Everything.
No decrypted ledger, no passphrase, no server-side copy.
The passphrase, the vault, the exports, the delete button.
Turn on airplane mode. Keep reading.