Photo Enclave
Your private media vault. Encrypted on-device, fully offline, a one-time purchase with free lifetime updates — no extra subscription. Export password-protected files in a private format that works on both Android and iPhone.
Your private media vault. Encrypted on-device, fully offline, a one-time purchase with free lifetime updates — no extra subscription. Export password-protected files in a private format that works on both Android and iPhone.
No network features at all — the Android version doesn’t even request the Internet permission.
Export password-protected .spl files. Only someone with the key can open them, on iPhone or Android.
Shoot straight into the vault. Nothing lands in the system gallery.
Swap the icon for a calculator or notebook. Bind albums to separate passphrases so they stay invisible until that passphrase is entered.
Many people never think about these moments — until they happen.
Every photo you store in iCloud or Google Photos, every intimate image you send through a messaging app, passes through servers you don't control — and can be accessed by people you've never met.
In 2014, a targeted phishing campaign against iCloud accounts exposed the private photos of nearly 500 celebrities in what became known as "The Fappening." That same year, a vulnerability in a third-party Snapchat client led to roughly 200,000 private photos and videos being leaked and indexed online. These weren't edge cases — they were predictable outcomes of centralised storage.
Even without a breach, cloud providers routinely scan uploaded content. The same applies to messaging platforms. Your banking screenshots, intimate photos with a partner, private selfies you'd never want shared — none of these are truly private once they leave your device.
The threat isn't only remote. Many apps request access to your photo library — and once granted, they can read everything in it. An app with questionable ethics can silently harvest your photos and upload them to its own servers without you ever knowing. The system photo library was never designed to be a private space.
Every line of Photo Enclave’s own code is written by us, and the app contains no advertising, analytics, or tracking SDKs. On iOS it uses nothing but Apple’s system frameworks; on Android it also uses Google’s standard AndroidX libraries and the Google Play in-app review library, which simply asks the Play Store app to show its rating dialog. That is how we can be sure the app contains no network feature — the Android version does not even request the Internet permission (see How to check). Inspect it with any traffic monitor: you will not see the app send data — except for tiny, OS-controlled requests toward Apple’s or Google’s own servers, which we cannot prevent.
This technical self-constraint means the developers of Photo Enclave cannot obtain your data. Media in the app sandbox is encrypted in a private format: even if the operating system can read bytes on disk, it cannot reconstruct the original photos or videos. The same holds when you export for backup or sharing. We, as the developers who know the format, still cannot obtain your files from you; parties that can hold the exported file — the OS, a cloud drive, and so on — cannot decode a password-protected private format, and therefore cannot see the original media either.
Whether you keep and view your collection day to day, or back it up and share it, no party can see your private media without your permission.
A colleague needs to make a quick call. A family member picks up your phone to check something. A friend idly scrolls through your gallery while you're distracted. These are ordinary moments — and in any one of them, something private can surface.
The default Camera Roll offers no barrier. Even if you've moved sensitive photos into a separate album, a casual scroll can still land on them.
Photo Enclave can be locked with a personal pattern or biometric (Face ID / Touch ID). Every entry requires authentication — no exceptions. Your vault stays closed until you open it, and nothing inside is ever visible from outside.
Even a well-secured app raises questions if others spot it on your home screen. The name alone — "Private Vault," "Secret Photos" — can spark uncomfortable conversations or unwanted suspicion. Sometimes the safest approach is to not have the conversation at all.
Photo Enclave lets you replace its icon and name with a convincing facade: a calculator, a notebook, a darkroom tool. When someone taps it, they see a fully functional decoy interface — nothing unusual, nothing to investigate. The vault is invisible because it appears to be something entirely ordinary.
In extreme circumstances — a controlling partner, a coercive authority check, a social situation where refusal isn't safe — you might be compelled to unlock the app and show what's inside. At that point, every layer of protection described above can be bypassed by simply handing over the phone.
Photo Enclave includes a feature called VIP Space. You can bind individual albums to a separate passphrase — one that has nothing to do with the main app lock. Albums inside a VIP Space are completely invisible unless that specific passphrase is entered. They don't appear in any list; their existence cannot be inferred from the interface.
You can create multiple independent VIP Spaces. For example: 50 ordinary photos sit in the main gallery, always visible. 25 more are hidden behind passphrase AAAA. Another 25 — your most sensitive content — are hidden behind passphrase BBBB. Under pressure, you reveal AAAA and show those 25 photos. The person compelling you sees a plausible result and has no way to know whether BBBB exists, or whether there are any more spaces at all.