How to Share Family Photos Privately

Where shared photos usually end up

Posting to a social network, even to "friends only", usually means the platform stores a readable copy. Readable copies can be scanned to recognise faces and objects, used to target ads, swept into datasets, exposed in a breach, or produced in response to a legal demand.

Shared cloud albums and family group chats vary. Some are end-to-end encrypted, many are not by default, and almost all are tied to a phone number or email address that links the album back to you.

Children cannot consent to any of this. A photo posted at five can still be searchable at twenty-five.

What "private" should mean for family photos

• Encrypted on your phone before upload, so the service stores only ciphertext it cannot open.
• Shared only with people you have chosen, not with "friends of friends" or a recommendation feed.
• Full resolution, so you are not trading privacy for blurry video of the recital.
• No ads and no business model built on what is in your pictures.
• Easy enough that grandparents will actually use it, or none of this matters.

How a family circle works in IronCircles

In IronCircles, a family gets its own circle: a small private network with its own encryption keys and its own members. Photos and videos are encrypted on the device before they leave it, so our servers relay and store ciphertext, not pictures.

The same circle holds the rest of family life: a shared calendar with RSVPs, grocery and packing lists everyone can edit, the family recipes, and credentials like the wifi password or the door code, all inside the same encryption.

Nobody joins without the members’ say-so. New people are invited, and existing members vote them in, so a family circle stays the family.

Letting kids in without handing them a public social network

A family circle gives children a place to share with the people who matter without public profiles, follower counts, strangers or a recommendation feed. There is nothing to discover from outside the circle, and no stranger can message their way in.

Signup is a username and a password. There is no phone number to collect, no real name, and no contact list uploaded to find "people you may know".

Extra protection for the photos that matter most

• Photo vaults: lock an album behind its own key, invisible on an unlocked phone.
• One-time view: send a photo or video that opens exactly once.
• Disappearing messages for anything that should not stick around.
• Remote wipe with Privacy+, if a phone is lost or stolen.

Questions