Press
Press
The facts, the limits, the code and the mark, on one page. No PR firm and no embargoes: write to us directly.
The facts
- Oorvel is an encrypted vault for iPhone, made by Dolphy Technology.
- Files are encrypted on the phone with XChaCha20-Poly1305, under 6 words the app picks at random.
- The key is made with Argon2id at 256 MiB per guess.
- No account, no server, no cloud, no analytics. Network permission: none. Privacy label: Data Not Collected.
- No recovery. If the words and the sealed export are lost, nobody can open the vault, its maker included.
- Paid once, up front. $14.99. No free tier, no subscription.
- Open source under the GPL-3.0. The repository opens at launch.
- Not on the App Store yet.
The limits
- The iOS photo picker stages a copy. When you import, iOS hands Oorvel a copy of each photo. The original stays in your library until you delete it, and deleted photos sit in Recently Deleted for 30 days unless you empty it. Importing is not hiding until you finish both steps.
- There is no recovery. Oorvel has no server and no account, so there is no reset link and no support desk that can let you back in. If you lose your six words and your sealed export, your photos are gone. That is the cost of a vault with no key but yours.
- An open vault is open. Encryption protects files at rest. While the vault is unlocked, anyone holding your phone sees what you see.
- A compromised phone is out of scope. If your iPhone runs malware with screen or memory access, no app on it can keep a secret. Oorvel assumes iOS itself is intact.
The mark
The O: a thin ring with a gap at twelve o'clock and a bright point in the gap, over a sealed disc. Download the mark (SVG). Please keep it on a dark ground and do not recolour it.
Who makes it
I'm Mani. I make Oorvel at Dolphy Technology, and I built it so there would be one place on a phone that answers to nobody, me included.
Contact
support@oorvel.com. Security research: security@oorvel.com.