Security

On your iPhone

• Each safe has a random 256-bit master key.
• Photos, videos, files, thumbnails, diary entries, folder names and the canvas are encrypted with AES-256-GCM before they're written to storage, and protected by iOS Data Protection.
• Your pattern is stretched with PBKDF2-HMAC-SHA256, 600,000 rounds, into a key that unwraps the master key. The pattern itself is never stored.
• Your recovery phrase unwraps the same master key through a separate slot.

Sharing with your partner

• The safe's master key is wrapped with a secret that exists only inside the invite code. Our server never receives it.
• Every record and file is encrypted on the phone before upload. The server stores ciphertext, pair codes, anonymous user IDs and timestamps only.
• Database rules allow only the two members of a pair to read or write their data.

What we can't do

We can't open your safe, reset your pattern or recover a safe if you lose both your pattern and recovery phrase.