There are three ways to have your spending record itself, and they are not interchangeable: each asks something different of you and sees a different amount of your life. Here is how they differ.
| How | What you hand over | What it can see | Works offline? |
|---|---|---|---|
| Link the bank | Consent over your accounts, or your credentials outright | Everything: balance, full history, every account and card | No |
| Read the alerts | Notification access, granted on the phone itself | Only what your bank tells you, from the day you install it | Yes |
| By hand | Your time | Nothing you do not type into it | Yes |
That last column matters more than it looks: it says whether the app needs the network to do its job, and therefore whether it is capable of sending anything to anyone.
This is what aggregators and nearly every well-known finance app do. You authorise it, and a third party's server fetches the transactions from your accounts.
There are two versions, and the difference is large. Regulated providers use the API the bank is obliged to offer: you are sent to your own bank's screen, you sign the consent there, and the third party never sees your credentials. Providers that are not regulated ask you for your username and password and log in as if they were you, which is what scraping means. If a spending app asks for your bank credentials inside its own screen, this is what it is doing.
It is neither a scam nor unusual: it is the only way to get complete accounts —the real balance, the transactions from before you installed the app, and the accounts that never notify you of anything. If what you want is to reconcile accounts properly or prepare a tax return, you need this and not the other two.
The cost is specific: your transactions now exist on a server that is not yours. You can read the policy and trust it, but it no longer depends on you — it depends on that company's security, on who buys it, and on what the policy says next year.
Your bank already sends a notification to your phone when you pay by card or a direct debit goes through. That alert carries the amount and the merchant inside it, written as text. An app with notification access can read it and turn it into a transaction, without asking your bank anything and without talking to any server.
This is what Xtracto does. The permission is granted by hand in the system settings, revoked the same way, and reaches only the apps you tick one by one: it is not a key to read your whole phone.
Reading notifications is not connecting to your bank. There are no credentials, there is no Open Banking, and it cannot look up your real balance. It is a text reader over alerts that were already on your screen.
And here is what really sets this approach apart: because it needs no server, the app can decline to declare the internet permission. When it is not declared, Android refuses any attempt it makes to open a connection. It stops being a promise made to you and becomes something you can check against the installed file.
If the rest of this article is going to be any use to you, this part has to be true as well. Reading alerts has three limits, and none of them is fixed by better programming:
That last one is the one you can push on: the list of banks grows with the formats people send in, and if yours is not there, you can ask for it.
The dullest way, and the only one that hands absolutely nothing to anyone. It works with any bank in the world, needs no permissions, and never misreads anything.
The downside is well known: people give up. Most last about two weeks. That is why in Xtracto it is a complement rather than the main way: you can enter an expense by hand and, if the bank alert for that same payment arrives later, it replaces your entry instead of duplicating it. So a bank that is not supported yet does not leave your month half recorded.
There is no answer that is right for everyone, and anyone telling you otherwise is selling something:
If you need complete accounts —the real balance, the history, several accounts reconciled against each other— and you accept that your transactions will live on someone else's server.
If what you want is to know where your month goes without handing your financial life to anyone, and starting the count from today is enough.
Put another way: the first gives you more data and the second leaves you less exposed. Choosing means deciding which of the two you need more.
It reads the alerts your bank already sends, records them, and declares no internet access permission: even if it wanted to send your data to a server, the operating system would stop it. No cloud, no account to create, no sign-up.