AllPix

Photos, videos, thumbnails and the facts about them (when, where, what file) are encrypted on your phone before they are uploaded. AllPix and its hosting providers store ciphertext and random ids, so they cannot see your library.

Your encryption key is created on your phone and never leaves it in plain form.

You choose how to recover your library on a new phone:

• Google recovery (on by default). Works with your Google account. If someone takes over that account they could restore your library, so use two-step verification.
• A 24-word recovery key. Shown when you sign up. With "Recovery key only" mode, Google recovery is off, and losing both the phone and the words means the library cannot be recovered by anyone.

Export your whole library whenever you want: original photos and videos with their real file names, dates and places, plus a metadata file, written to a folder you choose.

Delete your account and the keys that open your photos are destroyed first, then everything is removed from storage. How deletion works.

On a paid plan you can import from Google Photos without a computer: share your Google Takeout folder with AllPix and the import runs on a server while your phone shows progress.

An import is the one moment a server sees your photos in the clear, because it has to encrypt them. The key for that import is held in memory only and wiped when the job ends.

A free plan with 2 GB, and paid plans from 100 GB up to 2 TB, bought through Google Play. Prices appear in the app in your own currency.

When can I use it?

AllPix is in development. The details on this page describe how it is being built.

Where can I read the privacy details?

In the privacy policy.

Questions or ideas?

Write to support@kedigital.dev.