Family Photo Apps

Guide

What 'end-to-end encrypted' means for family photos — and what 'in transit and at rest' doesn't

Every app here encrypts your photos. The question is who holds the key. In one album and one chat app the company doesn't; in the other twelve it does, and several say what they do with it.

Facts checked 2026-09-13 · Updated 2026-09-12 · Covers 14 apps

Two phrases that sound alike

In transit and at rest describes where the encryption happens: on the wire and on the disk. The company decrypts the photo to work with it, and holds the key. This is normal, it is how most cloud services work, and it is not a scandal — but it means the company can open your photos, and the interesting question becomes what it does with that.

End to end describes who holds the key: only the people at the ends. The company’s servers store scrambled data they can’t read. It rules out everything the company might do with the photos, good and bad: no ads based on them, no AI on them, no previews, no search — and no recovery if you lose your key.

What each app says

ShowHiding Google Photos, iCloud Shared Albums, Amazon Photos and WhatsApp — the services most families already have. Nothing is re-scored. Why this filter exists.
Kin Album, FamilyAlbum, WhatsApp, iCloud Shared Albums, Keepr Circle, Google Photos, Amazon Photos, Tinybeans, PhotoCircle, 23snaps, TinyNest, BackThen, Qeepsake and Cluster on 2 criteria. Each cell is the app’s own statement; the bracketed numbers link to the sources below.
CriterionKin Album*FamilyAlbumWhatsAppiCloud Shared AlbumsKeepr CircleGoogle PhotosAmazon PhotosTinybeansPhotoCircle23snapsTinyNestBackThenQeepsakeCluster
Can the company open your photos?No — end to end; company holds no key[1]Yes — in transit only; staff access for support[2]No — chats end-to-end encrypted[3][4]Yes — excluded from Advanced Data Protection[5]Yes — 'in transit and at rest', not end to end[6][7]Yes — Google processes the library[8][9]Yes — servers analyse the photos[10]Yes — no end-to-end claim[11]Yes — no end-to-end claim[12]Yes — secured connections; support staff can access photos[13]Yes — SSL in transit; stored on Amazon S3; no end-to-end claim[14]Yes — stored on its own AWS servers; no end-to-end claim[15][16]Yes — SSL in transit; staff can open a journal for support or print checks[17][18]Yes — SSL in transit, stored in the cloud; no end-to-end claim[19][20]
AI or face recognition run on your photos?No — can't; photos encrypted before upload[21][1]Not stated[22][2]No — chats are end-to-end encrypted[3]Partly On the device only[23]Yes — own image models index photos for search by default; switchable; no face recognition[7]Yes — face groups on by default, switchable[8][9]Yes — tags, face grouping, shopping; switchable[10][24]Not stated[11]Not stated[25]Not stated[13][26]Not stated — 'memory generation' is a Pro feature[27][14]Yes — 'computer vision' to organise photos; a timelapse of the child's face; no switch described[16][28][29]Not stated[18][17]Not stated[20][19]

* Kin Album is made by Cobblestone, LLC, which runs this site. Compared on the same criteria as every other app here; no app pays us anything.

Kin Album says photos are encrypted on the iPhone before upload, that its servers store “ciphertext and wrapped keys”, and “We cannot decrypt your pictures”. It also lists what sits outside that: captions, comments and names, push notifications carrying a first name, and a small preview image if you turn on email photo updates for a relative.

WhatsApp says personal messages, calls and statuses “remain end-to-end encrypted” and that “no one, not even WhatsApp, can read or listen”. That covers the chat; the photos are compressed on the way, and WhatsApp is not an album.

iCloud Shared Albums are excluded from Advanced Data Protection by Apple’s own list. Apple says its analysis runs on the device and that it doesn’t access your photos — a policy, not a mathematical guarantee.

Google Photos and Amazon Photos both process the library on their servers — face grouping and Gemini features at Google; tagging, people grouping and shopping scans at Amazon. Neither makes an end-to-end claim.

Keepr Circle says “encrypted in transit and at rest” — the honest phrase for the ordinary arrangement — and that its own image models index photos for search on its servers, with a switch to turn that off.

FamilyAlbum, Tinybeans, PhotoCircle, 23snaps and TinyNest describe encryption in transit and invite-only access. None makes an end-to-end claim; 23snaps says support staff can access photo content when their duties require it, and none of the others says what its servers do with the photos beyond operating the service.

