Download and install

Your computer will warn you. Here is why.

Operating systems trust software that has been code signed — stamped with a certificate that a developer buys and renews every year. A Windows certificate runs a few hundred US dollars a year, and Apple's developer programme is another 99 dollars a year on top.

Cardගොඩ is in open beta and is free to use, so it does not yet carry either. That is a cost decision, and it is being revisited before the app starts charging. Until then the warning is the honest cost of an unsigned build, and you should know what it means rather than be talked past it: your computer is telling you it cannot vouch for who made this file. Only you can decide whether to trust it.

What you can check is that you have the real file. Download it only from the release page linked above, which is the same channel the app's own updater uses. Updates are cryptographically signed and the app refuses any update whose signature does not match, so once installed you are on a verified path even though the first download is not.

Installing on Windows

↑ This is the one. Click More info — the Run anyway button only appears after you do.

1. Your browser may object first Chrome or Edge may say the file "isn't commonly downloaded". Choose Keep, and if asked again, Keep anyway.
2. Run the installer Double-click CardGoda_1.4.1_x64-setup.exe.
3. Windows protected your PC A blue SmartScreen window appears. Click More info, which reveals a Run anyway button. Click it.
4. Follow the installer Choose where to install it, or accept the default, and finish. Cardගොඩ opens when it is done.

The SmartScreen warning appears once, on the first version you install. It stops appearing as more people install the same file.

Installing on macOS

↑ Note there is no Open button. That is why the right-click route below matters — double-clicking can only ever give you this.

1. Open the disk image Double-click CardGoda_1.4.1_universal.dmg, then drag Cardගොඩ into your Applications folder.
2. Open it the first time with a right-click In Applications, right-click (or Control-click) the app and choose Open. A dialog appears with an Open button that the normal double-click does not give you. This step matters: double-clicking an unsigned app only offers Cancel.
3. Or allow it from Settings If you already double-clicked and were refused, open System Settings → Privacy & Security, scroll down, and click Open Anyway beside the message about Cardගොඩ.

If macOS says the app "is damaged and can't be opened"

It is not damaged. macOS adds a quarantine flag to anything downloaded from the internet, and on an unsigned app that message is what you get instead of a normal warning. Open Terminal and run:

xattr -dr com.apple.quarantine /Applications/CardGoda.app

That removes the download flag from this one app and nothing else. Then open it normally. Do not run that command on software you did not deliberately choose to trust.

You may also need a Gemini key

Most statements are read offline with nothing else to set up. A few banks send PDFs the built-in reader cannot handle, and those need a free Google Gemini key — yours, on your own Google account. How to get one, and what it costs →

Updates

Cardගොඩ checks for a new version when it starts and asks before installing anything — it will not update itself behind your back. Each update is signed, and one that fails its signature check is refused rather than installed. You will not see the warning above again; it applies only to the first install.

Removing it

On Windows, use Settings → Apps and uninstall Cardගොඩ as normal. On macOS, drag the app to the Trash.

Your data is not stored inside the app, so uninstalling leaves your statements and database where they are. If you want them gone as well, use Settings → Clear All Data inside the app before uninstalling — it asks for the last four digits of one of your cards first, so it cannot happen by accident.