01 / Illustrated
Your photo.
A moment you can recognize.
Your photo, on your phone, before it is saved anywhere.
Storage, illustrated
This is how the vault stores things, drawn simply. A teaching story, not a walkthrough of a shipped pruf.net feature. Storage nobody can read alone, us included.
Watch it happen01 / YOUR PHOTO
A moment you can recognize.
01 / Illustrated
A moment you can recognize.
Your photo, on your phone, before it is saved anywhere.
02 / Illustrated
Your phone. No name. No face on file.
A presence check on your phone and its hardware key open the vault. PRUF keeps no biometric template.
03 / Illustrated
Privacy travels with it.
Your phone turns the photo into dust before it is saved. Nothing readable lands on your phone’s drive or in your cloud backup.
04 / Illustrated
Still nothing to see.
Someone copies your cloud backup, or the phone’s drive. They get dust. The key never left your phone, and PRUF holds its own part.
05 / Illustrated
Your phone’s key. PRUF. Your storage.
The key in your phone, PRUF, and the storage itself each hold something the others can’t use alone. The photo stays closed until all three are present.
06 / Illustrated
Only on your phone.
The photo opens inside your phone. Storage stays as dust.
07 / Illustrated
Close it. Keep it.
Close it and the dust stays put, ready for the next time you open it.
The architecture
Your phone has the key. We hold our part. The storage, which is your phone’s own drive and your cloud backup rather than anything of ours, holds the dust. A file opens when the three meet on your phone, and not otherwise.
Your photo. Your photo, on your phone, before it is saved anywhere.
Verify a human. A presence check on your phone and its hardware key open the vault. PRUF keeps no biometric template.
Save it as digital dust. Your phone turns the photo into dust before it is saved. Nothing readable lands on your phone’s drive or in your cloud backup.
Steal the backup. Someone copies your cloud backup, or the phone’s drive. They get dust. The key never left your phone, and PRUF holds its own part.
It takes all three. The key in your phone, PRUF, and the storage itself each hold something the others can’t use alone. The photo stays closed until all three are present.
There it is. The photo opens inside your phone. Storage stays as dust.
Private. Even from us. Close it and the dust stays put, ready for the next time you open it.
The animation is an illustration of the storage architecture, not a shipped pruf.net feature. Three roles do not mean three equal cryptographic shares. What it does and doesn’t show.