Private photo & video sharing for couples
Share freely.
Stay in control.
A private, encrypted space for you and your partner. Nothing touches your camera roll. Nothing leaves your control.
Launching on iOS soon. Coming to Android later.
Sound familiar?
The workaround stack
Expiring messages for the casual stuff (but the quality is terrible). A hidden folder for the rest (but it's still in your camera roll). Hoping nobody scrolls too far when you hand them your phone. It works until it doesn't.
The trust problem
Once a photo leaves your phone through a regular app, control is gone. If trust changes, you're left asking nicely and hoping they cooperate. There is no undo.
One partner. One encrypted channel. Nothing else.
Not cloud storage. Not a chat app. A private space where your photos and videos stay sharp, never touch your camera roll, and never leave your control. End-to-end encrypted, with no audience but each other.
Just you and your partner
Never send to the wrong person. Never worry about who else can see it.
You
PartnerChanged your mind? One tap.
The key is destroyed.
When you revoke, the encryption key is destroyed on our server. Not archived, not recoverable. Without the key, the content cannot be decrypted. Learn how it works →
Everything stays in Tucked
No save to camera roll, no sharing, no screenshots*.
View only inside Tucked
No screenshots *
No save to camera roll
Locks the moment you leave
Leave the app, and everything locks behind Face ID. No one sees your content but you.
How Tucked protects your privacy
End-to-end encrypted
Every photo, video, and message is encrypted on your device before it ever leaves. Your private keys live only on your phone, protected by Face ID. Not even Tucked can see your content.
Cryptographic revocation †
When you revoke access, the encryption key is destroyed on our server. Not archived. Gone. Without it, the encrypted content cannot be decrypted. Learn how it works →
Nothing on disk
Decrypted content lives only in memory and is never written to disk. When you leave the app, cached content is purged.
I built Tucked because I wanted a private space to share photos with my partner and nothing like it existed. The alternatives were expiring messages, a hidden folder, and hoping for the best. None of them gave us real control. So I built something that does.
Alfredo
Founder
Try it free for a week
One subscription covers both you and your partner. No commitment to start.
Monthly
$7.99 / month
Annual
$79.99 / year
Revocation is free and always will be. We will never put your ability to control your own content behind a paywall.
Frequently asked questions
Yes. Every photo, video, and message is encrypted on your device before it leaves. We use end-to-end encryption (ChaChaPoly AEAD, Curve25519, HPKE) so that only you and your partner can see your content. Our servers never hold your private keys. Even we cannot view your content.
When you end your partnership, all encrypted decryption keys, content, and messages are permanently deleted from our servers. You can also revoke individual items at any time. Revocation is cryptographic. The decryption key is destroyed and the content can no longer be decrypted through Tucked. Read more →
Each photo or video you share has a unique Content Encryption Key (CEK) that is sealed to your partner's public key and stored on our server. When you revoke, we permanently delete that sealed key and push a deletion signal to your partner's device to remove any cached encrypted data. Without the key, the encrypted content cannot be decrypted. Even if your partner has the encrypted bytes, they can no longer get a decryption key.
Tucked blocks screenshots as aggressively as iOS allows. When a screenshot attempt is detected, the content is hidden. However, no software solution can guarantee 100% screenshot prevention. A determined person could use another device to photograph their screen. Tucked makes casual screenshots difficult.
Minimal data: a random user ID, your public keys, and optional display name. We do not collect your name, email, phone number, or location. Your content is encrypted before upload and deleted from our servers after your partner downloads it. See our Privacy Policy for full details.
No. Revocation is your right, not a premium feature. You can revoke access to any photo or video at any time, no subscription required. We will never put your ability to control your own content behind a paywall.
While content is being viewed, the decryption key exists in device memory. There is no way around this. You need the key to view the content. A highly motivated attacker with technical skills could theoretically extract it during that window. However, once you revoke, the key is destroyed on our server. If they haven't obtained it by then, they cannot. Tucked is designed to make this window as small as possible: keys are held only momentarily and never written to disk.
Not yet, but Android is planned. Join the waitlist to be notified when we launch on Android.
Tucked is $7.99 per month or $79.99 per year, with a 1-week free trial so you can try everything before you pay. All core features are included: end-to-end encrypted sharing, one-tap revocation, screenshot prevention, and biometric lock.