Self-hosted YNAB alternative: own your budget with Actual

A budgeting app holds the most sensitive dataset you have. Not your photos, not your email -- your transactions: every merchant, every paycheck, every medical bill and late-night purchase, stamped with a date and an amount. The standard deal is to hand that ledger to a SaaS company on a subscription that outlives your patience, and the incumbent has not made the deal sweeter with time -- YNAB's price has climbed repeatedly, and each increase arrives with the same quiet leverage: your years of budget history live inside the product you would be leaving.

Actual is the version you own. The same envelope method, the same multi-device sync, the same bank imports -- with the ledger on your own hardware and the sync server on infrastructure you control.

What Actual is

Actual -- Actual Budget, in full -- is an open-source envelope budgeting app. It began life as a paid product built by a single developer, was open-sourced, and is now maintained by an active community. That is about the best origin story self-hosted software can have: designed with the finish of a commercial product, owned like a public good, and no longer dependent on any one company's runway.

The architecture is the genuinely unusual part. Actual is local-first: your budget file lives on your device, and every edit happens instantly against that local copy -- no spinner between you and your own ledger. The server you host does not compute your budget and cannot read it. It exists to sync changes between your devices, and those changes are end-to-end encrypted before they leave your machine. Your laptop and your phone agree about the ledger; the server in the middle carries ciphertext and nothing else.

The features that actually matter

• Envelope budgeting. Money you actually have gets assigned to categories before you spend it, and overspending in one envelope has to come out of another. It is the method that made YNAB's reputation -- a discipline, not a dashboard -- available here without a subscription attached to your own ledger.
• Local-first, end-to-end encrypted sync. The ledger lives on your device and syncs through your own server as encrypted changes. Even the machine doing the syncing -- your machine -- never holds a readable copy of a transaction in transit.
• Multi-device sync. Enter a transaction on your phone at the checkout and it is on your laptop when you sit down to reconcile. The sync server resolves changes from every device against the same history, so nobody wins or loses an edit.
• Bank import that matches how banks actually behave. Every bank can export a file; Actual imports OFX, QFX and CSV, with rules and matching so repeat payees land in the right category on arrival. Optional bank-sync integrations exist where they are supported, but the file path works everywhere, for every institution, indefinitely.
• Reports. Net worth, cash flow, spending by category over time -- the questions you actually ask a budget, answered from data that never left your custody.
• Schedules. Rent, salary, insurance, the subscriptions you have not cancelled yet -- recurring transactions are modeled ahead of time, so the budget reflects the month you are about to have rather than only the one you already had.

The clearest case for self-hosting

Some software you self-host to save money. A budget app you self-host because the data should never have lived in a SaaS in the first place. A complete transaction history is a behavioral profile with your name on it: where you sleep, what you earn, what you are treated for, who you send money to, and when. There is no version of "we take privacy seriously" that improves on the data simply not being there.

Actual makes the strong version of that claim, not the marketing version. It runs entirely without a third party seeing a single transaction -- not because a policy promises restraint, but because the architecture leaves nothing to restrain. The server holds encrypted blobs it cannot open. There is no analytics pipeline, no aggregate "spending insights" product built on your categories, no acquisition scenario in which your ledger becomes an asset on someone's balance sheet. The failure modes that make finance apps a recurring headline are not mitigated here; they are absent.

The subscription angle is the same argument in a different key. A budget is a decades-long project -- the value compounds as the history deepens. Renting the tool that holds it means re-justifying the price every year against the cost of walking away from your own past. Owning the tool ends that negotiation permanently.

Running it on Caliber Node

The Actual sync server is a one-click deploy from the Caliber Node catalog. It comes up ready for your first device to connect, and from then on it does the one job the architecture gives it: moving encrypted changes between your devices, on hardware that answers to you.

• One subscription, not per-app pricing. Actual runs inside a capacity subscription alongside whatever else you host -- a password manager's server, an RSS reader, a wiki. Nothing is billed per app; a sync server this light barely dents the envelope.
• HTTPS and your domain, automatic. The server comes up behind Cloudflare with HTTPS already issued, so every device syncs over an encrypted channel to an address you name -- no certificate ritual, no port forwarding, no dynamic DNS.
• Your data on your volume. The server's storage lives on a volume you can reach over SFTP, with snapshots for a restore point before anything you might regret. Your budget file itself stays on your devices -- which is the point -- but the sync history backing it is yours to copy at will.
• Email, if an app needs it. For apps that send sign-in links or notifications, transactional email works out of the box across the platform -- nothing to configure when you add the next app to the same subscription.

Budgeting apps ask for more trust than almost anything else you run, and the hosted ones answer with a privacy policy. Actual answers with math. Deploy the sync server, point your devices at it, and every transaction you record from now on is a fact about your life that stays entirely inside it.