BackThen, Qeepsake and Cluster are the same arrangement, each in its own words: BackThen’s photos sit on “a series of secure servers” in AWS, where its “computer vision” organises them; Qeepsake says staff can open a journal for support or print checks; Cluster says photos are “only accessed over an encrypted connection” and compresses them on the way in. None makes an end-to-end claim.

How to check any app in one minute

Search its security or privacy page for “end-to-end”. If the phrase isn’t there, the company holds the key. Then search for “in transit” — that phrase is usually the honest version of the same fact. Then look for what the app does with the access: face grouping, search by what’s in the photo, Memories, shopping suggestions. Each of those is a feature, and each is also a confirmation.

Sources

  1. Kin Album — Kin Album — Security (updated 10 Aug 2026), checked 2026-09-12
    Photos and videos are encrypted on your iPhone before they are uploaded … Our servers store ciphertext and wrapped keys. We cannot decrypt your pictures … A few narrow things are readable server-side so the product can work, and we say so plainly: captions, comments, and names are stored readably; if you opt a relative into email photo updates, a small preview image is prepared for that email outside the encryption.
  2. FamilyAlbum — FamilyAlbum User Privacy Policy, checked 2026-09-12
    Data transferred between your device and our servers is encrypted using the latest encryption technology … We don't sell your data to any third parties … Authorized employees or affiliates to provide customer support, operate our services …
  3. WhatsApp — Meta Newsroom: Helping you find more channels and businesses on WhatsApp (16 Jun 2025), checked 2026-09-12
    You'll be able to find a new business and easily start a conversation with them about a product or service they're promoting in Status … Your personal messages, calls and statuses remain end-to-end encrypted, meaning no one can see or hear them.
  4. WhatsApp — App Store listing: WhatsApp Messenger — description and App Privacy, checked 2026-09-12
    Stay close to friends and family through end-to-end encrypted group chats and calls. Share messages, photos, videos and documents across mobile, tablet, and desktop … And no one, not even WhatsApp, can read or listen … In-App Purchases: No ads (1 account) $4.00 · No ads (4 accounts) $21.99 … Data Linked to You — Third-Party Advertising: Location, User ID, Product Interaction, Advertising Data.
  5. iCloud Shared Albums — Apple Support: Advanced Data Protection for iCloud, checked 2026-09-12
    iWork collaboration, the Shared Albums feature in Photos, and sharing content with "anyone with the link," do not support Advanced Data Protection.
  6. Keepr Circle — Keepr Circle — Pricing, checked 2026-09-12
    Start free. Your whole family joins free — you only pay for the storage you share. Free Vault 5 GB storage · Photo Vault $4.99/month 100 GB storage · Pro Vault $7.99/month 250 GB storage · Life Archive $12.99/month 500 GB storage, print-ready file archival · Annual: 2 months free … New uploads simply pause until you free up some space or choose a larger plan … Private by design · Encrypted in transit and at rest · No ads, no AI training on your photos.
  7. Keepr Circle — Keepr Circle — Security & Trust (reviewed 9 Sep 2026), checked 2026-09-12
    Keepr Circle runs its own image models on its own servers for search and duplicate detection — never a third-party AI service, and nothing is used to train any model. There is no face recognition. You can switch indexing off in Profile → Privacy and delete the index it built … Media is stored in object storage and delivered through controlled access paths … Keepr Circle does not currently claim a formal security certification or a published independent penetration test.
  8. Google Photos — Google Photos Help: Set up & manage your face groups, checked 2026-09-12
    You can start or stop grouping photos based on faces that appear in your photos. If you turn off "Face Groups," you delete: Your face groups · Face models used to create those face groups · Face labels you created.
  9. Google Photos — Google Photos Help: Gemini features in Photos privacy hub, checked 2026-09-12
    We don't train any generative AI models outside of Google Photos with your personal data in Google Photos … Your personal data in Photos is never used for ads.
  10. Amazon Photos — Amazon Help: Learn more about image recognition in Amazon Photos, checked 2026-09-12
    We use image recognition technology to analyze and apply tags to your photos and videos … We may also scan your photos to show shopping recommendations based on the content of your images … Amazon will collect, store, and use records of individual faces to enable these and similar features … You may enable or disable the tagging features any time through your account settings.
  11. Tinybeans — Tinybeans: Introducing Tinybeans+ (27 Aug 2023), checked 2026-09-12
    Tinybeans+ subscribers won't be seeing any ads. No ads in albums, in-app, and no emails … 200GB of storage … Only the family and friends you invite … have access to viewing them.
  12. PhotoCircle — App Store listing: PhotoCircle — description and App Privacy, checked 2026-09-12
    Privacy First: Only invited members can access your albums and contribute content. Video Clips: Share video clips up to 1 minute long … Data Used to Track You: Contact Info, Identifiers, Usage Data … In-App Purchases: PhotoCircle Pro Monthly $1.29 · PhotoCircle Pro Yearly $9.99.
  13. 23snaps — 23snaps Help: Privacy & Security, checked 2026-09-12
    The posts you make to 23snaps are only ever visible to those you choose to share them with … The only staff who can access photo content are those who require access temporarily in order to perform their specific duties; primarily answering support requests … All of the content added to 23snaps is uploaded to our secure storage provided by Amazon and Microsoft … All communication is over secured connections … your data, and that of the people you invite to use 23snaps, is private and will not be exposed to advertising networks.
  14. TinyNest — TinyNest Privacy Policy (last updated 15 Jan 2025), checked 2026-09-12
    we secure its transmission using Secure Socket Layer (SSL) technology … Amazon S3 for storing some of your data (like your photos or files) … We do not sell your personal information to third parties … We will keep your information for as long as your account is active … backup copies might remain.
  15. BackThen — BackThen FAQ — Is BackThen safe?, checked 2026-09-13
    We store and backup your photos and videos on a series of secure servers, inaccessible directly from the outside world. Your timeline is then served up only to your account and those you share it with … Our servers are based in Amazon's cloud infrastructure (AWS), with all industry standard security measures enforced … Your timeline cannot be discovered, it can only be accessed via invites you send.
