No account. No recovery. No us.
An encrypted vault for iPhone. No cloud, no account, no analytics. If you lose your six words, nobody can get them back, including us: a vault with no key but yours.
Coming soon to the App Store
Notify me when it’s on the App StoreOne email at launch. Nothing else, ever.
01 · Sealed
Sealed on your phone, the moment you add them.
Every photo and file is encrypted on your iPhone as you add it. What is stored is noise to anyone without your six words, including us.
02 · Locked
Six words open it. Nothing else does.
The app picks six words at random for you. Not your passcode, not your Apple Account, not a reset link. Nobody can recover them for you.
03 · Pieces
Give pieces to people you trust.
Lose your six words? Any 2 of your 3 people bring them back. You hand each one a piece in person, and one piece alone shows nothing. Or seal files away so that even you cannot open them alone.
04 · Quiet
Then it goes quiet.
No account. No cloud. No analytics. The app has no network permission, so nothing leaves your phone and nothing reports back.
What it cannot do.
- The iOS photo picker stages a copy.
- There is no recovery.
- An open vault is open.
- A compromised phone is out of scope.
Compare
Most people already have a vault: the Hidden album.
Here is what it does not do, next to the other ways people keep photos private.
| Row | Oorvel | Hidden album | Advanced Data Protection | Keepsafe |
|---|---|---|---|---|
| Key derivation | Argon2id, 256 MiB per guess | Tied to your device passcode | Keys held by your trusted devices; recovered with a device passcode, a recovery contact or a recovery key | Not published |
| Cloud | None. No server exists. | Syncs with iCloud Photos when it is on | Photos stored in iCloud; Shared Albums are not end-to-end encrypted | Private Cloud sync with Premium |
| Account | None | Your Apple Account | Your Apple Account | Its privacy policy describes collecting name, email, username and password when you create an account |
| Analytics and tracking | None. Privacy label: Data Not Collected | Governed by Apple's privacy policy | Governed by Apple's privacy policy | App Store label lists Usage Data, including data used to track you |
| Open source | Yes, GPL-3.0 | No | No | No |
| Price | One-time purchase | Free, built into iOS | Free with iCloud; 5 GB included, more needs an iCloud+ plan | Free with limits; Premium $9.99 a month or $23.99 a year (US App Store) |
Cut from the full comparisons with the Hidden album, Advanced Data Protection and Keepsafe, where every claim links to its source.
-
256 MiB
Memory Argon2id demands for every single guess, so cheap hardware cannot hurry it.
The full security model → -
Move it phone to phone. Nothing in between.
Sealed export and phone-to-phone transfer, checked on the new phone before you wipe the old one.
Moving to a new iPhone → -
GPL-3.0
The app and this site are open source. Read the code, build it, compare the hash.
How to verify a build →
I'm Mani. I make Oorvel at Dolphy Technology, and I built it so there would be one place on a phone that answers to nobody, me included.
About Oorvel →