Back to overview
Opaq icon

Opaq

EN

A secure vault for your sensitive photos and videos. Everything is encrypted on your device. Sync it fully encrypted through your iCloud or keep it on this device only: your choice. One purchase, no subscription, no in-app purchases.

Screenshots

9:41
Screenshot 1
9:41
Screenshot 2
9:41
Screenshot 3
9:41
Screenshot 4

Description

Some photos and videos are nobody else's business. Opaq locks them away in a vault that only you can open. Every photo and video is encrypted on your device before it goes anywhere, including thumbnails, album and tag names, and metadata. Import from Photos, shoot with the camera inside Opaq, or share from other apps, even while Opaq is locked. Opaq reads originals straight from your library and encrypts them on the way, without an unencrypted copy in between. If you want, Opaq then deletes the originals from Photos, but only after every single one has been verified in the vault. During setup, and anytime in the settings, you choose whether your vault syncs through your private iCloud or stays on this device only. With iCloud sync, it also reaches your other devices and survives the loss of your iPhone. Even then, your iCloud only holds encrypted data: Apple sees noise, and we see nothing at all. On devices with little storage, Online Mode keeps the originals in iCloud only and downloads them just for viewing. You unlock Opaq with your password, and with Face ID if you like. During setup, you get a Magic Code. With it, you can reset your password or open your vault on a new device. Opaq stores it nowhere, so keep it safe. Inside, Opaq feels like a photo app: a fast grid, albums with subalbums, tags you can combine in search, favorites, videos that play straight from the encrypted file, and a trash that keeps deleted items for 30 days. Hidden albums disappear from your library, locked albums need another confirmation, and Hidden can have its own password. By default, screenshots and screen recordings show Opaq only in black, the app switcher shows a veil instead of your photos, and a discreet alternative icon keeps your home screen unremarkable. Nothing leaves the vault unless you explicitly confirm an export. No subscription, no in-app purchases, no ads, no account, no tracking.

Questions about Opaq

No, Opaq is a one-time purchase. There is no subscription, no in-app purchases, and no advertising. All features are immediately available to you permanently.

Encrypted on your device. iCloud sync is off by default. If you turn it on, during setup or later in the settings, Opaq also stores an encrypted copy in your private iCloud, so the vault reaches your other devices and survives the loss of your iPhone. If you turn sync off again, Opaq stops syncing; what is already in iCloud stays there, encrypted.

Import them from the Photos app, take them with the camera inside Opaq, or share them from other apps. Photos and videos from the camera are encrypted in memory and never end up in Photos. When you share from another app, Opaq encrypts right away, even while it is locked, and moves everything into the vault the next time you open it.

With albums, subalbums, and favorites, and with your own tags for people, places, or anything else. Tags can be collected in groups, and the search combines several tags. Albums, tags, and whole tag groups can be hidden or locked with Face ID or your password.

Turn on Online Mode in the settings (requires iCloud sync). Opaq then removes the originals from this device once iCloud has confirmed them, and keeps only the thumbnails. When you open a photo or video, Opaq downloads it briefly from iCloud without saving it; videos start playing while they load. Online Mode applies only to the device you turn it on for.

No. Opaq encrypts everything on your device before it is stored anywhere, including thumbnails, album names, and metadata such as dates and locations. The keys never leave your devices unencrypted. With iCloud sync, Apple only stores encrypted data. We have no server, no account, and no access.

A 16-character code that Opaq shows you exactly once during setup. With it, you can reset your password or open your vault on a new device. Opaq stores it nowhere and cannot show it again. Write it down on paper or save it in your password manager. If you lose it, you can create a new one with your password.

If you forget your password, enter your Magic Code and set a new one. If you lose your iPhone and iCloud sync was on, open your vault on the new device with your Magic Code. Without iCloud sync, or without your Magic Code, your data cannot be recovered. That is the price of real end-to-end encryption: nobody, including us, has a second key.

Only if you choose to; this option is off by default. Opaq deletes an original only after its encrypted copy has been verified in the vault, and iOS asks you to confirm. The originals then stay in “Recently Deleted” in the Photos app for 30 days. Opaq shows you how to empty it.

Hidden albums can appear frosted in the album list or disappear from it completely. Hidden can have its own password, so your vault password alone does not open it. An alternative app icon makes Opaq look unremarkable on your home screen.

Opaq runs on iPhone and iPad with iOS 26 or later. It is available in English, German, French, Italian, Spanish, Portuguese (Brazil), Dutch, Japanese, Korean, and Traditional Chinese. On devices set to another language, Opaq appears in English.

Your question is not listed?

Write to us. We usually reply within one or two days.

Ask a question
Support & Legal

App Support

Do you have questions, problems, or feedback regarding the app? Write to us at our support email.

contact.schulzpod@gmail.com

Terms of Service

Terms of Use & Legal Notices

Apple App Store

If you acquired this App through the Apple App Store, unless regulated otherwise herein, the acquisition and use of the App are governed by Apple's Standard Licensed Application End User License Agreement (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

Consumer Dispute Resolution / Universal Arbitration Board

We are not willing or obligated to participate in dispute resolution proceedings before a consumer arbitration board.

