How it works Sharing Security Pricing FAQ

The iPhone app for documents that must stay private

Keep your documents

All your files are fully encrypted. No one can access them. Not us, not Apple, not anyone who picks up your phone.

Download for iPhone See how it works

AES-256 Secure Enclave Face ID No cloud

Enter master password

STEP 1 OF 2 · THEN FACE ID

qwertyuiop

asdfghjkl

⇧zxcvbnm⌫

123spacereturn

Continue

Face ID

Vault open4 DOCUMENTS · ALL ENCRYPTED

How a drawing becomes a locked package

Four seconds from camera to vault.

This is what happens to every file, every time. Nothing readable ever touches the disk.

SCANNING

01 · SCAN

Capture it

A child's drawing, a passport, a lease. It never touches your camera roll.

9f3ac71e02bde4a877c01b5df09e3c42a6d18e075bf32a9cd4186e0bc93f71a50d6eb2f848c3e5a13f7b96d01c847ae25b39c0d78f14a2e66d93e81b4e81b7d0a93c1f6e5c0ad2e78b14f6a903c57d2be94f61a8b3c70e5d9a2fc871d6b42f0e7c93a15d48e6bd37e02a9c6f1b58f4d36a07c2e983b15d4cc3d80a7f5e92b146e7c02d9b84f3a65e1c07f9d26b380ea4d5c173f69e2b4a8db06fc1e329758db0f3a45c1e6e9cd207a8b53f610c4de9f87b2a94e07b5e92c1d04af36e1a8c6d2fb9e045c7e8a30f612c9d7e4ba1f0b58d36c2d9e70b4f83a65f1cc27e9d40e6b81a3d74f9bc052e8a6f0cd391a4e508b7
9f3ac71e02bde4a877c01b5df09e3c42a6d18e075bf32a9cd4186e0bc93f71a50d6eb2f848c3e5a13f7b96d01c847ae25b39c0d78f14a2e66d93e81b4e81b7d0a93c1f6e5c0ad2e78b14f6a903c57d2be94f61a8b3c70e5d9a2fc871d6b42f0e7c93a15d48e6bd37e02a9c6f1b58f4d36a07c2e983b15d4cc3d80a7f5e92b146e7c02d9b84f3a65e1c07f9d26b380ea4d5c173f69e2b4a8db06fc1e329758db0f3a45c1e6e9cd207a8b53f610c4de9f87b2a94e07b5e92c1d04af36e1a8c6d2fb9e045c7e8a30f612c9d7e4ba1f0b58d36c2d9e70b4f83a65f1cc27e9d40e6b81a3d74f9bc052e8a6f0cd391a4e508b7

ENCRYPTING · AES-256-GCM

02 · SCRAMBLE

It becomes noise

AES-256 turns every pixel into random bytes. Only your key brings it back.

Sealed package

AES-256-GCM · tag 1a19…93b9

03 · SEAL

Sealed and tamper-proof

Change one bit and the package refuses to open. Even the filename is encrypted.

Storing in Secure Enclave

KEY SPLIT · HALF IN HARDWARE

Locked

FACE ID + PASSWORD TO OPEN

04 · LOCK

Behind the Secure Enclave

Half the key lives in the chip and needs your face. The other half is a password never stored.

The promise

All your files are fully encrypted. No one can access them.

Safe Potato has no accounts and no way to read what you store. If you forget your password, your documents are gone forever. That is the point.

No cloud backup. No accounts. No way to read your files.

Nothing leaves your phone unless you send it.

There is no account and no copy of your vault anywhere. Your documents are encrypted on the device and never transmitted, except when you choose to share one, and even then only the person you picked can read it.

Made by KalIndependent developer. One person, one app, no investors, no data business.

Security, end to end

Built for people who actually have something to protect.

Every feature below ships in the app. Nothing is a roadmap item, and nothing reports on you.

Two factors, every unlock

Face ID and your master password are both required. One without the other opens nothing.

Biometrics + Argon2id

Secure Enclave keys

Keys are generated inside the chip and can't be exported, even by a jailbroken OS.

P-256 · biometryCurrentSet

Jailbreak lockout

Six independent tamper checks. On a compromised phone the vault refuses to open.

fork() · dyld · sandbox probes

Screenshot shield

Open documents render blank in screenshots and screen recordings. The app switcher shows only the logo.

Secure canvas layer

Duress PIN

Forced to open the app? Enter your duress PIN and a convincing decoy vault appears instead.

Separate key, separate store

Auto-wipe

Optional. After 5, 10 or 15 failed attempts, every file is overwritten with random bytes and every key destroyed.

Off by default, your call

Pricing

Try it free for 14 days.

Unlimited documents on every plan. Cancel from your Apple ID settings any time, and your vault stays encrypted on your phone.

Monthly

$4.99/ month

First 14 days free

✓ Unlimited encrypted documents✓ Every security feature✓ Camera scanning to PDF

Download on the App Store

Best value

Yearly

$39.99/ year

First 14 days free · save 33%

✓ Unlimited encrypted documents✓ Every security feature✓ Camera scanning to PDF

Download on the App Store

Questions

Straight answers.

Can you recover my files if I forget my password?

No. The password is never stored or sent anywhere, and without it the vault key cannot be rebuilt. That is what makes the encryption real. Write your password down and keep it somewhere safe.

Does anything leave my phone?

Only what you choose to share, and only encrypted for one specific person. There is no sync, no backup and no analytics. The app talks to Apple to confirm your subscription, and to the Safe Potato relay only when you send or collect a shared document.

How does sharing work?

Both people need Safe Potato. You scan each other's code once. A shared document is encrypted on your phone with a key that only the recipient's Secure Enclave can unwrap, passes through the relay as random bytes, and is deleted from the relay the moment their phone collects it. Uncollected packages are deleted after 7 days.

What happens if I get a new iPhone?

Because keys live inside your phone's Secure Enclave, a vault can't simply be copied to another device. An encrypted export for moving between phones is planned, and will require your password on both ends.

Can Safe Potato really block screenshots?

iOS doesn't allow apps to stop a screenshot outright. Safe Potato renders documents on a protected layer that comes out blank in screenshots and screen recordings, and hides content in the app switcher. That covers the realistic risk.

What is the duress PIN?

A second PIN you choose. Entering it at unlock opens a decoy vault with its own separate encryption key, so someone forcing you to open the app sees nothing of value.