Brume

Privacy policy

Last updated: 9 November 2026

Brume is a photo vault that runs on your iPhone. It does not create an account and it does not run a Brume server for your photos.

What Brume stores on the device

• Photos you import, stored as encrypted files in the app's private storage.
• A vault header in the iOS Keychain (via the system Keychain). That header holds wrapped keys, not your passcode.
• Optional settings: temperature units, whether Disguise mode is on, a searched city for weather, and whether to remove Photos originals after import.
• These stay on the device. Brume does not upload them.

What Brume does not collect

• No name, email, or phone number.
• No analytics or advertising identifiers.
• No tracking. Brume does not track you across apps or websites.
• No crash reporter that sends photo contents.

Photos

Brume reads photos you pick so it can seal copies in the vault. If you ask it to remove originals, it updates the Photos library. Photo bytes are not sent over the network.

Weather

If you use weather or Disguise mode, Brume sends the city you searched (name and coordinates) to Open-Meteo to fetch a forecast. Open-Meteo may see your IP address under its own terms: https://open-meteo.com/en/terms

Brume does not request Location Services. There is no GPS.

Encryption

Photos at rest use AES-GCM. Your passcode is never stored. There is no passcode recovery. Forgetting the passcode means the photos in Brume cannot be opened. Erase Brume in Settings deletes the local vault.

Children

Brume is not directed at children and does not collect personal information.

Contact

For privacy questions, use the support page listed on the Brume App Store page.