Email, calendar, and files on a server you own. Nobody mining it, nobody training AI on it — and nobody who can lock you out. Installed in minutes.
The same jobs, done on hardware you control. One install, one login, one place to back up.
Your domain, your archive, your server. Fast webmail plus native apps, with outbound delivery handled by a real mail provider.
Shared household and team calendars, invitations, recurring entries, and reminder or daily-summary emails.
Files stored as ordinary files, synced to desktop and phone. Photo backup, thumbnails, and optional end-to-end encryption.
One address book behind mail and calendar. Bring the vCards you already have; take them with you whenever you like.
Registration, waiting lists, recurring schedules.
Let people book time without a third-party service.
Your own model, on your own hardware.
Sell products and subscriptions from your server.
Backups, upgrades, and fleet management.
Every service you left behind has the same shape: a fee that only goes up, a plan that decides what you are allowed to do, and a policy saying they may stop serving you whenever they like. That shape is renting. Joinery has none of it.
Free to self-host, permanently, for you and your household. No monthly fee, no renewal date, no card on file, and nothing that stops working if you stop paying — because there is nothing to stop paying. Businesses buy a licence once; it is priced per company, never per person. The two paid plugins are one-time purchases as well. That is the whole way we make money, and we say so wherever money comes up.
There is no free edition, because there is nothing above it to upgrade to. Mail, calendar, drive, contacts, events, bookings and the AI assistant are the product, and you get all of it: no seat cap, no storage tier, no trial clock, no padlock beside the one feature you actually wanted. Add people until the machine runs out of room.
There is no acceptable-use policy governing your own server, because there is no relationship in which one could apply. Nothing you store is scanned, classified or scored. Your install does not report to us — no telemetry, no licence check phoning home, no switch on our end that could turn any of it off. Unplug it from the internet and it keeps working.
Nor does a setting appear one morning, already switched on, with a model reading your inbox to be helpful. Joinery ships an AI assistant; it runs on your hardware, only if you install it, and encrypted content is architecturally blocked from leaving your server through it.
One automated flag, one appeal form, one form letter — and fifteen years of mail is gone, along with every account that used that address to sign in, because the reset email now has nowhere to land. That is only catastrophic because everything was inside the account. On your own server there is no flag to trip and no appeal to lose, because there is nobody above you.
The limit is worth naming rather than overselling: a hosting provider can still refuse you service. But when your mail, files and calendar sit on a machine you rent by the month, in formats anything can read, that costs you an afternoon of moving rather than an archive.
Your data is ordinary files in an ordinary directory, plus a Postgres database. Backup is rsync and a pg_dump. Restore is the reverse. Leaving is copying a folder, and nothing in the design is there to make it harder — we would rather you stayed because the software is good than because going was painful.
None of this depends on us being decent. It holds because the software runs on your hardware, the data is in formats you can read without us, and there is no account for anyone to close.
Most privacy software encrypts what it stores and keeps the key next to it. That protects you from a stolen laptop and from nothing else. Joinery puts the key behind your passkey instead.
Stored messages, subjects, attachments and even the search index are sealed to a key that exists only as something your passkey can unwrap. Touch the key, an unlock window opens, and it closes again on its own. Someone who walks off with the drive, the backup, or the entire machine is holding ciphertext.
Turn a domain up to its highest setting and the key that signs your outgoing mail is sealed too, while your DNS instructs the world to reject anything that key did not sign. Inbound mail is sealed by the relay before it ever reaches your machine. The blunt version, which is how the manual states it: even a fully compromised server cannot read new mail or send as you.
When both sides run Joinery and the person you are writing to keeps a vault, the message is sealed to their own key before it leaves your server, and opens only when they are there to open it. Nothing in the middle — not a relay, not a provider, not us — ever holds a copy it could read, hand over, or lose.
The trade is real and we would rather state it than have you find it. Encryption a server can transparently undo for you is not encryption, so at the strongest setting some things need you present: sending requires a live session, and search runs while the vault is open. That is why the level is chosen per domain. The address that is you gets the strongest one; the address that collects club signups stays ordinary, on purpose, and you can change either at any time.
Bring the archive, keep the address you actually want, and stop being one automated flag away from losing all of it.
Four things done properly instead of forty done badly. Plain files, Postgres, and upgrades you do not have to hold your breath through.
One server, everyone's mail and calendar, and somewhere for the photos that is not somebody's training data. You administer it; they just use it.
Same software, same ownership, whichever rung you pick. Your server, your data, in every case.
Optional, paid once, and never in the way of the free suite.
We would rather tell you than have you find out.
Joinery is in beta. The suite is complete and in daily use, and it is honest to call some parts younger than others — the desktop sync client in particular is still pre-release. Every page on this site labels maturity where it matters rather than painting the whole thing “production ready.”
It is built by one developer, in the open. No investors, no board, no growth targets, and nobody who needs your data to be worth something. You can read the code that touches your mail.
Real things already run on it. ScrollDaddy, a commercial DNS filtering service with paying customers, runs entirely on Joinery — accounts, billing, scheduled tasks and all. So does this website.
You can check every claim on this page. That is the point of shipping software you run yourself: nothing here depends on trusting us.
Free to self-host, forever. $39.99 if you would rather have the afternoon back.
Not ready to install yet? Pick what you want to hear about. Leave any time.