Secure hosted email · EU-hosted

Private, encrypted email
that actually gets delivered.

Reliable, encrypted email for families and small teams. Use your @thelemail.com address, or bring a domain you own — either way, we handle the delivery.

No lock-in — export anytime EU data residency Zero-access at rest
app.thelemail.com
The Thelemail web app — inbox with labels, an open conversation, and domain notifications
Why this exists

Owning your email shouldn't mean babysitting a mail server.

Three bad options, if you care about owning your correspondence. We built Thelemail to avoid all three.

Self-hosting email is a losing battle

You can run the server. The hard part is getting Gmail to accept its mail — IP reputation, blocklists, DKIM alignment, and maintenance that never ends.

Big providers read your mail

The easy alternative is a provider that scans your inbox to sell ads or train models. Convenient — until you read what you agreed to.

Suites you didn't want, per seat

Or you pay per seat for a productivity suite you never asked for, just to get the one thing you did want: an inbox on your domain.

What you get

Everything email should be — and nothing it shouldn't.

Every claim below maps to something that's live today. Where a feature has an honest limit, we say so — read the threat model for the full picture.

End-to-end encryption between accounts

Live

Mail sent between Thelemail accounts is end-to-end encrypted. The server stores only ciphertext it cannot read.

E2E · internal

Zero-access encryption at rest

Live

Your mailbox is encrypted with a key derived from your password. We can't read your stored mail — by design.

At rest

Reliable delivery

Live

Managed sending infrastructure and monitored reputation so your mail reaches inboxes. The hard part of running email, handled for you.

Managed sending

Unlimited aliases

Live

A fresh address for every service you sign up for, all landing in the mailbox you choose.

AliasesRouting

Encrypted to outsiders, when possible

Live

When a recipient publishes an encryption key, mail to them is end-to-end encrypted automatically. Otherwise it's sent normally.

WKDOpenPGP

Use your own domain

Live

Optional: connect a domain you own and put your whole family or team on it. Prefer simple? Your @thelemail.com address works out of the box.

MXSPFDKIMDMARC
How it works

Sign up, and start sending encrypted mail.

Your mailbox works on @thelemail.com from the moment you sign up — no domain, no DNS, nothing to configure. Want it on a domain you own? That's an optional step, not a requirement.

01

Sign up

Create your account. Nothing to host, nothing to configure.

02

Get your @thelemail.com mailbox

A real, private mailbox — encrypted at rest and reliably delivered.

03

Send and receive encrypted mail

End-to-end between accounts, and encrypted to outsiders who publish a key.

04

Optional — connect your own domain

Bring a domain you own and put your whole family or team on it.

Optional · bring your own domain
MX   10  mail.thelemail.com.  
TXT  @  "v=spf1 include:thelemail.com ~all" 
TXT  _dmarc  "v=DMARC1; p=reject;" 
TXT  dkim._domainkey  "v=DKIM1; …" 
Who it's for

Built for people who want to own their email.

Two audiences, one product. Whether you value privacy for your family or sovereignty for your stack, the mechanism is the same.

Families

Real, private addresses for everyone at home — on @thelemail.com, or a domain you own if you'd rather. Shared aliases for the things you run together, and mail nobody mines for ads.

  • A private mailbox for everyone, no setup required
  • Shared aliases for bills, schools, and subscriptions
  • Calm administration a non-technical partner can run

Homelabbers & self-hosters

Email that fits your values without the operational pain. Bring your own domain, verify our claims against a published threat model, and keep your exit open. You could run a mail server — you've read enough threads to know you don't want to fight deliverability forever.

  • Bring your own domain; export everything and leave anytime
  • Standard formats and protocols — no proprietary trap on the way out
  • Client source is coming; the server stays closed, and there's no self-hosted option
What we won't claim

The honest version of every promise.

Our audience verifies claims and punishes overstatement. So here is exactly where the line is — the marketing line we won't cross, and the true one we will.

Not this
"All your email is end-to-end encrypted."
The honest version
End-to-end encrypted between accounts, and to outsiders who publish a key. Encrypted at rest, always.
Not this
"We can never see anything."
The honest version
Envelope metadata — who emails whom, and when — is visible. That's how email works. We don't pretend otherwise.
Not this
"Military-grade. Unbreakable. 100% private."
The honest version
Standard, well-understood encryption, described plainly. No superlatives we can't stand behind.
Not this
"Trusted by millions · 99.99% uptime."
The honest version
No invented numbers. When we publish uptime or deliverability, it'll be measured — and on the status page.

Every limit, in full, on the threat model page.

Privacy & trust

Trustworthy because verifiable.

We charge money so we don't have to monetize you. Here's the model, stated precisely — and you can check every part of it.

EU data residency

Your mail is stored and processed in the EU.

No ads. No training.

We never scan your mail for advertising, and never use it to train AI.

Zero-access at rest

Stored mail is encrypted with a key derived from your password.

Open-source apps — coming

Our client code isn't public yet. We're cleaning it up before release, and we won't call it open until you can actually read it. When it ships, you'll be able to check exactly what runs on your device and what gets encrypted before it leaves. The server stays closed and there's no self-hosted option — we run it, you verify it.

Pricing

Pay for hosting. Never with your data.

Three products — Personal, Family, and Business — each in two sizes. Every plan gets the same encryption; you're choosing capacity, not safety.

Personal
A private, encrypted mailbox of your own.
from €24 / year
Two plans: Personal · Personal Plus
  • 1 mailbox, 15–50 GB
  • 1–3 custom domains
  • Unlimited aliases
See Personal plans
Most chosen
Family
Everything your household needs, one yearly price.
from €60 / year flat
Two plans: Family · Family Plus
  • Up to 6 mailboxes, 10–30 GB each
  • 2–4 custom domains
  • Flat price — never per seat
See Family plans
Business
For studios, businesses, and small teams.
from €54 / mailbox · year
Two plans: Team · Business
  • From 3 mailboxes, 25–100 GB each
  • Roles, audit logs & priority support
  • Prorated when people join or leave
See Business plans

Billed annually. Personal and Family are flat prices; Business is per mailbox, prorated mid-year. No per-seat monthly games. Prices exclude VAT, added at checkout for your country. Founding members keep their signup price for as long as the subscription stays active. See full pricing →

Trust

Verifiable, not just claimed.

Every promise on this site maps to a mechanism that exists. The threat model spells out exactly what's encrypted, what isn't, and what a server compromise would and wouldn't expose — in plain words.