Your albums stay between you
Only you and the people you invite can browse them.
The first private social network
End-to-end encryption
A private feed and encrypted albums to share what you want, only with the people you choose.
Notify meFor iPhone · No public profile



Privacy, for real
After an automated safety check, they are end-to-end encrypted on your iPhone before being stored or shared. Our storage receives only encrypted versions; only authorized devices hold the keys needed to read them.
Only you and the people you invite can browse them.
No public profile, no recommendations to strangers and no algorithmic feed.
Choose exactly who joins each album and remove access at any time.
A space for every circle
From the family album to the company retreat, everyone can contribute without exposing your life.

Family album
No more group chats with 10,000 lost photos. Everyone in the family can find every memory in one place.

For two
A gallery for everyday life or every trip, filled together and kept forever.

Wedding, retreat, party
Share a QR code with your guests and all their photos arrive in your private shared album.

Private space
Share your private world with whoever you want, in complete intimacy. You decide who sees what.

Social, without the show
Post, like and comment just as you normally would. Every memory belongs to a private album, never to a public audience.
“Just between us.”
Privacy, without the jargon
Once stored, your memories can only be read on authorized devices.
Before encryption, the JPEG is sent over TLS to our VPS backend and then to OpenAI Moderation for an automated safety check. It is processed in memory, is not saved to our storage, and a service failure blocks publishing.
If accepted, your iPhone encrypts it using AES-256-GCM and the album key. Our servers and R2 then receive only the encrypted container. Every authorized device has its own private key and receives a separate encrypted envelope that lets it open the album key.
Only you and authorized album members who hold the right key. Our servers store encrypted files but never hold album keys in plain text, so they cannot open stored files without a key held on an authorized device.
Each album uses a random content key. Every iPhone also has its own independent private key, which never leaves the device. The album key is wrapped separately for every authorized device.
When a member is removed, a new album key is created for future content and distributed only to the remaining devices. Using a different encrypted photo for every person would multiply copies without better protecting the shared album.
You can authorize a new iPhone from a device that is already connected or use your Only You recovery code. This secret code is generated randomly on your device and should be kept outside the app.
Your iPhone encrypts your album keys with this code. Our servers store only those encrypted copies. On a new phone, you sign in, enter your code, and the keys and photos are decrypted locally.
No. We never store your recovery code in plain text and cannot display, recreate or send it back to you.
We can help you reset access to your account, but we still cannot access photos that are already stored. If you lose every authorized device and your recovery code, the encrypted photos become permanently unrecoverable—for you and for us.
Private album content—photos, videos, captions and comments—is encrypted on the device. Some metadata required to operate the service, such as album titles, members, roles, dates and file sizes, is processed separately.
Coming soon on iPhone
Leave your email and receive an invitation as soon as we open.
One launch email. No newsletter.