Install
Two files, one for each system. Both will make your computer show a warning the first time, and the whole of that story is on this page.
One file for both Apple Silicon and Intel (.dmg) · about 18 MB.
Nothing is wrong with the file. Windows and macOS both warn about software from a developer they have never seen before, and Cardගොඩ is exactly that.
Operating systems trust software that has been code signed — stamped with a certificate that a developer buys and renews every year. A Windows certificate runs a few hundred US dollars a year, and Apple's developer programme is another 99 dollars a year on top.
Cardගොඩ is in open beta and is free to use, so it does not yet carry either. That is a cost decision, and it is being revisited before the app starts charging. Until then the warning is the honest cost of an unsigned build, and you should know what it means rather than be talked past it: your computer is telling you it cannot vouch for who made this file. Only you can decide whether to trust it.
What you can check is that you have the real file. Download it only from the release page linked above, which is the same channel the app's own updater uses. Updates are cryptographically signed and the app refuses any update whose signature does not match, so once installed you are on a verified path even though the first download is not.
Microsoft Defender SmartScreen prevented an unrecognised app from starting. Running this app might put your PC at risk.
More info↑ This is the one. Click More info — the Run anyway button only appears after you do.
_x64-setup.exe.The SmartScreen warning appears once, on the first version you install. It stops appearing as more people install the same file.
Apple could not verify “CardGoda” is free of malware that may harm your Mac or compromise your privacy.
↑ What current macOS shows the first time. There is no Open button — and on recent versions, right-click → Open and System Settings don't offer one either. The Terminal step below works on every version, which is why it is step 2.
.dmg you downloaded and drag the Cardගොඩ icon onto the Applications folder.xattr -dr com.apple.quarantine /Applications/CardGoda.app
That line removes macOS's “downloaded from the internet” flag from this one app and nothing else. It is also the fix if macOS instead says the app “is damaged and can't be opened” — it isn't; that is the same flag on an unsigned app. Don't run it on software you didn't deliberately choose to trust.
Two routes work on some macOS versions, not all. On older macOS, right-click (or Control-click) Cardගොඩ in Applications, choose Open, then Open again. Or, straight after a blocked launch, open System Settings → Privacy & Security, scroll to Security and click Open Anyway — it only appears for a short while after the block, and newer versions often don't show it at all. If neither is there, use the Terminal line above.
Most statements are read offline with nothing else to set up. A few banks send PDFs the built-in reader cannot handle, and those need a free Google Gemini key — yours, on your own Google account. How to get one, and what it costs →
Cardගොඩ checks for a new version when it starts and asks before installing anything — it will not update itself behind your back. Each update is signed, and one that fails its signature check is refused rather than installed. You will not see the warning above again; it applies only to the first install.
On Windows, use Settings → Apps and uninstall Cardගොඩ as normal. On macOS, drag the app to the Trash.
Your data is not stored inside the app, so uninstalling leaves your statements and database where they are. If you want them gone as well, use Settings → Clear All Data inside the app before uninstalling — it asks for the last four digits of one of your cards first, so it cannot happen by accident.
Stuck on any of this? Tell us what happened and include which system you are on. Install problems are the ones worth hearing about most, because everyone hits them at the same point.