update docs

README.md

@@ -1,6 +1,6 @@
-# BasedBank
+# Thijooree
 
-A unified Android banking app for Maldivians that combines MIB (Faisanet), BML (Bank of Maldives), and Fahipay into a single interface — with no analytics, no tracking, and no phone-home behaviour outside the banks themselves.
+A native Android client for Maldivian banking services — MIB (Faisanet), BML (Bank of Maldives), and Fahipay. It is a pure client: requests go directly from your device to the banks' own servers using the same protocols as their official apps. No proxy, no backend, no middleman.
 
 [![AI Slop Inside](https://sladge.net/badge.svg)](https://sladge.net)
 [![License: GPL v3](https://img.shields.io/badge/License-GPLv3-blue.svg)](LICENSE)
@@ -12,12 +12,15 @@ A unified Android banking app for Maldivians that combines MIB (Faisanet), BML (
 
 - **Multi-bank dashboard** — view balances across all your MIB, BML, and Fahipay accounts in one place, with a combined MVR and USD total
 - **Transaction history** — paginated, searchable transaction history per account for MIB CASA, BML CASA, BML prepaid cards, and Fahipay wallet
-- **Transfers** — send money between accounts and to saved contacts; supports MIB-to-MIB, BML-to-BML, and cross-bank (MIB↔BML via FAVARA)
+- **Transfers** — send money between accounts and to saved contacts; supports MIB-to-MIB, BML-to-BML, and cross-bank (MIB↔BML via FAVARA); transfer receipts saved locally
 - **Contacts** — manage saved beneficiaries across all banks; validates Dhiraagu and Ooredoo numbers and shows the account owner name before you add
 - **Fahipay** — full wallet support including balance, history with merchant icons, and Fahipay favourites (Raastas, Reload, Ooredoo Bill, Dhiraagu Bill)
 - **QR payments** — scan PayMV QR codes to pre-fill transfers
 - **BML foreign limits** — view your foreign currency spending allowances and breakdowns by ATM / POS / ECOM
 - **MIB financing** — view active financing deals
+- **Hide amounts** — one-tap toggle to hide all balances on screen (e.g. in public)
+- **Multi-account support** — add multiple logins per bank (e.g. personal + business); BML supports multiple profiles per login with per-profile session tokens
+- **Profile visibility** — individually hide/show MIB or BML profiles from the dashboard without removing them
 
 ## Authentication
 
@@ -25,6 +28,8 @@ The app requires your existing credentials for each bank — the same username/p
 
 Each bank's 2FA uses TOTP, so you need to have your OTP seed (the same secret used by your authenticator app).
 
+MIB sessions persist their Blowfish DH key pair and app ID between launches (re-login only when the session expires). BML tokens are stored per-profile with refresh token support. Fahipay sessions persist the `authId` and `__Secure-sess` cookie.
+
 ## Security
 
 - All credentials encrypted at rest with **AES-256-GCM** (Android Keystore)