Account
Optional, and encrypted before it leaves
luma works entirely without an account. Sign in only if you want sync — and when you do, everything is end-to-end encrypted on your device first, so the server stores blobs it cannot read.
What's in it
-
Sync is opt-in
Nothing leaves your device until you explicitly turn sync on. The default is local-only.
-
End-to-end encrypted
Data is encrypted client-side before upload. The self-hosted sync server only ever holds ciphertext.
-
Self-hostable
The sync server is a small Dart service you can run yourself — it is in the same repository.
-
What needs it
Only a few plugins: Cloud Files, Chat, and publishing public recipes from the Recipe Book.
Luma 1.1
Every module ships in every build
There is no paid tier hiding any of this. Grab the latest build straight from CI.