How to choose a private iPhone vault.

Quick answer: Look for clear answers about independent passcodes, encryption, account requirements, free limits and recovery. “No account” describes sign-up; it does not establish what data an app collects. “Encrypted backup” does not establish whether you can restore it on a replacement phone.

Published by Chreia Labs, the maker of Ego. Ego examples below reflect the current development design, checked October 29, 2026. This is a selection checklist, not an independent product ranking. Ego has not launched publicly.

1. Is it a separate code or your iPhone lock?

Ask whether the app uses your device authentication, one app-wide code, or independent codes for different collections. Ask what opening one collection reveals about the others.

In Ego: Each new vault has its own six-digit code and independent encryption key. The anonymous unlock screen does not list vault names. After authentication, only the matching vault opens. New codes must differ from your other vault codes; local access also needs the original iPhone’s device-only key.

If you only need photos out of the main library view, Apple Photos’ Hidden album may be sufficient.

2. What does “no account” mean?

Separate a developer account from the Apple Account used for App Store purchases or iCloud. Check the privacy policy for advertising, analytics, hosting and recovery services rather than treating sign-up as the whole privacy question.

In Ego: There is no Ego account, advertising or analytics. A greeting name or alias is an ordinary local preference, separate from vault authentication, and can appear before unlock. Apple handles purchases. Optional cloud backup uses your iCloud account and storage; Chreia Labs does not host a vault service.

3. What is encrypted, and what is still observable?

Check whether encryption covers contents, thumbnails, names and saved search data. Look for an explanation of what the operating system or cloud provider can still observe, and whether any independent audit actually exists.

In Ego: Saved vault contents and current vault/file metadata are encrypted at rest. Separate vaults use independent keys. Technical identifiers, counts, sizes, timing and activity can remain observable, and readable content is processed while in use. Earlier plaintext metadata copies cannot be retroactively erased. No independent security audit is claimed.

4. What stays free if you stop paying?

Check both the new-user limit and what happens to existing files after a subscription ends. Encryption, viewing and export should be clear before purchase.

In Ego’s planned offering: One vault is free. Alter Ego adds unlimited vaults subject to device storage, opt-in encrypted iCloud backup and optional on-device Secure Smart Search. Weekly, Monthly, Annual and Lifetime offer the same benefits. Existing local vaults and files remain accessible after paid access ends; new cloud uploads and enhanced content search stop. Basic filename search and clearing derived search data stay available.

See planned prices and plan details. Those plans are not publicly available to buy yet.

5. Can you recover after losing your phone?

Ask exactly which copy you need, which key you must retain, and whether the original device is required. A file saved to iCloud Drive is not automatically a portable recovery format.

In Ego: Local recovery and manual encrypted exports require the original iPhone. The separate optional iCloud route is designed to restore a completed backup on a replacement iPhone with the same iCloud account and full recovery key. It stores one current snapshot, with no multi-device merge or version history. Physical-device upload and replacement-phone restore remain unverified.

If you are freeing storage, first understand what offloading or deleting the app does to local vault files.

Existing cloud downloads, restores and deletion remain available after Alter Ego ends. Turning backup off or deleting the local vault does not remove a cloud copy. Anyone with the matching archive and key can decrypt it, and Chreia Labs cannot replace a lost key. Read the full recovery explanation.

Try fictional files first

Before moving important material, test import, lock, reopen, export and the recovery path you intend to use. Importing into Ego does not delete originals from Photos or Files. Keep a separate copy until you have verified your own workflow, and never send support your passcode, recovery key or private files.