2.5BEHIND FACEID
The vault
Kept out of the camera roll.
Vault saves are written inside the app's own sandbox, where Photos and Files cannot see them and iCloud cannot sync them. Opening the vault takes Face ID.
DISPLAY OFF
Hidden from every other app
A recording saved to the vault goes into Anonycord's private app sandbox. It does not appear in Photos, it does not appear in the Files app, and iCloud Photos never touches it. As far as the rest of the device is concerned, it is not there.
The vault viewer sits behind the system LocalAuthentication prompt, so it opens with Face ID and there is no separate PIN to remember or to be asked for.
Understand what that protects against, though. It defeats someone scrolling your camera roll, and it defeats other apps that hold photo-library permission. It does not defeat a forensic extraction of an unlocked handset, and it does not defeat someone who can compel you to unlock the phone and then look at your face.
Library, vault, or both
The save destination is a decision about your own risk, so the app makes you pick rather than picking for you. Library writes to Photos like any camera app, optionally sorted into an Anonycord album. Vault keeps the file private and on-device. Both writes a normal copy to Photos and keeps a private one in the vault.
What happens when the app goes
Because the vault lives in the app sandbox, everything in it is removed if the app is deleted or a reinstall goes wrong. Nothing recovers it. If you are holding footage you cannot afford to lose, use Both and move the visible copy somewhere durable as soon as you are somewhere safe enough to do it.
| Parameter | Behaviour |
|---|---|
| Storage | App sandbox, on-device only |
| Visibility | Hidden from Photos and Files |
| Access | Face ID (LocalAuthentication) |
| Cloud sync | None; vault content never syncs |
| Destinations | Library, vault, or both |
| Album sorting | Optional Anonycord album for library saves |