Self-hosted, on purpose

Run it on your own hardware via Docker. Your data lives on your server — there's no hosted account required to use it.

A thin core, and plugins for the rest

Core owns identity, money movement and the app shell. Budgets, forecasting, net worth and importers are plugins built against a published SDK — install what you need.

Isolation enforced by the database

Row-level security, not application-layer trust: a plugin only sees the tables and rows it declared it needs, checked by PostgreSQL itself.