  16. BackThen — BackThen privacy policy, checked 2026-09-13
    With computer vision and analysis of photo metadata, we can help you more easily organize and enjoy your collection of photos on our online photo storage services … Device and platform identifiers let us know which device you are using to access our Services in order to customize and optimize them to your device … We do not share location information with third parties nor sell it to anyone … Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure.
  17. Qeepsake — Qeepsake help — Is Qeepsake private and secure?, checked 2026-09-13
    Qeepsake uses 256-bit SSL encryption, which means your interaction with Qeepsake through texts, the app, or website is completely private and secure. Qeepsake does not sell, rent, license, or distribute the contents of anyone's journal for any reason … The only reasons a team member would access a family's journal is for troubleshooting an issue or to ensure the printed quality of Qeepsake Books.
  18. Qeepsake — Qeepsake privacy policy (Tinybeans USA Ltd), checked 2026-09-13
    The Service is provided to you by Tinybeans USA Ltd … We may process your information to develop and display personalized content and advertising tailored to your interests, location, and more … We do not sell or share your personal information for cross-context behavioral advertising purposes … Our application(s) may display a third-party hosted “offer wall.” … The Qeepsake website uses 256-bit SSL encryption … all Tinybeans staff members who have access to journal information have passed a criminal background check and sex-offender registry check … If you delete your account or request deletion, we will remove your personal information from our active systems within a reasonable timeframe, typically within 30 days.
  19. Cluster — Cluster support — How are my photos kept safe?, checked 2026-09-13
    Your photos are saved in high quality and stored in redundant locations in the cloud. Your photos are only accessed over an encrypted connection, so they cannot be located by anyone who does not have access to the group itself.
  20. Cluster — Cluster privacy policy, checked 2026-09-13
    We neither rent nor sell your Personal Information in personally identifiable form to anyone … We employ SSL to encrypt communications between our servers and client applications … We do not currently have any third-party advertising cookies, nor do we currently have any third-party data agreements that would share any of our customer's info … We provide a tool for downloading user data … You can also delete your account and all your data here: https://cluster.co/user/delete.
  21. Kin Album — kinalbum.com home page, checked 2026-09-13
    Kin Album is a private family photo album for the people you invite and no one else. Every photo is encrypted on your phone before it uploads, so even Kin Album can't look … $9.99 a month · one subscription covers everyone you invite … Relatives never pay, and there are no storage tiers — nothing to be downgraded out of. No free tier, no trial … Videos up to 400 MB each, about six minutes at the iPhone default … The album opens in any browser. Or add her as an email recipient and the photos arrive in her inbox, with no account at all … Kin Album shows no ads, runs no AI on your photos, and cannot open them … You are not the only one who can post — make someone else an admin and their photos land in the same album … Albums are created in the iPhone app — invited family joins right here, no app needed. The app isn't in the App Store yet.
  22. FamilyAlbum — Help: What's the difference between FamilyAlbum Premium and the free version?, checked 2026-09-12
    The free version of FamilyAlbum includes unlimited storage and uploads. (Videos must be shorter than 2 minutes in length) … When one member subscribes an album to a family plan, all members of that album get access to Premium features.
  23. iCloud Shared Albums — Apple: Photos & Privacy, checked 2026-09-12
    Photos uses on-device machine learning to deliver a personalized experience … Photos additionally uses on-device analysis to recognize the faces of people in photos … Apple does not access your photos or videos, and does not use them for research and development.
  24. Amazon Photos — Amazon Help: What is Amazon Photos?, checked 2026-09-12
    5 GB of free storage for all Amazon customers. Unlimited full-resolution photo storage, plus 5 GB of video storage, for Amazon Prime members … Image recognition for people, places, and things … Prints, photo books, and digital greeting cards.
  25. PhotoCircle — PhotoCircle Help: What is a PhotoCircle+ subscription?, checked 2026-09-12
    The price is $1.29 per month or $9.99 per year … An ad-free experience for the subscriber only · Longer videos (up to 4 minutes) · Search (based on Circle name and photo captions) · Larger upload limit (up to 200 photos at a time) · Option to download all media in a Circle at once · Slideshow (available on web).
  26. 23snaps — 23snaps Privacy Policy (effective June 2012), checked 2026-09-12
    23 Snaps Limited (Company Registration 07853831) … 160 City Road, Kemp House, London, EC1V 2NX, United Kingdom … We will not share your data with third parties for marketing purposes unless We have procured your express consent to do so.
  27. TinyNest — tinynestapp.com home page and FAQ, checked 2026-09-12
    Invite-only & private: Only people you invite can see your photos. No public profiles, no strangers, no ads … Unlimited storage: Never worry about running out of space … Is TinyNest free to use? TinyNest is free to download with unlimited photo storage … We also offer a Pro plan … They can join by downloading TinyNest and tapping the invite link. No account setup headaches … Your photos are never shared publicly, never used for ads, and never seen by anyone outside your family circle … Every person you invite has a "Can screenshot" permission that you can turn off … Every screenshot is logged too … TinyNest is available on both iOS (iPhone & iPad) and Android … Pro unlocks unlimited videos, unlimited memory generation, and many more features.
  28. BackThen — backthen.com home page, checked 2026-09-13
    Save photos of any size, videos of any length, plus unlimited milestones and stories. The original quality of your content is preserved (we don’t compress!) … 100% privacy - no ads and no data-sharing … Our timelapse tech shows you how their face changes over time … Enjoy 1GB of free storage … VIP Subscription £4.99 / $6.49 / €5.99 Storage limit: 200GB … Our pet-app is included for FREE. 1 account, 2 apps, working seamlessly together.
  29. BackThen — BackThen FAQ — Who can see my memories?, checked 2026-09-13
    The only people who can see your timelines are you, anyone you invite, and anyone another parent invites … BackThen does not autodetect a child in a photo, simply because doing so incorrectly may mean someone sees a photo you didn't want them to.
Across all fourteen apps

