The direct answer
Shoot inside Kryptis with the private camera, or import and delete the originals. Organise by shoot with sub-albums. Keep an encrypted backup in your own iCloud Drive so a lost phone is not a lost archive. Use a Decoy Vault for the times the phone changes hands, and a burner address for the sign-ups you do not want in your real inbox.
Where working content leaks by default
- Photos and iCloud Photos, plus every device on the Apple Account.
- The Photos widget, Recents, Memories and the People album.
- Files and iCloud Drive for exports.
- Downloads from a platform, which land in Files or Photos.
What to do now
- Shoot with the private camera. Captures are encrypted into the vault and never touch Photos. Face blur is there when you want it.
- Import existing material, then delete from Photos and Recently Deleted. Turn on Auto-Delete Media After Import to do it as you go.
- Use sub-albums per shoot or per month. Hide a thumbnail for anything you do not want visible even inside the album.
- Pull platform downloads with Download from Link straight into the vault.
- Create an encrypted backup and turn on Automatic iCloud Sync so the archive survives the phone.
- Set up the Decoy Vault for family, dates and repairs.
- Use Burner Email for trials and sign-ups.
Moving files to a computer
Local Transfer serves the vault to a browser on your own Wi-Fi with a one-time code. Downloads are decrypted on the way out, uploads are encrypted on the way in, and nothing passes through a server.
What not to rely on
The Hidden album, which syncs and opens with the passcode. A disguised icon on its own. Deleting from Photos without emptying Recently Deleted.
