Approval before every send
SMS, calls, photos and OTP reveal go through Hermes's approval panel with the exact content shown.
One-time codes hidden
OTPs appear as [OTP hidden] in every result unless you turn reveal on and approve each request.
No message text stored
The money tracker keeps amounts, dates and merchants. Never the SMS itself.
Signed, local requests
Every request carries an HMAC signature, a timestamp and a one-time nonce. The secret is never sent.
No shell on the phone
Each endpoint runs one fixed termux command with validated input. Free text travels on stdin.
Your phone only
The helper runs visibly in Termux with a persistent notification. Stop it any time with Ctrl+C.