LOGIN PAGE
MY FINANCES PAGE 1
MY FINANCES PAGE 2
MY FINANCES PAGE 3
DEMO OVERVIEW PAGE
FAMILY SECTION
ACCOUNTS SECTION
TRANSCATIONS SECTION
INVESTMENT LINKED MY ZERODHA ACCOUNT TO THE MY PAGE ONLY
AI INSIGHTS SECTION
RECEIPTS SECTION (DEMO)
PRIVACY AND CONSENT PAGE

Inspiration

Managing personal wealth in today's digital era is ironically fragmented. A typical young earner or household in India checks one app for their bank savings, another (like Zerodha) for equity portfolios, notes recurring EMIs and SIPs in random notes apps, and splits household bills over chat threads. There was no single, unified command center answering the three fundamental questions every earner asks:

Where is my money actually going right now? What is my financial runway if my income stops tomorrow? What will my cash flow look like over the next 30 to 90 days?

Furthermore, mainstream financial tracker apps aggressively harvest banking SMS data, demand invasive account credentials, and sell user data to credit bureaus. We were inspired to build FinForge: an executive-level, privacy-first Financial Intelligence Platform that unifies everyday liquidity, family household finances, and real Indian equity Demat holdings into a calm, proactive command center.

What it does

FinForge transforms passive financial record-keeping into active, forward-looking financial intelligence:

Executive Financial Command Center: Consolidates liquid cash, bank balances, physical assets, and live equity holdings into an instantaneous Net Worth evaluation:

Net Worth

∑ Cash Assets + ∑ Demat Holdings − ∑ Liabilities Net Worth=∑Cash Assets+∑Demat Holdings−∑Liabilities

Financial Runway & Health Indicators: Evaluates real emergency safety nets by calculating exact liquid coverage against essential monthly burn:

Runway (Months)

Available Liquid Reserves Average Monthly Essential Outflow Runway (Months)= Average Monthly Essential Outflow Available Liquid Reserves

Direct Indian Demat & Brokerage Tracking: Features a native 3-way integration with Zerodha:

Direct Kite Connect API sync with automatic SHA-256 token exchange. Zerodha Console Tradebook CSV import. Manual stock ticker entry with live Profit & Loss calculation:

P&L

( Current Market Price − Buy Price ) × Quantity P&L=(Current Market Price−Buy Price)×Quantity

Household & Personal Partitioning: Provides isolated personal finance records for the primary user alongside multi-member household budgets, tracking individual contributor balances without mixing records.

Recurring Obligation Engine: Tracks recurring EMIs, SIPs, utility bills, and SaaS/OTT subscriptions with interactive simulation engines and timeline reminders.

Context-Grounded Financial Advisor: An AI-powered advisory system grounded strictly in verified telemetry (savings rate, debt-to-income, and portfolio sector weightings) to eliminate financial hallucinations.

How we built it

We engineered FinForge with a high-performance, zero-bloat architectural philosophy—relying on native web standards for speed, security, and effortless self-hosting:

Backend Engine: Built using PHP 8.2+ with a clean MVC structure. Database interactions utilize strict PDO prepared statements with parameterized queries to eliminate SQL injection risks. Database & Persistence: MySQL 8+ relational schema designed with defensive auto-migration introspection, allowing runtime column self-healing across varied hosting environments. Security & Auth: Strict session-based user isolation, anti-CSRF token verification on mutating requests, rate limiting, secure password hashing (PASSWORD_DEFAULT), and Google Identity Services (OAuth 2.0 / One Tap). Zerodha Kite Connect Integration: Implemented the cryptographic token exchange protocol. We calculate an ephemeral SHA-256 checksum server-side:

Checksum

SHA256 ( API Key + Request Token + API Secret ) Checksum=SHA256(API Key+Request Token+API Secret) and exchange it with Zerodha’s api.kite.trade endpoints securely. Frontend Experience: Written in semantic HTML5, vanilla JavaScript (ES6+), Pico CSS customized with a bespoke dark-navy executive palette, Font Awesome 6 icons, and dynamic visualizations rendered using Chart.js. Deployment Matrix: Engineered to run seamlessly on local environments (XAMPP), automated Docker containers (docker-compose), free hosting (InfinityFree), and dedicated cloud VMs (Oracle Cloud Infrastructure). Challenges we ran into Zerodha OAuth Protocol & Ephemeral Tokens: Zerodha’s Kite Connect API enforces strict 1-day access tokens derived from single-use request tokens. Handling browser redirects, query string parsing, and automated SHA-256 checksum generation required building a dedicated, fail-safe token exchanger utility. Schema Divergence Across Shared Hosts: Migrating between local XAMPP and InfinityFree shared hosting revealed differences in strict MySQL modes and missing columns. We solved this by programming auto-migration routines in the repository constructor and building an interactive web diagnostic tool (test_db.php and migrate.php). Multi-User Data Boundary Enforcement: Balancing personal finance isolation with collective household/family member views without data leakage required robust session-derived filtering (WHERE user_id = :user_id) enforced across all API endpoints. Preventing AI Hallucinations: Large language models often hallucinate financial figures. We solved this by decoupling the data pipeline: our backend first calculates verified metrics (cash flow, savings rate, runway), and injects only deterministic telemetry into the advisor prompt. Accomplishments that we're proud of Full-Stack Independence: Delivered a complete fintech platform with zero bloated frameworks, achieving sub-100ms API response times. Real Broker Integration: Successfully connected live Indian retail brokerage data (Zerodha Kite Connect) into a self-hosted family finance dashboard. Bulletproof Portability: The application runs identically on a local developer machine (127.0.0.1:8000) and deployed live on the public web. Production Security: Zero client-side storage of financial secrets, strict CSP nonces, CSRF guards, and complete user data sovereignty. What we learned The mechanics of Indian fintech open APIs and brokerage authentication standards. The critical importance of building self-healing database schemas when deploying to heterogeneous cloud and shared-hosting targets. How to balance high-density financial data visualization with clean, modern typography and intuitive user experience. What's next for FinForge — Financial Intelligence Platform Account Aggregator (AA) Integration: Connecting with RBI-approved Account Aggregators (such as Setu or Finvu) for automated, consent-driven bank statement sync via UPI/AA protocols. Predictive Cash Flow Monte Carlo Simulation: Introducing statistical 90-day cash flow probability distributions to forecast cash crunches before they happen. Automated Tax-Harvesting Intelligence: Smart alerts for long-term and short-term capital gains (LTCG / STCG) tax-loss harvesting on Indian equities. Progressive Web App (PWA): Offline-first caching and native push notifications for upcoming bill and EMI reminders.