Disclaimer

Disclaimer of Liability

Despite careful development and review, we do not guarantee the accuracy, completeness, or timeliness of the presented content within the app.

Opaq uses end-to-end encryption. Without your password or your Magic Code, neither you nor we can access the stored content. If you lose your Magic Code together with your password or your device, the content cannot be recovered. Please keep your Magic Code safe.

The app is intended exclusively for the private, encrypted storage of your own photos and videos. The use of the app is at your own risk. We assume no liability for damages arising from the use of the app.

Privacy Policy

Privacy Policy for Opaq

Last updated: November 11, 2026

In short

Every photo and video is encrypted on your device before it is stored, and the keys never leave your devices. If you turn on the optional iCloud sync, only encrypted data goes to your private iCloud; neither Apple nor we can see the contents. No account, no server of ours, no advertising, no tracking.

Encrypted on Your Device

The app does not need an account, and we do not run any servers for it. The app contains no advertising, no tracking, and no analytics.

All photos and videos you bring into the app, their thumbnails, and their metadata (e.g., capture date, location, file name, album and tag names) are encrypted on your device before they are stored. Each item has its own key. The keys are protected by your password, the Secure Enclave of your device, optionally Face ID, and your Magic Code. We never have access to them.

Photo Library Access

The app only reads the photos and videos you select for import; limited access is sufficient. If you choose to delete the originals from the Photos app after import, iOS asks for your confirmation first.

Camera & Microphone

With the camera in the app, you take photos and videos directly into the vault. The recording stays in memory and is encrypted before it is stored; nothing is saved to the Photos app. The app does not request your location. It uses the microphone only in video mode. The app asks for camera and microphone access the first time; you can revoke it at any time in the iOS settings.

Sharing from Other Apps

If you share photos or videos with Opaq from another app, the share extension encrypts them right away with a key stored on your device and keeps them, encrypted, in a storage area on your device that only Opaq can access, until you next unlock the app. If the other app cannot provide a video in place, iOS creates a temporary copy, which the extension deletes immediately after encrypting it. The originals remain in the other app.

iCloud Sync (optional)

iCloud sync is off by default. If you turn it on (during setup or at any time in the settings), the app stores your vault in your private iCloud database (Apple CloudKit). Only encrypted content is transmitted: photos, videos, thumbnails, and metadata are encrypted on your device beforehand. So that one password works on all your devices, the app also stores a derived form of your password there, encrypted with your vault key, as well as an optional separate password for "Hidden" and a public key for each of your devices. Your password itself is stored nowhere. Apple, as the provider of iCloud, can see technical information such as the number and size of the stored records and the times of changes, but not their contents. We have no access to your iCloud data. Apple's privacy policy applies to the processing by Apple.

Without iCloud sync, no photos, videos, or metadata leave your device. Only the key that can be opened solely with your Magic Code is always stored in your private iCloud, encrypted, as long as you are signed in to iCloud. This way, a new Magic Code applies on all your devices.

With Online Mode (optional, per device), the originals are stored only in your private iCloud. To display one, the app downloads it temporarily in encrypted form and deletes this copy when you leave it or lock the app.

Face ID & Touch ID

If you turn on Face ID or Touch ID, iOS handles the check entirely. The app only learns whether the check was successful and has no access to your biometric data.

Export & Sharing

Photos and videos only leave the vault if you explicitly confirm an export, either to the Photos app or via the share sheet. After that, they are stored unencrypted at the chosen destination and are no longer protected by the app. By default, the location is removed on export. The same applies to the deletion receipt you can share after deleting an album with its contents: it shows the album name, the number of items, the time, and thumbnails blurred down to outlines, and leaves the app only if you share it.

Maps

The location of a photo is shown on a map only after you explicitly confirm it. The coordinates are then passed to Apple Maps; Apple's privacy policy applies.

Contact by E-Mail

If you write to us from the app, your mail app opens with the app version in the subject line. We only use your message and e-mail address to answer your request.

App Store

You get the app through the Apple App Store. Apple is responsible for download, payment, and updates; we have no access to that data. Apple's privacy policy applies: https://www.apple.com/legal/privacy/

If you have turned on "Share with App Developers" in the iOS settings, Apple provides us with anonymous crash reports and usage statistics. They do not identify you.

Legal Basis

Whatever happens only on your device or in your private iCloud does not reach us; we do not process that data.

If you e-mail us, we process your address and message to answer you (Art. 6(1)(b) GDPR for questions about a purchase, otherwise Art. 6(1)(f) GDPR).

Storage Period

What the app stores on your device stays there until you delete it in the app or remove the app. Data in your iCloud can be deleted in your device's iCloud settings.

We delete e-mails to us once your request has been resolved, unless statutory retention obligations apply.

Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)).

Since we do not keep accounts and the app does not identify you, we often cannot attribute data to a person (Art. 11 GDPR). Write to us anyway; we are happy to help.

Right to Lodge a Complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for us: the data protection authority of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany, https://www.lfd.niedersachsen.de

Controller & Contact

Nikita Aurelian Schulz (PODSchu). The full address is in the legal notice (Impressum) on this page.

For questions about data protection: contact.schulzpod@gmail.com

Legal Notice

Nikita Aurelian Schulz - PODSchu — OpaqAll rights reserved.