Build encrypted, offline‑first apps without the lock‑in
The Firebase‑class developer experience you love, with end‑to‑end encryption, true data ownership, and the freedom to run anywhere.
Zoebase is our vision for an open‑source App SDK and relay backend built to be privacy-preserving, doom-resilient, and avoiding vendor lock‑in—for developer and their users.
Built for developers who are tired of compromise
Firebase is convenient but locks you in. Self-hosting is flexible but has high operations cost. Encryption usually breaks features. Offline-first is hard to sync. It doesn't have to be this way.
❌ The old way
- • Data Silos : Your data trapped in proprietary systems with rising costs
- • Fragile offline: Apps break when connectivity drops
- • Privacy trade-offs: E2EE means bad UX, is hard to implement, and use
- • DIY hell: Build your own sync, crypto, quotas, and access control from scratch
✓ The Zoebase way
- • True ownership: Open source, self-host and sync anywhere
- • Privacy without compromise: E2EE that works with realtime sync and access control
- • Offline-first by design: CRDT-based message sync that handles flaky networks gracefully
- • Batteries included: Quotas, billing, observability built-in for your BaaS
Our design vision
Delightful APIs that feel natural, but are built on solid cryptography and distributed systems
Encrypted data, simple API Concept
How we envision create, update, and sync with automatic E2EE
// Initialize with your endpoint
let config = zoe::ClientConfig::new()
// your server's public key, any number of DNS or IPs to find it under
.endpoint(SERVER_PUBLIC_KEY, ["myhost.org", "10.10.0.1", "fallback.zoebase.org"])
// restore encryption keys from system secret storage or create a fresh one and store it there
.session_key("zoe-session");
// Your client is all ready, with local secrets, no email nor password necessary - nothing...
let client = config.build().await?;
Shared Containers
Groups of shared objects for collaboration in full end-to-end encryption.
// Get current groups
let (groups, _diffs, _poller) = client.groups_view()
Delightfully simple APIs
which manages the complexity of encryption
let update = GroupInfoUpdate::Name("Deep Space 9".to_owned())
client.update_group(group.group_id(), update).await?;
Internal State Machine & Reactive API
Managing the complexity of encryption
Built on proven foundations
Everything you need, nothing you don't
Encrypt all'em things
Everything is encrypted by default. Zero-trust, zero‑permission: keys live with your users exclusively, not the server. Modern, post-quantum cryptography.
Offline‑first Snappiness
Client-side CRDT state machine with eventually consistent conflict resolution that don't need connectivity to work. Apps work everywhere, even on a plane, in a tunnel or within a LoRa network in the djungle.
Low-cost relays
Self-host anywhere in minutes: docker‑compose, coolify, YunoHost, bare metal, edge, or your laptop without any external relay at all
Quotas & Billing
Quotas and usage metering built‑in on the relay. Usage-based cost sharing for operations with your users.
Developer‑friendly SDKs
Delightful APIs for building your own applications, type‑safe, well‑documented, backed by Rust.
True Portability
Allow users to chose providers, even multiple at the same time for improved reliability and redundancy.
How Zoebase compares
The best parts of Firebase, Supabase, and Parse — without the compromises
| Feature | Zoebase | Firebase | Supabase | Parse |
|---|---|---|---|---|
| Self-hostable | ✅ | ❌ | ✅ | ✅ |
| End-to-end encryption | ✅ | ❌ | ❌ | ❌ |
| Offline-first sync | ✅ | ⚠️ | ❌ | ⚠️ |
| Realtime updates | ✅ | ✅ | ✅ | ✅ |
| Built-in quotas/billing | ✅ | ❌ | ❌ | ❌ |
| Multi-tenant by design | ✅ | ⚠️ | ⚠️ | ❌ |
| Open source | ✅ | ❌ | ✅ | ✅ |
| Post-quantum crypto | ✅ | ❌ | ❌ | ❌ |
⚠️ = Partial support or requires significant additional work
Built on battle-tested principles
Years of distributed systems research, distilled into a delightful developer experience
⚡ Realtime + CRDT‑style Merges
Low‑friction collaboration across devices and flaky networks. Automatic conflict resolution using CRDTs means your users never lose data, even when offline.
🛡️ Access Control at the Edge
Policy primitives that work with E2EE and without any relays enforcing them. Cryptographic capabilities for zero-trust sharing.
