Plenty of vault apps say “military-grade” without saying what they actually do. Here’s exactly how Tuckaway is designed, in plain English. We’ll keep this page updated as the app is built and reviewed.
What’s encrypted
Everything in the vault: photos, videos, documents, their thumbnails, and details such as names, tags and dates. Encryption uses AES-256-GCM through Apple’s CryptoKit, a standard, well-tested method built into iOS.
Where the key lives
The key that unlocks your vault is kept in the iPhone’s secure Keychain and is released only after Face ID or your Tuckaway passcode. We never see it and we have no copy.
No servers, no account
Tuckaway has no servers of its own and doesn’t ask you to sign up. The Privacy Sweep runs on your phone. If you turn on backup, only encrypted data goes to your own private iCloud storage, which we can’t read.
Your recovery key
When you set up Tuckaway, you’re shown a recovery key once. Keep it somewhere safe, such as written on paper. If you forget your passcode and lose your phone, it’s the only way back in. Because we hold no copy, we can’t reset it for you.
What Tuckaway can’t protect
- Copies of a photo that already exist elsewhere, such as in a chat, an email or a shared album. The cleanup checklist helps you find these.
- Someone who knows your Tuckaway passcode, or who can unlock it with your face while you’re asleep. Use a passcode only you know if that matters to you.
- A phone that’s already been compromised by malware.
Data we collect
Inside the app: none by default. This website uses privacy-friendly analytics to count visits. See the privacy policy.