Does Grandma need an app? · Video limits in family photo apps · Which family photo apps compress your photos?

Each app’s safety guide

Is the Kin Album app safe and private? · Is FamilyAlbum safe? · Is Tinybeans safe? · Is Google Photos safe for family sharing? · Are iCloud Shared Albums safe? · Is Amazon Photos safe? · Is WhatsApp safe for family photos? · Is PhotoCircle safe? · Is Keepr Circle safe? · Is 23snaps safe? · Is TinyNest safe? · Is BackThen safe? · Is Qeepsake safe? · Is Cluster safe?

Also

Best private family photo app → Best family photo app with no AI on your photos →

Questions people ask

What does 'encrypted in transit and at rest' mean?

The photo is scrambled while it travels to the server and while it sits on the disk — but the company holds the key, so its own systems can read the photo whenever they need to. That is what lets an app search your photos, group faces, make previews or show shopping suggestions. Google Photos, Amazon Photos, iCloud Shared Albums and Keepr Circle all work this way, and Keepr says so in those words.

What does 'end-to-end encrypted' mean?

The photo is scrambled on your phone with a key the company never receives, so the company cannot read it even if it wants to or is ordered to. Kin Album says this of its album; WhatsApp says it of chats. The cost is that the company can’t do anything with the photos — no server-side search, no face grouping, and if you lose your keys the company can’t recover the photos for you.

Are iCloud Shared Albums end-to-end encrypted?

No. Apple’s Advanced Data Protection page says ‘the Shared Albums feature in Photos’ does ‘not support Advanced Data Protection’. Your own library can be end to end encrypted with ADP on; shared albums stay under standard encryption with keys Apple holds.

Every question on the site, on one page →