Media Den - Private Vault

Your photos are personal. Media Den keeps them that way — encrypting everything with AES-256 before it ever reaches your cloud. No ads. No tracking. No backdoors. Just your media, in your hands.

Unlike other photo vault apps, Media Den never routes your files through a shared server. Every file is encrypted on your device before it ever touches the network, then sent directly to your own storage account. Only you hold the key.

- End-to-End Encryption
Every file is encrypted with AES-256-GCM using a key derived from your password via PBKDF2 (600,000 iterations) — both algorithms standardized by NIST (SP 800-38D and SP 800-132). Even if someone accessed your cloud storage directly, they would see only opaque encrypted blobs — unreadable without your password.

- Your Storage, Your Rules
Connect Media Den to your existing Amazon S3 bucket, Google Drive account, or iCloud Drive. You own the data, you choose where it lives, and you can walk away at any time with your files intact. There is no Media Den server in the loop.

- Cloud Replication and Migration
Attach a second cloud as a replica and Media Den mirrors every upload automatically in the background. When you're ready to switch, promote the replica to primary in one tap — no re-uploading, no downtime. Move from S3 to Google Drive, iCloud to S3, or any combination without ever re-encrypting or re-importing your library.

- Nearby Share
Send photos and videos directly to someone nearby over your local network — no cloud upload, no internet required. Media Den uses end-to-end encryption with a Curve25519 key exchange and AES-256-GCM to secure every transfer. Each session generates a fresh set of encryption keys that are never reused or stored, so past transfers stay private even if a device is later compromised. To guard against interception, both devices display a matching 6-digit verification code derived from the session key — if the codes match, the connection is genuine. Shared media never touches an external server.

- Export and Share
Decrypt and save files back to your camera roll at any time, or share them directly with any app via the standard iOS share sheet. You decide what leaves the vault.

- No Tracking or Telemetry
Media Den collects no analytics, telemetry, crash reports, or usage data of any kind. There are no third-party SDKs phoning home, no logging of what you import or view, and no account required. Your usage stays entirely on your device.

- PIN Lock and Privacy Screen
Protect access to your vault with a PIN. A privacy overlay automatically hides your content whenever the app leaves the foreground — nothing is visible in the app switcher or on-screen during phone calls.

- Metadata Stripped at Import
GPS coordinates, device model, timestamps, and other identifying EXIF and XMP metadata are stripped from photos automatically when you import them. Your location and device details stay off your files by default.

- Key Rotation
Change your encryption key at any time. Media Den re-encrypts every stored file with the new key, keeping your vault current without losing access to anything.

- Import from Camera Roll or Camera
Import photos, videos, and Live Photos from your existing camera roll, or capture new ones directly in-app. A progress overlay keeps you informed as files are encrypted and uploaded one by one. Optionally delete from the camera roll after import.

- Organized with Folders
Keep your media tidy with folders. Create as many as you need, move items between them, and browse your library in a clean three-column grid. Folder names are stored encrypted too.