Veilbox · Security & Privacy

Why you can trust a
vault you just met

Not because we promise. Because of how it's built — and because every claim on these slides is one you can verify yourself.

1 / 8

The one-sentence design

Your photos are encrypted on your device, before anything is stored — anywhere.

Not "encrypted on our servers." Not "in transit." Before. The unreadable version is the only version that ever exists on disk, in iCloud, or on the wire. There is no moment where your photo travels or rests as a photo.

We can't see your photos. Apple can't see your photos. Someone who steals the bytes has noise.

2 / 8

How the encryption actually works

One chain, no shortcuts

🔢

Your vault codeKnown only to you. It never leaves your device, and it is never uploaded — not even hashed.

↓

⚙️

Stretched 600,000 timesPBKDF2-HMAC-SHA256 · 600k rounds — turns your code into a key, and makes every single guess deliberately expensive.

↓

🗝

Unwraps the master keyA random 256-bit key created on your device. In Maximum Security mode it isn't even stored — it's rebuilt from your code each unlock and erased when you leave.

↓

🔑

Which unwraps a unique key for every photoEvery photo and video sealed with its own random key — AES-256-GCM, tamper-evident. Thumbnails too. The point is containment: a key leaked from one open file opens that file alone — a viewer bug can't cascade into the vault. (And honestly: if the master key above it ever fell, everything falls — which is why your code gets the 600,000-round treatment.)

↓

📦

Sealed envelope — the only thing that ever exists at restOn your device, in your iCloud, on every backup: ciphertext with an opaque ID. Open the app's folder on a Mac and look — that's all there is.

3 / 8

iCloud sync, honestly

What leaves your device — and what never does

Travels to your iCloud (encrypted transport)

Sealed photo envelopes — ciphertext
Opaque record IDs — random UUIDs
Timestamps & sizes — the honest metadata cost of any backup
Album membership & device names — sealed, unreadable to Apple and to us

Never leaves. Ever.

Your vault code
The master key, unwrapped
A single viewable pixel
Album names in the clear
Your location, contacts, or identity

And it goes to your private iCloud database — Veilbox has no servers. There is nothing of ours to breach, and nothing of ours to subpoena.

4 / 8

Tracking

We collect nothing. The label proves it.

✅

App Privacy: Data Not Collected No analytics SDK. No ad networks. No crash reporters phoning home. No account, no email signup, no identifiers. The App Store label says "Data Not Collected" because there is genuinely nothing to declare — Apple audits this claim against the binary.

VEILBOX

Data Not Collected. The app talks to exactly one host: Apple's iCloud, carrying your sealed vault.

THE #1 VAULT APP'S LABEL

"Data Used to Track You" — identifiers and usage data, declared on its own App Store page. A privacy app that tracks you is a contradiction we chose not to ship.

5 / 8

Don't trust — check

Four ways to verify us in five minutes

1

Read the App Store privacy label.Veilbox → scroll to App Privacy. "Data Not Collected" is a regulated claim, not marketing copy.

2

Look at the files.On a Mac: the app's data folder holds only UUID-named encrypted blobs — with the app open or closed. Your photos are simply not there in any readable form.

3

Watch the network.Point any traffic monitor at the app. Every byte goes to Apple's iCloud endpoints. No third-party host, no analytics beacon, nothing else — because there is nothing else.

4

Test the exit door.Export everything, right now, free. A vault that holds your photos hostage doesn't need your trust — it has your data. We keep the door open on purpose.

6 / 8

Honest limits

What we can't protect you from —
and say out loud

Someone who knows your code owns your vault. No cryptography survives a disclosed password. That's why Face ID can be required as well as the code, why a wrong code silently photographs whoever typed it, and why a second "decoy" code opens a harmless second vault.
The person holding your unlocked device can see your screen. No app can stop that. Face-down lock, auto-lock, and instant re-lock on leaving exist to shrink that window.
A forgotten code means your photos are gone. We can't reset it — that's not a support gap, it's the proof no back door exists. The optional recovery key (shown once, kept only by you) is the one rope we can offer.
Backup metadata exists. iCloud can see how much you store and when — never what. If even that is too much, sync stays off and everything stays local.

Any vault that promises more than this is lying to you somewhere. We'd rather be trusted for what's true.

7 / 8

Veilbox

Private, because of the math.
Trustworthy, because you can check.

Encrypted before it's stored. Synced as ciphertext. Tracked never.
And always free to leave — which is why you'd stay.

Privacy Policy Support

8 / 8