Tulipix is a private desktop app for your photos, films, music, podcasts, books, recipes, receipts and money. Fourteen sections, each with its own SQLite file on your disk. No accounts, no telemetry and no webview.
Each section keeps its own database and its own look, and they talk to each other. Journal gathers your day from Photos, Music, Finances, Videos and Books. Kitchen logs the shop in Finances. Papers takes scans from your phone through Transfer. Hide any section you do not need.
Pick a design language in Settings and every panel, button and player in the app is restyled. Each one also works in light, dark and extra-dark. Free includes Standard; Lite and Pro include all four.
Models are downloaded when you ask for them in Settings › AI, each checked against a SHA-256 hash. After that they run locally, with no upload and no queue.
Search photos by describing them.
Finds faces and groups people.
Detects objects to tag and filter by.
Heal, and select a subject with one click.
Upscales small or old photos.
Colours black-and-white photos.
Neural read-aloud for books and feeds.
Transcribes voice notes and videos.
There is no Tulipix server to send anything to. The network is used only for things you asked for, such as a poster lookup, a stream or a feed refresh. Everything else happens on your machine.
Turn on encryption in Settings › Security. It covers what Tulipix knows about your files. The files themselves are never touched.
SQLCipherA PIN, your fingerprint or a security key. The lock screen shows a slideshow and what is playing.
fprintd · FIDOIDs and documents sealed behind the app PIN. It locks again after five minutes.
ChaCha20-Poly1305Every bundled tool and AI model is checked against a pinned SHA-256 hash before it runs.
binaries.toml · ai-models.tomlExtensions run in WASM or Lua and can do only what their capability allows. Anything not listed is denied.
wasmtime · mluaA crash writes a report to your disk. Report opens a pre-filled issue in your browser for you to read first.
<data>/crashes/The window, the sections and the players are Flutter. The scanners, databases, metadata and media work are in Rust, in eighteen crates. flutter_rust_bridge generates the code that connects them.
Shell, sidebar, design tokens, the four design languages, one page and controller per section, libmpv playback through media_kit.
One file per section, api/<section>.rs: its state, its commands, and an event stream back to Dart.
PhotosCmd.albumNewSmart(…).Every plan runs the whole app on your own computer. Paying unlocks more lookups, the AI features and the privacy extras. There is no subscription and no account.
The whole app, for your own library.
More lookups, every look, and privacy extras.
Everything in Free, plus
Everything, including the on-device AI.
Everything in Lite, plus
| Compare plans | Free | Lite | Pro |
|---|
Yes. You pay once and the licence never expires. Lite includes every 1.x update. Pro includes every future version.
No. You get a licence key, not an account, and your library stays in local databases on your computer.
Yes. Lite covers 2 computers at a time and Pro covers 5. Moving to a new one frees the old slot.
No. This page uses a demo checkout. No payment is taken, nothing is sent anywhere, and the licence key it shows is an example.