Your Privacy
Stays Intact
Keep Photos is a local-only photo & video vault for iPhone. PIN, Face ID, encrypted on device. No accounts. No cloud. No tracking.
Built for how you actually use your phone
Not a file manager pretending to be a vault. A real gallery with real gestures — that happens to be locked down.
Face ID or PIN — your call
Unlock with a glance or type your six-digit PIN. Failed attempts trigger exponential delays — three wrong tries and the wait begins. Forget the PIN and the vault is sealed forever.
Your vault, your folders
Create folders, pick an icon, choose a tint. Images, Favourites, Private — or whatever makes sense to you. Everything stays sorted the way you left it.
A gallery that feels native
Pinch to zoom, swipe to page, drag down to dismiss. Videos play only when you tap — no autoplay, no wasted memory. It works the way Photos.app taught you.
Go further with Pro.
Disguise the app, capture intruders, and hide a decoy vault behind a second PIN.
Break-in Capture
Someone tries to guess your PIN? The front camera silently captures a photo after repeated failed attempts. Check the Intruder Log later to see who, when, and where — no notification, no shutter sound, nothing they'd notice.
Alternate Icons
Swap the app icon to something nobody would think to open. Seven abstract designs — Cipher, Ledger, Horizon, Wayfinder, Mechanism, Kitty, Ghost — that blend into your home screen without drawing attention.
Face-Down Lock
Set the phone face-down on a table and the vault locks itself instantly. No fumbling for the lock button when someone walks over. Pick it back up, enter your PIN, carry on.
Panic PIN
A second PIN that opens a separate, empty-by-default vault. If someone pressures you to unlock, enter the panic PIN — they see a decoy. Your real vault stays sealed behind the real PIN.
The vault, folders, photo viewer, and import are completely free — no trial, no subscription. Pro unlocks the features above.
Privacy isn't a setting.
It's the architecture.
Most apps promise privacy in their policy, then collect data in their code. We skipped the server entirely.
- No sign-up. No email. No password reset. No magic link. Nothing.
- Zero network calls during normal use — not even a ping.
- We can’t see your photos. There’s no “we” — there’s no server.
- Forget your PIN and the vault is sealed forever. That’s the trade-off.
- Exports are AES-GCM encrypted — move them via AirDrop, Files, or any drive.
What we don't do
Encryption rollout is in progress; see release notes for the current build's status.
Common questions
Straight answers — no marketing speak.