Built to keep your memories safe.

Every connection uses TLS 1.3. Uploads use multipart S3 presigned URLs that expire 15 minutes after we generate them, so a stolen link is useless within a quarter-hour.

Thumbnails are served over signed URLs that expire after 24 hours, and rotated automatically on every page load.

Photos live in S3-compatible object storage under a per-user key prefix ("photos/{user_id}/{photo_id}/..."). Cross-user reads are blocked at the database layer — every queryset is filtered by the requesting user.

Database storage is hosted on managed Postgres with at-rest encryption enabled by the provider.

Authentication uses short-lived JWTs with refresh tokens. Each device registers as its own session, which you can revoke independently from settings.

Face recognition is opt-in per user. If you don't enable it, no face embeddings are ever computed — your photos are still backed up and searchable for everything else.