Photo Vault & App Lock: Kept

Kept is an encrypted vault for your photos and files, plus an app lock with break-in alerts.

A VAULT BUILT NOT TO LOSE YOUR PHOTOS
- Real encryption. Every file is encrypted on your phone with AES-256-GCM (Google Tink) before it is stored. Your PIN is stretched with Argon2id and tied to this device, so a copy of your vault files cannot be brute-forced elsewhere.
- Zero restricted permissions. No access to your photo library or your storage, no permission to see every installed app, no accessibility service, no device-admin rights. Files come only from Android's pickers, the share sheet or Kept's own camera. Originals are removed only after you confirm.
- Backup you can verify. You choose a folder (phone, SD card, or one synced by any cloud app); Kept keeps an encrypted copy of your vault there and shows when it was last verified. With that folder off the phone, a reset or a lost phone does not cost you the vault.
- A recovery key opens your backup on a new phone, or the vault if you forget your PIN. We never see it, so we cannot recover your files for you.

APP LOCK WITH BREAK-IN ALERTS
- Lock any app on your home screen (gallery, chat apps, Settings, Play Store) behind your PIN, pattern, password or fingerprint. Your app list stays on your phone.
- Re-lock immediately, on screen off, or after a few minutes.
- After a number of wrong attempts you choose (three by default), Kept can take a front-camera picture and record the time, the PIN tried, and the app targeted. Pictures are encrypted into your vault and never leave your phone.

MORE
- PIN, pattern or password, plus fingerprint (or face unlock Android rates as strong); auto-lock; screenshots and recent-apps previews blocked on every vault screen.
- Decoy vault: a second PIN opens a separate vault.
- Calculator disguise: Kept can appear as a calculator on your home screen. This app is a photo vault. The calculator works; typing your PIN then = opens the vault. Kept still shows as "Kept" in Settings and on Google Play; only the home-screen icon changes.
- Any file, not just photos (video, audio, documents), a camera that saves straight into the vault, albums, a media player, 7-day trash, export.

WHAT KEPT DOES NOT DO
- No cloud, no account, no upload. We have no servers.
- No reading your gallery. Kept only sees the files you hand it.
- No ads on lock screens or over other apps, ever. Free users see ads inside the vault; Pro removes them.
- No security buzzwords. What is and is not protected:

ENCRYPTED: every file in the vault and its thumbnail, the vault database (album names, file names, dates, break-in log), and every copy in your backup folder. The key is never stored in the clear and is wiped from memory when the vault locks.

NOT HIDDEN: that Kept is installed (it appears in Settings and on Google Play even with the calculator icon), the number and size of files in your backup folder, the number of digits in your PIN and which vault is the decoy (both sit unencrypted in the backup key file), the "App Lock is on" notification, and a locked app's preview in recent apps (opening it still shows the lock screen).

FREE AND PRO
Free: 100 vault items, 2 albums, 2 locked apps, last break-in only, manual backup export, ads.
Pro: unlimited items, albums and locked apps, full break-in history, decoy vault, automatic backup, every accent color, no ads. Monthly or yearly, free trial on the yearly plan; prices shown in Google Play before you subscribe.

PERMISSIONS
- Usage access and Display over other apps: App Lock only, to notice when a locked app opens and show the lock screen over it. Kept reads which app is in front, not what is inside it, and stores nothing.
- Camera: break-in pictures and Kept's own camera (photos go straight into the vault).
- Notifications: import progress, App Lock, backup reminders.
- Network: subscriptions, ads (free tier), anonymous usage statistics (switch off in Settings) and crash reports.