The open-source protocol for self-sovereign applications

The internet belongs to everyone.Your data belongs to you.

Self-sovereign applications run on your own devices and sync directly between them, so your data answers to you — not to the company that made the app. Run it yourself for free, or let Calimero Cloud keep it always on.

macOS · Windows · Linux · Open source

Backed by

Eniac sponsor
FJ labs sponsor
Hypersphere sponsor
Lyrik sponsor
Khosla ventures sponsor
GSR Ventures sponsor
Daedalus sponsor
Near sponsor
Warburg serres sponsor
Metaweb ventures sponsor
Eniac sponsor
FJ labs sponsor
Hypersphere sponsor
Lyrik sponsor
Khosla ventures sponsor
GSR Ventures sponsor
Daedalus sponsor
Near sponsor
Warburg serres sponsor
Metaweb ventures sponsor

01Why it’s different

Today’s apps rent you your own data.

  • Your data stays with you

    It lives on your devices — and on sealed (hardware-attested) machines, if you turn on always-on.

  • Encrypted, member to member

    Only its members — and sealed machines they approve — hold its keys. Removed members can’t read anything new.

  • Works offline, merges itself

    Edit anywhere. Changes merge automatically when devices meet again.

  • Every app is signed

    Apps are signed by their makers and checked again by the node that installs them.

Get Calimero Desktop
TodayEverything goes through their server. They can read it all.
CalimeroYour devices sync directly. Sealed cloud machines keep it online without being able to read it.

Your devices. Your keys. Your rules.

02How it works

From your laptop to your whole team, in four steps.

  1. 1

    Set up

    Get Calimero Desktop. It runs your node.

    Get Desktop →
  2. 2

    Create

    Install an app. It creates your namespace: the app’s own private space for its data, people and rules. You’re the admin.

    Explore applications →
  3. 3

    Keep it on

    Turn on always-on. Sealed cloud machines keep it online while you sleep.

    Go always-on →
  4. 4

    Invite

    Send one link. People join from Desktop or the browser — and with always-on, even while you’re offline.

    How invites work →

In the browser, each action is signed on the person’s own device; a cloud machine carries out exactly that — nothing more.

03Use cases

Built for groups whose shared work no vendor should see.

A few people — or agents — who share live, sensitive state and can’t hand it to a third party.

  • AI agents

    Give your agents a shared memory no host can read.

    • Shared working memory for a team of agents
    • Coding agents on a private issue tracker
    • Agents that act only on what a person signed
  • Sensitive data

    Your most private data, shared only with the people you choose.

    • Deal rooms, board papers and legal matters
    • Family records, finances and health notes
    • Passwords and credentials shared with a team
  • Between organisations

    Nobody hosts the room, so nobody owns the relationship.

    • Supplier and buyer collaboration
    • Joint ventures and consortium bids
    • Treasury and multisig operations
  • And everything else

    If a group shares it, you can build it.

    • Offline and remote work that syncs when back online
    • Multiplayer games with hidden information
    • Polls, reviews and anything a small group runs together
Start building

04Apps

Apps you already need. None that watch you.

Work together

Chat, docs and sheets your team actually owns.

Channels, shared documents and live spreadsheets that sync between your team’s devices — not through someone else’s database.

Keep it private

Signatures and secrets, kept between the people involved.

Collect signatures on a PDF, share a credentials vault, run a private forum — with no vendor in the middle.

Make things

Your canvas. Your pixels. Your nodes.

Design, edit and build in real time with the people you choose. The work stays with the people making it.

Browse the Application Registry

05Always on

Calimero Cloud

Keep it online while you sleep.

We run sealed, always-on machines for your namespaces — so your team stays in sync and people can join from any browser. Even we can’t read what’s inside them.

  • Always onYour namespace stays online while your devices are off.
  • Sealed hardwareIntel TDX machines prove what they run before they get a key.
  • Any deviceBrowsers and phones join and write with a signed request — no install.
  • Free$0Join always-on namespaces you’re invited to — from any browser
  • Basic$20/mo10 always-on namespaces · 10 GB in total · one sealed machine each
  • Premium$200/moUnlimited always-on namespaces · 100 GB in total · three sealed machines each
  • EnterpriseContact us →Dedicated capacity and SLAs
Start with Calimero CloudHow it works →

06Build on it

Write the app. Skip the backend.

Building privacy-preserving apps has never been simpler: no servers, no database, no sync engine, no auth service and no key management for you to run.

From apps/kv-store — trimmed
#[app::state(emits = for<'a> Event<'a>)]
pub struct KvStore {
    items: UnorderedMap<String, LwwRegister<String>>,
}

#[app::logic]
impl KvStore {
    pub fn set(&mut self, key: String, value: String) -> app::Result<()> {
        self.items.insert(key, value.into())?;
        Ok(())
    }

    pub fn get(&self, key: &str) -> app::Result<Option<String>> {
        Ok(self.items.get(key)?.map(|v| v.get().clone()))
    }

    pub fn remove(&mut self, key: &str) -> app::Result<Option<String>> {
        let removed = self.items.remove(key)?.map(|v| v.get().clone());
        if removed.is_some() {
            app::emit!(Event::Removed { key });
        }
        Ok(removed)
    }
}

That state syncs, merges and stays encrypted between everyone in the namespace. No server code.

Developer friendly

Write the logic in Rust, connect from JavaScript, React, Python, Swift or Kotlin. Sync, encryption and peer networking are handled for you.

Runs everywhere

Apps compile to WebAssembly and run on any node — a laptop, a server or Calimero Cloud. Clients run in browsers and on phones.

Private by default

Every namespace has its own keys, held by its members and the sealed machines they approve. Removing a member rotates the key.

A whole network on your laptop

Spin up several nodes with merobox and test sync, members and invites end to end before you ship.

Read the quickstartDeveloper tools

07Compare

Why not just build a normal app?

QuestionCalimeroTypical cloud app
Who holds the dataThe people using the appThe company running the servers
Can the host read itNo — not even Calimero CloudYes
Works offlineYes — merges on reconnectRarely
Backend to build and runNone — the protocol is the backendServers, database, sync, auth
Leave the providerSync a full copy to your own deviceExport, if they let you
Run it yourselfYes, free and open sourceNo
Read the docs

08Questions

Questions, answered.

What is Calimero?

An open-source protocol for self-sovereign applications: apps that run on the devices of the people using them, sync directly between them, and keep data encrypted with keys only their members hold.

Do I need to run a server?

Not one of your own. Calimero Desktop runs a node on your computer. If you want your app online while your devices sleep, Calimero Cloud runs always-on machines for you.

Can people join without installing anything?

Yes, once the namespace is always-on, for apps with a web version — which is almost all of them. They open the invite link in a browser; an always-on Calimero Cloud machine lets them in and carries out exactly what they sign.

Is it free?

Running Calimero yourself is free and open source. Calimero Cloud starts free; always-on plans are $20 and $200 a month, and for anything larger, contact us.

Is it a blockchain?

No. There is no chain and no gas fees. Running Calimero yourself is free; you pay only if you want Calimero Cloud’s sealed machines for high availability and delegated execution. Calimero uses CRDTs so a group’s shared state merges automatically — even offline.

What is a namespace?

An app’s own private space — its data, its people and its rules. You create one when you install an app, and you’re its admin.

What can I build it with?

App logic in Rust with the Calimero SDK (JavaScript is experimental). Front ends connect with clients for JavaScript, React and Python, plus early Swift and Kotlin SDKs.

Open source. Run it yourself, free.

Calimero on GitHub

The internet belongs to everyone. Your data belongs to you.

Install an app, build one, or let us keep yours always on.