In transit
TLS from the iPhone.
Uploads go to object storage over HTTPS. Large video goes in parts, on presigned URLs — not through a tiny API body.
At rest
Encrypted objects.
Files sit encrypted in S3-compatible storage. AES-256 at rest.
Downloads
Short-lived signed links.
A stolen URL should be useless. Downloads are gated and expire.
Leaving
Disabled, then deleted.
Delete in the app. Sign-in stops at once. Files go on the deletion queue.
We treat the camera roll as something to host carefully, not something to look at. No ads on your holiday. No training a model on your kitchen. Accounts use a magic link in the iPhone app — no password to reuse.
Like any serious host, uploads are scanned for known illegal images of children. That scan exists to protect children, not to browse your life. Details: Safety · Privacy.
Related: Your data · Encryption
$12 / year for 100 GB. $20 / year for 1 TB. Paid in the iPhone app.