Pay once. Private. Offline.
iPhone, iOS 18 and later. One purchase, no subscription.
Nothing to sign up for. Open the app and start.
Your budget lives in a database on your iPhone.
One purchase, every feature, updates included.
No analytics, no crash reporting, no ad code.
Budgets fail when they are forecasts. Pentos only deals in money that has already landed. Assign it to envelopes, spend against them, and watch what is left roll into next month. When an envelope runs dry, the shortfall is charged back against next month's To Budget, so the numbers stay honest. Any category can carry its own debt forward instead.
Every account and every transaction in one register, searchable in seconds. Running and cleared balances, on budget or off. Payee autocomplete, split transactions, and transfers that stay mirrored across both accounts. Reconcile against a statement and the matched rows lock. Undo takes back anything, including bulk edits and deletions.
Teach Pentos once. Rules rename messy payee text, set categories, and run on every import. Apply a new rule back through your history in one tap. Payee merge tidies up duplicates and never touches a reconciled row.
Scheduled transactions post on their own, or wait for your approval, and they never drift: Jan 31, Feb 28, Mar 31. Give any envelope a target, whether that is a fixed amount, a save-by date, or a share of income. Then fund every goal in one tap.
Net worth, cash flow, spending by category, month against month, and a calendar heat map. Arrange your own dashboard from saved report cards. A privacy switch redacts every amount when someone is reading over your shoulder.
Import CSV, OFX, QFX, or QIF. Pentos learns each account's column layout, flags duplicates before they land, and re-importing the same file is always safe. One tap exports the whole budget as a portable backup file, or as plain CSV for a spreadsheet.
Pentos makes no network connections of any kind. No analytics, no telemetry, no crash reporting, no advertising code. Its App Store privacy label reads Data Not Collected, because there is nothing to collect.