Why mainstream photo clouds scan
Server-side visual search and face grouping require a server that sees pixels. Once it does, moderation follows, and moderation means an automated system can act on your account based on what it thinks it saw.
Photos
Private photo storage, online — with nobody able to look inside.
Your library is encrypted in the browser before it is uploaded. No face grouping performed on a server, no content moderation, no model training — because there is nothing readable to analyse.
“The only photo cloud that cannot be asked what is in your pictures.”
For families, photographers and professionals who want an online library without automated image classification or the ban risk that comes with it.
Built for confidentiality
Encrypted before upload
Each photo and its thumbnail are sealed on your device with XChaCha20-Poly1305; the server receives opaque bytes.
No AI scanning, structurally
A provider that cannot decrypt an image cannot classify it, moderate it or train on it.
Search that stays private
Your device computes blind-index tags; the server matches opaque tags and your browser decrypts the results.
Share with named people
Each recipient gets their own key envelope sealed to their public key; removing them rotates the remaining keys.
Links that expire by default
Public links carry the key in the URL fragment, protected by a passphrase, and stop working automatically.
Originals, not re-encodes
Full-resolution files are kept as you uploaded them, with version history and a 30-day trash.
What you gain by giving that up
No classifier can misread a family photo, a medical picture or an NDA-bound shoot, because no classifier ever reaches it. Enforcement based on image contents becomes technically impossible.
Continuous protection with Live Clone
Point DRIVUNO at your local photo folder: every new import is detected, encrypted and mirrored to your vault, with previous versions retained.
Frequently asked questions
Is this really different from 'encrypted at rest'?
+
Yes. Encryption at rest protects against stolen disks while leaving the provider able to read your library. Here the key is derived on your device and never sent, so there is no server-side decryption path.
Does search still work on an encrypted library?
+
Yes, through blind indexes: HMAC tags computed on your device let the server match without ever seeing plaintext names or attributes.
Can I be banned for the contents of my photos?
+
There is no content-based enforcement path, because the content is never readable to us. Account rules cover payment and abuse of the service itself, not what your pictures contain.
Can DRIVUNO read this content?
+
No. Everything is encrypted on your device with XChaCha20-Poly1305, using keys derived locally from your password with Argon2id and wrapped per member with X25519. Servers store ciphertext and sealed key envelopes only.
Is there a free plan?
+
Yes. The free plan includes 1 GB with exactly the same zero-knowledge architecture as paid plans.
What happens if I lose my password?
+
Because we cannot read your data, we cannot reset it for you. Create a Recovery Kit — a printable PDF with a QR code — and store it offline. That is the same property that stops anyone else from reading your account.
Related
Your sensitive files deserve more than a traditional cloud.
Start free with 1 GB. Zero-knowledge encryption from the first upload — no admin override, no AI scanning, no plaintext on the server.