App security
Security at Keyvessa
This page explains plainly how Keyvessa is meant to protect personal content. It describes the state of development and will be checked against the final app before release. Keyvessa is in development and not yet available on the App Store.
Local architecture
Personal content stays in the app and on the device unless you deliberately export it. There is no Keyvessa user account, no Tommsel backend and no cloud database of its own for personal content.
Encrypted library
The private library is stored locally in encrypted form. The exact methods used will only be named once they are confirmed for release.
Keys
Keys are generated locally on your device. Tommsel holds no server-side copy of them.
Recovery
Recovery information is sensitive. Store your recovery set safely and do not pass it on. Tommsel cannot reset a lost recovery secret from a user account, because there is no such account and no server-side password reset.
Thumbnails and video
Thumbnails are stored in encrypted form. Video playback is designed for encrypted content. Whether and for how long plaintext data arises in memory or in temporary files during playback will be checked against the final app before release and added here. In addition, Keyvessa cannot control what iOS itself caches internally.
Import
You select content yourself through the iOS photo or file picker. System pickers can create temporary files that are managed by iOS.
Export
After an export the copy is outside the protection area of Keyvessa. The security terms of the chosen location or service apply to it.
Deletion
Deleted content is removed from the app's library. Physical unreadability of the data on flash storage cannot be guaranteed. Protection comes from the encrypted storage. The exact deletion strategy will be checked against the final app before release.
Limits
No security product is absolute. Protection also depends on the device passcode, the state of the device, iOS and how you handle recovery information. Keyvessa claims no certification and no independent security audit.
Security reporting
If you found a security problem in Keyvessa, please write to tshfm78@gmail.com with the subject Security. Describe the problem, the iOS version and the steps to reproduce it. Please do not attach recovery keys, QR codes, passwords or private vault content (photos, videos, files).
Last updated: October 28, 2026