Skip to content
Krypsis
EN PL

How Krypsis protects your data

No marketing here — just how it actually works. If you read cryptography for a living, this should make sense. If you don’t, it should still be honest and clear.

  1. What we encrypt

    Everything in the vault: photos, videos, documents, their thumbnails, and their metadata. Each file is encrypted with its own random key, so no two files share a secret.

  2. The cipher

    ChaCha20-Poly1305, via Apple’s CryptoKit. It’s the same authenticated-encryption construction used by modern TLS and by Apple’s own iCloud Keychain — a careful, mainstream choice, not something we invented.

  3. Where the key comes from

    Your encryption key is derived from your PIN using PBKDF2 with 100,000 iterations. We don’t store your PIN, and we never see it. It exists only on your device, only while you’re using the app.

  4. What we cannot do

    We cannot reset your PIN. There is no master key, no recovery code, and no backdoor — not for us, not for anyone. If you forget your PIN and have no backup, the data is gone. That is the cost of real encryption, and we won’t pretend otherwise.

  5. What leaves your device

    Two things, and only when you ask for them. Your App Store purchase transaction ID, so the app knows what you bought. And — only if you switch iCloud Sync on — your already-encrypted vault content, which goes to your own iCloud account, not to us. There is no analytics SDK and no crash-reporting SDK in the app, so nothing is ever sent in the background. Both are described in full in our Privacy Policy .

  6. How sync stays end-to-end encrypted

    Files are uploaded exactly as they are stored — already encrypted, never decrypted in transit. Filenames, album names and dates are encrypted inside each record, and album membership is stored under a keyed hash, so even the relationships between items are invisible. A copy of your vault key, still locked by your PIN, travels via iCloud Keychain, which Apple protects with its own end-to-end encryption. Apple stores the ciphertext and cannot read it; neither can we.

  7. The threat model

    Krypsis protects against someone who has your unlocked phone but does not know your PIN. It does not protect against an attacker who has both. There is no silent capture, no remote wipe, and no panic button — those are different products, and pretending otherwise would be dishonest.

  8. Open-source roadmap

    We plan to open-source the cryptographic core after launch. For now the binary is what you install, and the documentation is the audit trail. We won’t call Krypsis “open source” or “audited” until those things are genuinely true.