Pitak

Pitak

Privacy-first offline library catalogue with an encrypted lending vault

Parallel Line Foundation Reading

Screenshots

Screenshot of Pitak Screenshot of Pitak Screenshot of Pitak Screenshot of Pitak Screenshot of Pitak Screenshot of Pitak

Description

Pitak is a privacy-first, offline personal library catalogue. Catalogue your books, lend them to borrowers from an encrypted vault, keep a wishlist, import/export your data, make portable backups, and optionally publish a read-only library site.

Features:

* Library — add, edit, search, sort and filter books; soft-delete with restore; on-device cover capture; ISBN barcode scan with metadata lookup (Open Library → Google Books, chained and cached).
* Borrowers vault — a persistent, AES-256-GCM encrypted store for borrowers and loans, unlocked by a passphrase (Argon2id key derivation). Optional biometric unlock.
* Wishlist — track books to acquire; move them to the library on purchase.
* Import / Export — JSON, CSV (including Goodreads import), and paginated PDF export with Indic-script support.
* Backup / Restore — portable .pitabak archives.
* Publish — optionally push a read-only library viewer to GitHub Pages, with PII redaction.
* App-lock — optional biometric/device-credential gate before the library screen.

Privacy posture: local-first by default. Sensitive data lives in the platform Keystore; secrets are held as wipeable bytes. Network calls happen only on explicit user action (ISBN lookup, publish, opt-in remote covers). Screenshots are blocked while sensitive data is visible.

The cryptographic core is written in Rust and built entirely from source.

What’s new (1.1.10)

* Vault: key file written atomically (no loss on a crash mid change-passphrase); half-created vaults auto-cleaned; passphrase asked twice, 8+ chars; unlock errors shown again.
* Passphrase field: edits not at the end clear the field and say so (they used to corrupt the entry).
* Lending refused (with reason) for removed or fully-out books.
* Corrupt backups fail cleanly; imports update in place, all-or-nothing.
* Filter chips show the active filter; orphan images cleaned; auto-backup off.

Anti-features

Properties of this app that are worth knowing about before installing.

  • NonFreeNet

Versions

Version Date Size Requires Android Download
1.1.10 current
1a2e8b81596842e9…
2026-09-07 34 MB API 24
1.1.10
95c5ff95fb64eded…
2026-09-07 30 MB API 24
1.1.10
1a86642946b24853…
2026-09-07 36 MB API 24
1.1.9
c7347d96ff8dc4ca…
2026-08-27 34 MB API 24
1.1.9
cb867450e524d876…
2026-08-27 30 MB API 24
1.1.9
68917c526e5dc733…
2026-08-27 36 MB API 24
1.1.8
c26b8e0f341295b3…
2026-08-05 34 MB API 24
1.1.8
9f05ae05c2e855b8…
2026-08-05 30 MB API 24
1.1.8
6923f97b4e103dc1…
2026-08-05 36 MB API 24

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • BiometricsUnlock with fingerprint or face.
  • CameraTake photos and videos.
  • Internet accessSend and receive data over the internet.
  • MicrophoneRecord audio.
  • Write storageCreate and change files on the device storage.
  • Read storageRead files on the device storage.
  • FingerprintUnlock with a fingerprint.
  • fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Show 1 more permissions
  • Network stateCheck whether and how the device is connected.

Comments