All releases
v0.1.0-betastable

SilentSuite v0.1.0-beta

End-to-end encrypted calendar, contacts, and tasks. Open source (AGPL-3.0), built on the Etebase protocol. The server never sees your plaintext.

Hero image for SilentSuite v0.1.0-beta

SilentSuite calendar — desktop and mobile mockup

SilentSuite v0.1.0-beta: first public beta

End-to-end encrypted calendar, contacts, and tasks. Open source (AGPL-3.0), built on the Etebase protocol. The server never sees your plaintext.

This is a beta release. Please file issues or contribute directly!

Privacy by design

SilentSuite is zero-knowledge. Encryption keys are derived from your password on your device and never leave it. The server only ever sees ciphertext: events, contact names, task titles, even collection names are encrypted before they hit the network. Whoever runs the server (us, or you, if you self-host) cannot read user data; it's enforced by the protocol, not by access controls.

What works today

Web app: app.silentsuite.io

  • Calendar, contacts, and tasks with full CRUD across multiple collections per type. Every title, name, and field is encrypted in your browser before upload
  • Offline-first PWA: decrypted data is available locally; encrypted writes queue while offline and sync on reconnect; installable on desktop or mobile
  • In-browser .ics / .vcf import: parsed and encrypted entirely client-side, never reaches our servers in plaintext. Preserves source TZIDs and date-only task DUEs
  • Export calendars (ICS), contacts (VCF), or everything as a ZIP, produced from your locally decrypted data
  • Account, security, and subscription settings; trial-first signup with plan selection; verify-email flow; admin dashboard for managed-service users

Android: signed APK (sideload)

  • Collections as the home view, accounts in the drawer
  • Encryption keys are derived from your password on-device and never leave the phone; all sync traffic is end-to-end encrypted via Etebase
  • Light and dark mode with corrected contrast; auto-redirect to login on first launch; drawer logout fully clears the Etebase session and on-device cache
  • Custom server URL in advanced settings: point the app at your own self-hosted server

Bridge: Linux / macOS / Windows binaries

  • Local CalDAV/CardDAV daemon on localhost:37358 for Thunderbird, Apple Calendar, GNOME Calendar, Evolution, or any standard PIM client
  • Plain DAV stays inside localhost only; all upstream traffic is end-to-end encrypted Etebase. The bridge is the only thing on your machine that ever sees plaintext

Self-hosting: two-container Docker stack (SilentSuite server + Postgres 16)

  • Runs behind your own reverse proxy; Caddy, nginx, Traefik, and Cloudflare Tunnel examples in the docs
  • The server stores only ciphertext. As operator, you cannot read your users' data; keys never reach the server in any form
  • close-signups.sh to disable registration once your admin account exists; server image pinned by digest per release
  • Manual pg_dump + volume tar backup recipes documented; backups capture ciphertext only

Components

Surface Pinned to
Web commit ab77b62, deployed to app.silentsuite.io
Android APK attached below. Cert SHA-256 8035a4ff1511e2045c579c905d26e93af6009b239e741ef78542ae04e7a7ca79 (CN=SilentSuite, OU=Android, O=SilentSuite)
Bridge Linux / macOS / Windows binaries attached below
Self-host server ghcr.io/silent-suite/silentsuite-server@sha256:6689b5d873cfe5844ca38de74e458fd382ce106916bb5dfa1027786eb6bc4ac8

Not in this beta

  • Native iOS app (on roadmap). Works with the EteSync iOS app on the same Etebase protocol in the meantime
  • Google Play listing (on roadmap). Android ships as a signed sideload-able APK
  • OAuth-based one-click Google / iCloud import (on roadmap). File-based .ics / .vcf only
  • Push notifications (on roadmap)
  • Multi-collections (on roadmap)
  • Notes (on roadmap)

Docs & support