◈
Vault content is encrypted
Photos, videos, thumbnails, Moment titles, notes and vault metadata are protected.
Security by design
Your private moments stay yours.
PrivateMoment protects photos, videos, notes and metadata locally on your iPhone. No account. No PrivateMoment cloud storing your vault. No ads. Limited product analytics.
Local encryptionNo accountNo server storageNo ad trackingUser-controlled backup
Encryption
Real encryption, not just hidden files.
Sensitive vault content is protected with authenticated AES-GCM encryption rather than being stored as ordinary readable media.
⌁
Chunked media encryption
Large media is encrypted in bounded chunks instead of one giant plaintext object.
#
PIN protects the vault key
Your 6-digit PIN is not stored as readable text. Argon2id derives a Key Encryption Key that protects the randomly generated Vault Master Key.
◎
Face ID stays device-local
Face ID provides convenient local unlocking. Your PIN remains the portable recovery credential for encrypted backups.
6-digit PINNever stored as plaintext
→
Argon2idMemory-hard key derivation
→
KEKKey Encryption Key
→
Vault Master KeyRandom 256-bit key protecting vault data
Defense in depth
Encryption plus iOS protections.
▣
Complete File Protection
Encrypted media, thumbnails and metadata are additionally protected using iOS Complete File Protection.
⌂
Private app storage
Vault files live inside protected Application Support storage rather than a public Documents folder.
◐
Background privacy
Sensitive content is covered when the app leaves the foreground, with automatic locking according to your settings.
⌫
Temporary plaintext cleanup
System operations that require decrypted media use protected temporary storage that is cleaned after use, on lock, and on later startup cleanup.
◉
Private camera
Photos and videos captured inside PrivateMoment go directly into the vault rather than first being written to Apple Photos.
✦
Metadata is sensitive too
Thumbnails, Moment titles, notes and metadata are protected alongside media.
Encrypted backup
Your backup. Your storage. Your PIN.
PrivateMoment does not run a cloud backup service. You create an encrypted backup and decide where to keep it.
Portable without depending on the old device
A backup contains a portable, PIN-protected key envelope and encrypted vault data. Restoring does not require the original device's Face ID or Keychain state.
✓Save with Files, iCloud Drive, external storage or another file provider
✓Backup encryption uses an independent random salt
✓Restore on another device using the backup file and correct PIN
✓Restore is validated before replacing the current vault
Analytics scope
Firebase Analytics helps improve the app — it does not inspect your vault.
We use Firebase Analytics for product quality and feature-usage insights. Vault photos, videos, Moment text, PINs, and encryption keys are not sent as analytics events. IDFA is not used, AdSupport is not linked, IDFV collection is disabled, ads are not served, and Google Signals / advertising features are not enabled.
What this architecture means
Some things are intentionally impossible for us.
✓We cannot remotely view the contents of your vault.
✓We cannot recover an encrypted backup without its correct PIN.
✓We cannot restore private content from a PrivateMoment server.
✓We cannot see the photos, videos, Moments or notes you store.
Security is a process. No software can truthfully promise that compromise is impossible. PrivateMoment focuses on reducing exposure, using established cryptographic primitives, minimizing plaintext data, and using iOS platform security where appropriate. Last updated October 5, 2026.