package icon

Pitak

Privacy-first offline library catalogue with an encrypted lending vault
New in version 1.1.8
* Security update: photos used for book covers and event posters no longer keep their embedded metadata (including GPS location) when published; merging library files is now safer (duplicate entries are surfaced instead of silently failing, and catalogue replacement can no longer leave a partial library); CSV exports are protected against spreadsheet formula injection; various privacy hardening.
Pitak is a privacy-first, offline personal library catalogue. Catalogue your books, lend them to borrowers from an encrypted vault, keep a wishlist, import/export your data, make portable backups, and optionally publish a read-only library site.

Features:

* Library — add, edit, search, sort and filter books; soft-delete with restore; on-device cover capture; ISBN barcode scan with metadata lookup (Open Library → Google Books, chained and cached).
* Borrowers vault — a persistent, AES-256-GCM encrypted store for borrowers and loans, unlocked by a passphrase (Argon2id key derivation). Optional biometric unlock.
* Wishlist — track books to acquire; move them to the library on purchase.
* Import / Export — JSON, CSV (including Goodreads import), and paginated PDF export with Indic-script support.
* Backup / Restore — portable .pitabak archives.
* Publish — optionally push a read-only library viewer to GitHub Pages, with PII redaction.
* App-lock — optional biometric/device-credential gate before the library screen.

Privacy posture: local-first by default. Sensitive data lives in the platform Keystore; secrets are held as wipeable bytes. Network calls happen only on explicit user action (ISBN lookup, publish, opt-in remote covers). Screenshots are blocked while sensitive data is visible.

The cryptographic core is written in Rust and built entirely from source.
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 1.1.8 (133) suggested Added on Aug 05, 2026

    arm64-v8a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 34 MiB PGP Signature | Build Log

  • Version 1.1.8 (132) - Added on Aug 05, 2026

    armeabi-v7a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 30 MiB PGP Signature | Build Log

  • Version 1.1.8 (131) - Added on Aug 05, 2026

    x86_64

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 36 MiB PGP Signature | Build Log

    • New in version 1.1.7
    * Fixed: F-Droid updates work again — 1.1.5 and 1.1.6 could not be built by F-Droid due to a dependency lockfile mismatch; this release restores automatic updates. Includes all 1.1.5/1.1.6 changes: one-tap GitHub Pages publishing, keyboard focus fix after resume, and buttons clear of the system navigation bar.
  • Version 1.1.7 (123) - Added on Aug 01, 2026

    arm64-v8a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 34 MiB PGP Signature | Build Log

  • Version 1.1.7 (122) - Added on Aug 01, 2026

    armeabi-v7a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 30 MiB PGP Signature | Build Log

  • Version 1.1.7 (121) - Added on Aug 01, 2026

    x86_64

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 36 MiB PGP Signature | Build Log

    • New in version 1.1.4
    * Fixed: ISBN barcode scanning is now fast and reliable — the scanner detects book barcodes within a second or two instead of rarely
  • Version 1.1.4 (93) - Added on Jul 11, 2026

    arm64-v8a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 33 MiB PGP Signature | Build Log

  • Version 1.1.4 (92) - Added on Jul 11, 2026

    armeabi-v7a

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 29 MiB PGP Signature | Build Log

  • Version 1.1.4 (91) - Added on Jul 11, 2026

    x86_64

    This version requires Android 7.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • record audio
      This app can record audio using the microphone while the app is in use.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • dev.khoj.pitaka.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 35 MiB PGP Signature | Build Log

Find Apps