Open core
Free, forever
Yours to run. No card.
- CLI checkpoint + resume, one machine
- Chronos autosave + local recovery
- Self-host the coordinator, zero cloud
Pricing
The open core is free today — clone it, run it, self-host the coordinator with zero cloud and zero credentials. Hosted Timestore is in early access: sign in and Hosted Solo or Team checkout, plus the customer portal, are in Settings. This page does not list a price, because we are not publishing one yet.
Open core
Free, forever
Yours to run. No card.
Most people start here
Hosted · Solo
Early access
Sign up. Both account types. Price is in Settings, not here.
Hosted · Team
Early access
Shared folders. No public price.
Hosted Free (sign in): 1 GiB. That quota is a signed-in hosted plan, separate from the open core.
/sign-up offers both account types (Private via OPAQUE, Standard via Clerk). /sign-up, /sign-in, and /downloads/Timestore.dmg work only while this site is served behind app-timestore. A standalone deploy does not serve them.
No price on this page, and no card form here. Signed-in Settings starts Stripe checkout for Hosted Solo and Team, and opens the customer portal. Storage in force: free 1 GiB, Solo 50 GiB, Team 500 GiB. No per-plan device, seat, or repo cap. The open core stays free.
Early access is a real product with real limits. Here is what the Mac app and the hosted coordinator do today, and what we will not pretend they do.
| Capability | Status | What it means |
|---|---|---|
| Self-host (open core) | Live | Clone and run. Zero cloud, zero account. |
| Mac app 0.2.0 | Live | Notarized DMG at /downloads/Timestore.dmg. Finder drive (File Provider) ships. Trusted / FSKit does not. |
| Hosted coordinator | Live | Convex, R2, and NATS are operating for early access. |
| Accounts | Live | Standard sign-in via Clerk, or Private / E2EE via OPAQUE with a mandatory recovery key. |
| Billing | Live | Hosted Solo and Team checkout, and the customer portal, live in signed-in Settings. No public price list. |
| Storage quotas | Live | Free 1 GiB, Solo 50 GiB, Team 500 GiB. No per-plan device, seat, or repo cap. |
| Teams | Live | Shared folders with roles, invite links, and member removal — on the web and in the Mac app. |
| Restore | Live | Whole project, one file, one folder, or a deleted file this Mac saw, with undo. Mac app 0.2.0. |
| Reviews | Gated | Live on the web. The Mac app says review on the web. |
| Conflicts | Gated | Kept and surfaced, never silently merged. Resolve by restoring an earlier point. Keep mine / Take theirs are not functional yet. |
| Agent-run resume | Gated | Recording a run and its transcript needs the CLI and hook. Not in the DMG. Live process state never resumes. |
| Account deletion | Not built | Suspended. Crypto-shred of an account is designed, not live. A request does not delete rows or shred keys. |
| Deletion recovery across Macs | Not built | Restoring a deleted file is local to the Mac that saw the delete. |
| Windows, Linux, iOS | Not built | Not shipping. The CLI and coordinator are Node; we do not ship those apps. |
| SOC 2 | Not built | Not started. We'll publish a dated roadmap, never a premature badge. |
This table changes as the work lands — follow the changelog or read the full security model. We'll publish a dated SOC 2 roadmap, never a premature badge.
The open core covers local, offline work today: CLI checkpoint and resume across processes, Chronos autosave, local recovery of files this machine saw, and a self-hosted coordinator. Hosted early access adds the operated coordinator: accounts, file sync across your Macs, team folders, and storage quotas. Private accounts encrypt Drive content on your Mac before upload; keys are unlocked by OPAQUE sign-in. Standard accounts are not end-to-end encrypted.
It does not add a public price, a Windows or Linux or iOS app, or Trusted / FSKit. It does not record an agent run inside the DMG — that still needs the CLI and hook. Account deletion is suspended. A deleted file restores on the Mac that saw the delete, not from another Mac's history. Sign in if you already have access. The waitlist is for a note when capacity opens, not a substitute for the product.