Free should come with a plan.
Official hosting is designed to stay modest, legible, and inexpensive to operate. This page records the limits, infrastructure, and funding model in public.
What does not change
- The complete self-hosted product stays free and open source under the AGPL.
- There will be no ads and no selling household data.
- The official app will not deliberately cripple self-hosting.
- Export and account deletion remain available; your data is not leverage.
How hosting stays small
The hosted service runs across infrastructure we operate in Eygelshoven, the Netherlands, and Nuremberg, Germany. PostgreSQL is self-managed and replicated, Cloudflare fronts the service, and Cloudflare R2 stores attachments under our EU data-location configuration. Each household has 1 GB of file storage, with atomic quota reservations and cleanup of abandoned uploads.
Mobile list recognition runs on iOS and Android devices. No hosted AI service is called for a scan.
Encrypted PostgreSQL backups are taken twice daily. A rolling 30-day retention policy and a separate recovery copy for R2 attachments are public-beta launch work; until those controls are verified, we do not claim a zero recovery point or independent attachment backup.
Other services in the loop: Amazon SES in Frankfurt for transactional email, Firebase for push notifications and app attestation, Cloudflare Turnstile for web guest sign-up and testing-list signups, and a self-run GlitchTip for crash reports. The privacy policy lists each one with what it receives.
How the money works
Households of up to four members use official hosting for free. Households of five or more people pay €3.99 monthly or €29.99 yearly for Premium. One subscription covers the household and unlocks nothing else: no feature gates, no ads, no upsells. Web subscriptions run through Polar; in-app subscriptions through the App Store and Google Play. Taxes and the final amount are shown before payment, and store prices may vary by region.
Premium pays for infrastructure first. As the hosted service settles, this page will publish the monthly compute, storage, email, and monitoring totals rather than inventing numbers in advance.
If Premium cannot cover growth, the first response is tighter fair-use limits, announced here at least 30 days ahead — not feature locks in the open-source app.