Two taps, and it is recorded.
Type the amount. Say how it was paid. That is the whole of it.
There is nothing to open first and no mode to choose. A customer is standing there, so the screen at rest is already the thing you need.
Type the amount
However many digits it takes, it is one act of entering an amount.
Say how it was paid
Cash, card, phone, or booked to someone who will pay later.
The four keys never move and never grey out. They are told apart by where they sit and by how light or dark they are, not by their colour alone, so the row still reads in direct sun, on a scratched screen, and to someone who sees colour differently.
The dot goes hollow. Nothing else changes.
The till is on the phone. The network was never part of taking a sale.
Most tills stop when the signal does, which is exactly when a market is busiest and a queue is longest. This one does not notice. The connection is shown as a single dot, filled or hollow, and neither state blocks anything or asks you to do something about it.
It was proven the blunt way rather than argued: the server was killed, the app was reloaded with nothing to reach, and a sale was taken.
On your phone. Nowhere else.
There is no server to send them to, so there is nothing to send.
- No account and no sign-up. It has never been told your name.
- No analytics, no tracker, no advertising identifier, no crash reporter.
- No third-party script of any kind. The policy the app enforces in the
browser is
default-src 'self', which means it may load nothing but itself. - Nothing goes anywhere unless you pick it up and hand it over yourself.
The screen at rest shows no takings, no totals and no customer names, so a phone handed across a counter or taken out of a hand shows a number pad. The books sit behind the fingerprint the handset already has.
What protects the records today, stated exactly: read the security page. It says what is in place and what is still being built, in those words.
What did that bottle actually cost you?
It counts what went in, so the price you set is a decision instead of a guess.
Raw material, packaging and finished goods are one stock, and a batch is the place where one becomes the other. Stock is valued at what it really cost, averaged across what you paid, not at whatever the last delivery happened to charge. And the bottle, the cap and the label are input lines like any other, because they are.
The pepper sauce worked through in the code, per bottle:
A worked example from the test suite, in plain units. Forty per cent of a margin sits in the packaging, and it is the part nobody counts.
It also runs the other way round, which matters for anyone who makes something. A kilo of fruit becomes two kilos of jam once sugar goes in, and eight kilos of apples become one of concentrate once water comes out. A field that stops at one hundred per cent cannot describe either, so this one does not have that field.
Who owes you, and since when.
A cash sale is finished when the money changes hands. A sale on trust is not.
That is the whole reason the fourth key exists. Booking it takes the same two taps as cash, plus the name. Payments come off the oldest debt first, which is how arrears actually behave, and the book ages itself so you can see what has been sitting there since March without doing any arithmetic.
Miss a few days and the book is simply short by those days. It is never wrong about the rows it has, and it says how many days you recorded.
A projection is a claim.
A record is evidence.
Every applicant in the queue can produce a projection, because a projection is typed. Only an applicant who has been recording can produce twelve months of actual trading numbers, and that is the one thing on the list that cannot be made on the day.
The gap this sits in
A bank statement is evidence of a business that banks. For a trader whose money never enters an account, it is nearly empty, and it shows nothing about the trading. Reading such an account tells a lender almost nothing, which is why a file for this segment is usually assembled out of assertions.
This is the other record. It is built out of transactions as they happen, so the figures are derived rather than entered. Nobody wrote them, and that is the property that makes them worth reading.
What it can produce
Opened first
The four a lender starts with
- Monthly revenue, actual, across every way it was paid, cash included
- Gross margin by product line
- Net cash position over time
- The seasonality curve, which is when a repayment is affordable and when it is not
The difference
What separates one file from another
- Cost per finished unit, from the conversion, not from an estimate
- Batch yield, expected against actual
- Aged receivables, straight off the credit book
- Input purchase history and supplier concentration
- The working capital cycle in days, which is the number a facility is sized against
The chain
What the money would buy
- Capacity produced in the period, measured
- The merchant’s own statement of the constraint and the purchase
- The extra units, and the extra cost and margin priced off the measured unit cost
Completeness travels with every figure
Twelve months of revenue built from four recorded days is a lie with a chart on it. So every figure carries how many days were recorded, how many entries there were, and what share of the period that covers. Where a component was not measured, it is named as missing rather than defaulted to zero: a working capital cycle computed without a payables figure is not a shorter cycle, it is an unknown one, and it says so.
A recipient who can see the coverage ratio can decide what the number is worth. One who cannot, cannot.
It is hers to send, and only hers
- Derived figures only. A pack cannot contain a transaction, a customer name or number, a supplier, a price by customer or a stock location, and it prints that exclusion list on itself.
- Scoped to the recipient. A chamber asking about throughput is a different grant from a lender asking about margin. There is no single global switch.
- Time-boxed. A share with no expiry is refused. Continuous consent is not consent.
- Revocable, with the limit said out loud. Revoking stops future sends and cannot recall a pack already sent, and the product says exactly that rather than implying otherwise.
- Logged. She can see everything ever sent, to whom, when, and what was in it.
- Off until she turns it on. Never pre-selected, never bundled, never implied by some other action.
And nothing in the product can ever be gated on it. No feature, report, tier, discount or place in a queue may be withheld, degraded or delayed pending a data share. That is a hard rule in the requirements and it outranks any commercial argument for adoption, because a product that traded access for data would be the thing its own design exists to prevent.
What it is not, and will not become.
It does not handle the money
It records that a payment happened and what the rail took. It does not move the money itself, and it holds none of yours. That is a scope decision, not a limitation of the phone: recording needs no licence, which is a large part of why this is free and why there is nothing to sign up for.
It does not pick your payment provider
Bring whoever you already use. Nothing here is tied to one wallet, one bank or one terminal, and nothing steers you toward one. Change provider next year and the record carries on unbothered, because what it keeps is that money arrived and what it cost you to take it.
It does not say you will get a loan
It never asserts eligibility, a score, a likelihood of approval, or that a business is bankable. It reports what the record supports, line by line, and stops there.
It does not sell what it sees
Transaction data is never sold, licensed, aggregated or resold, under any wrapper, including as an anonymised benchmark. The record a manufacturer would buy is the record somebody else would take.
It does not ask you to set it up
Nothing is configured before the first sale. No catalogue, no product list, no categories. What you sell is learned from what you sell.
It does not have an export-everything button
And it never will. Every export is scoped, dated, named for a purpose and logged. A complete takings record is useful to more people than a lender.
It is free, and there is nothing to join.
Type the address into the phone’s browser and add it to the home screen.
There is no app store account, no download, no card and no sign-up. It arrives as an address and becomes an icon. The next morning it opens with no signal, because by then it is already on the phone.
Best on a recent Android handset. It runs on iPhone and iPad too, camera barcode reading included. One optional extra does not: driving a Bluetooth accessory. It is not needed to record a sale, and nothing in the product dead-ends without it.