AES-GCM on device
Photos at rest use AES-GCM. Encryption runs on your iPhone. Photo bytes are not sent over the network.
Private photo vault
Private photos.
On this phone.
A photo vault that lives only on your iPhone. Optional Disguise mode opens as weather. No account. No cloud. If you forget your passcode, the photos cannot be opened.
On-device vault. Six-digit passcode.
Features
Built to keep photos on the phone
Choose photos from your library. Brume seals copies in an on-device vault using AES-GCM. Nothing is uploaded. There is no account, no cloud sync, and no analytics.
No account. No cloud.
Brume does not create an account and does not run a Brume server for your photos. Everything stays on this phone.
Passcode, no backdoor
Unlock with a six-digit passcode. There is no passcode recovery. Write it down somewhere safe.
Optional Disguise mode
Off by default. Brume can open as a working weather app. Type your passcode into search to open the vault. A wrong six-digit entry looks like an empty city search.
Optional original cleanup
After import, you can ask Brume to remove the Photos library originals. That step is optional. iOS keeps removed items in Recently Deleted for 30 days.
Free, including Disguise
Brume is free. Disguise mode is included. There is no in-app purchase.
Privacy promise
What leaves the phone, and what does not
Brume is designed so your sealed photos never leave the device. Weather is the only optional network call.
- No name, email, or phone number collected
- No analytics or advertising identifiers
- No tracking across apps or websites
- No crash reporter that sends photo contents
- Weather city search uses Open-Meteo only when you use weather or Disguise mode
- Brume never requests Location, Camera, or Microphone
FAQ
Questions worth asking
What if I forget my passcode?
There is no reset. Photos sealed in Brume cannot be opened without the passcode. The only way to start over is Settings, Erase Brume, which deletes every photo in the vault.
Are there backups in the cloud?
Brume does not sync your vault to a Brume cloud. Photos stay in the app's private storage on your iPhone. There is no Brume account to restore from.
What is Disguise mode?
Disguise mode is optional and off by default. Turn it on in Settings, pick a city, and Brume opens as a working weather app. Search for a city as usual. Type the same six-digit passcode into search to open the vault.
How much does Brume cost?
Brume is free. Disguise mode is included. There is no in-app purchase.
Coming to the App Store
Brume is finishing release prep. The badge above will become the real App Store link when the listing goes live.
App Store Coming soon