Automatic backup of your camera roll where nothing is classified, tagged or read: photos, videos, file names and EXIF are sealed on your device before upload.
“Backed up everywhere. Readable only by you.”
For anyone who wants a photo backup without face recognition, content classifiers or memories features running over their library.
Argon2id derives your key locally; every photo and video is sealed with XChaCha20-Poly1305 under a fresh key wrapped with X25519.
No face grouping, no object recognition, no automated moderation of your library — ciphertext cannot be analysed.
File names, album names, timestamps and GPS coordinates are treated as content, not as service labels.
Camera roll backup runs in the background with resumable chunked uploads, so a dropped connection costs seconds.
Galleries are built from previews generated and encrypted locally; no server decrypts an image to show it.
Encrypted copies are replicated to independent EU storage with immutability windows and automatic failover.
Mainstream photo backups need to read your library: search by content, face grouping, memories and duplicate detection all require decryption. DRIVUNO gets durability from replication and versioning instead of from readability, so you keep the safety net without the analysis.
We can see that an account exists, roughly how many encrypted objects it holds and when they were written. We cannot see images, thumbnails, file names, album names, EXIF or a search query. There is no admin console able to open an item.
Zero-knowledge and provider-side password reset cannot coexist. At signup your device generates a recovery kit that can unwrap your master key — print it and keep it offline. Lose both passphrase and kit and the library is unrecoverable, which is the same property that protects it.
Yes. DRIVUNO backs up photos and videos end-to-end encrypted, so there is no face recognition, no object classification and no content moderation over your library — the server only holds ciphertext.
1 GB is free with the same architecture as paid plans. Paid storage starts at $9.99/month (250 GB) and scales to 10 TB.
No. Images are encrypted on your device before upload. Your passphrase is stretched locally with Argon2id, each item is sealed with XChaCha20-Poly1305 under a fresh key, and those keys are wrapped with X25519. Our servers store ciphertext and wrapped keys, with no decryption path.
Both. File names, album names and embedded metadata are treated as content and sealed alongside the pixels. Thumbnails are generated on your device and stored encrypted.
We cannot restore your library — that is the same property that prevents anyone else from opening it. Recovery relies on the recovery kit generated on your device at signup, which you keep offline.
For people with an account, the album key is wrapped for their public key, and removing them rotates it. For everyone else, links carry key material only in the URL fragment, which browsers never transmit to a server; links are passphrase-gated and expire within 24 hours at most.
Yes, using blind indexes. Search tags are computed with HMAC on your device, so the server matches opaque strings and never sees your query or your file names. There is no server-side analysis of image content.
Your encrypted library is replicated to independent EU storage with immutability windows and automatic failover between providers. Those copies are ciphertext as well. We still recommend keeping one offline encrypted copy of anything irreplaceable.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.