📊 Observability Without Compromise
Built‑in metrics, structured logs, and audit trails for compliance — all without touching user data. Monitor performance, track usage, debug issues while preserving privacy.
🌍 Portable by Design
No lock‑in. Export/import data easily, run locally for development, deploy to any cloud or on‑prem. Move providers or go hybrid without rewriting your app.
🧩 Extensible Architecture
SDK to develop your custom state management logic for your application.
🚀 Performance at Scale
Rust-powered server and SDK handles thousands of concurrent connections with minimal resources. Efficient binary protocol keeps bandwidth low even on mobile.
Built for real-world apps
From privacy-first collaboration tools to resilient field apps
🏥 Healthcare & Compliance
HIPAA-ready with E2EE by default. Audit logs and access controls for regulated industries. Deploy on-prem or in approved clouds.
🌾 Field Operations
Work offline in disconnected locations. Sync among each other or when connectivity returns. Perfect for emergency response, field research or activism in restricted environments.
💼 Collaboration Tools
Build the next Notion, Figma, or Linear with E2EE by default. Realtime collaboration without sacrificing privacy. Your users own their data, they don't have to trust you wwith it.
Early Access Program
Simple, transparent pricing
Start free, scale when you're ready. No surprise bills.
Self‑host
Run on your infrastructure, keep all features
- All the features
- E2EE & offline‑first
- Unlimited users & data
- Community support
- Full source code access
Managed
We handle hosting, you build features
- Everything in Self-host
- Fully managed hosting
- Automatic backups & updates
- Built-in monitoring & alerts
- Priority email support
- 99.9% uptime SLA
Enterprise
For teams with special requirements
- Everything in Managed
- Custom SLA & support
- On‑prem or air‑gapped
- Security & compliance reviews
- Dedicated support engineer
- Training & onboarding
Get involved
Help us build the future of privacy-first app development
📚 Current Resources
Development
- • Zoe Relay documentation
- • Relay quickstart guide
- • Rust API documentation (coming soon)
- • Developer guide (coming soon)
Research & Background
- • Effektio Whitepaper
- • Zoe App
- • Matrix protocol (inspiration)
- • Security model (in progress)
Community
- • GitHub Discussions
- • Issue tracker
- • Contributing guide
- • Roadmap (coming soon)
Updates
- • Development blog (RSS)
- • Email for updates
- • Newsletter (coming soon)
Frequently asked questions
Zoebase gives you the Firebase-like developer experience (realtime sync, easy SDKs, built-in auth) but with end-to-end encryption, true data ownership, and the freedom to self-host. Unlike Firebase, you're never locked into Google's infrastructure or pricing model.
Yes! Zoebase uses cryptographic capabilities and zero-knowledge proofs to enforce access control at the server without the server ever seeing your plaintext data. The server validates encrypted operations and coordinates sync, but all encryption/decryption happens client-side.
Zoebase is offline-first by design. Your app continues to work normally, reading and writing to local storage. When connectivity returns, changes sync automatically with CRDT-based conflict resolution. Users never see "offline" errors.
No. Zoebase is in early research and development. We're building the foundational pieces (Zoe Relay) and designing the API layer. The code samples and features shown on this site represent our design vision, not current functionality. Follow our GitHub for real progress updates.
Zoebase has built-in multi-tenant quotas and usage metering. You can set limits per workspace/org on storage, API calls, and connections. The system tracks usage automatically and can enforce limits or trigger billing events, making it easy to build tiered SaaS plans.
While there's no automatic migration tool yet, Zoebase provides import/export utilities and the SDK is designed to minimize migration friction. We're building migration guides for common platforms. Reach out to discuss your specific needs.
Zoebase uses modern, well-audited post-quantum cryptography (ML-KEM, KYBER, ML-DSA) today proving security even if quantum computers become a reality. This ensures that your data remains secure forever.
Zoebase is built by the team behind Acter, inspired by years of work on Matrix, Zoe, and other decentralized systems. We believe in open protocols, privacy by default, and giving developers and users true ownership of their data.
Help us build the future
Join us in creating a privacy-first, open alternative to Firebase and friends
Get in touch
Questions about Zoebase? Interested in partnerships? We'd love to hear from you.