Family Photo Apps

Guide

What 'end-to-end encrypted' means for family photos — and what 'in transit and at rest' doesn't

Every app here encrypts your photos. The question is who holds the key. In one album and one chat app the company doesn't; in the other twelve it does, and several say what they do with it.

Facts checked 2026-10-18 · Updated 2026-10-14 · Covers 14 apps

Two phrases that sound alike

In transit and at rest describes where the encryption happens: on the wire and on the disk. The company decrypts the photo to work with it, and holds the key. This is normal, it is how most cloud services work, and it is not a scandal — but it means the company can open your photos, and the interesting question becomes what it does with that.

End to end describes who holds the key: only the people at the ends. The company’s servers store scrambled data they can’t read. It rules out everything the company might do with the photos, good and bad: no ads based on them, no AI on them, no previews, no search — and no recovery if you lose your key.

What each app says

ShowHiding Google Photos, iCloud Shared Albums, Amazon Photos and WhatsApp — the services most families already have. Nothing is re-scored. Why this filter exists.
Kin Album, FamilyAlbum, WhatsApp, iCloud Shared Albums, Keepr Circle, Google Photos, Amazon Photos, Tinybeans, PhotoCircle, 23snaps, TinyNest, BackThen, Qeepsake and Cluster on 2 criteria. Each cell is the app’s own statement; the bracketed numbers link to the sources below.
CriterionKin Album*FamilyAlbumWhatsAppiCloud Shared AlbumsKeepr CircleGoogle PhotosAmazon PhotosTinybeansPhotoCircle23snapsTinyNestBackThenQeepsakeCluster
Can the company open your photos?No — end to end, with disclosed exceptions[1]Yes — in transit only; staff access for support[2]No — chats end-to-end encrypted[3][4]Yes — excluded from Advanced Data Protection[5]Yes — 'in transit and at rest', not end to end[6][7]Yes — Google processes the library[8][9]Yes — servers analyse the photos[10]Yes — no end-to-end claim[11]Yes — no end-to-end claim[12]Yes — secured connections; support staff can access photos[13]Yes — SSL in transit; stored on Amazon S3; no end-to-end claim[14]Yes — stored on its own AWS servers; no end-to-end claim[15][16]Yes — SSL in transit; staff can open a journal for support or print checks[17][18]Yes — SSL in transit, stored in the cloud; no end-to-end claim[19][20]
AI or face recognition run on your photos?No — can't; photos encrypted before upload[21][1]Yes — face recognition for 1s Movies, stickers and Personal Pages; AI search on Premium Pro; no switch described[22][23]No — chats are end-to-end encrypted[3]Partly On the device only[24]Yes — own image models index photos for search by default; switchable; no face recognition[7]Yes — face groups on by default, switchable[8][9]Yes — tags, face grouping, shopping; switchable[10][25]Not stated[11]Not stated[26]Not stated[13][27]Not stated — 'memory generation' is a Pro feature[28][14]Yes — 'computer vision' to organise photos; a timelapse of the child's face; no switch described[16][29][30]Not stated[18][17]Not stated[20][19]

* Kin Album is made by Cobblestone, LLC, which runs this site. Compared on the same criteria as every other app here; no app pays us anything.

Kin Album says photos are encrypted on the iPhone before upload, that its servers store “ciphertext and wrapped keys”, and “We cannot decrypt your photos or videos”. It also lists what sits outside that: captions, comments and names; preview-size copies of the photos while anyone in the album gets photos by email; and an invitation emailed from the iPhone app, whose link carries a secret that could in principle let the company recover the album key until the invitation ends.

WhatsApp says personal messages, calls and statuses “remain end-to-end encrypted” and that “no one, not even WhatsApp, can read or listen”. That covers the chat; the photos are compressed on the way, and WhatsApp is not an album.

iCloud Shared Albums are excluded from Advanced Data Protection by Apple’s own list. Apple says its analysis runs on the device and that it doesn’t access your photos — a policy, not a mathematical guarantee.

Google Photos and Amazon Photos both process the library on their servers — face grouping and Gemini features at Google; tagging, people grouping and shopping scans at Amazon. Neither makes an end-to-end claim.

Keepr Circle says “encrypted in transit and at rest” — the honest phrase for the ordinary arrangement — and that its own image models index photos for search on its servers, with a switch to turn that off.

FamilyAlbum, Tinybeans, PhotoCircle, 23snaps and TinyNest describe encryption in transit and invite-only access. None makes an end-to-end claim; 23snaps says support staff can access photo content when their duties require it, and none of the others says what its servers do with the photos beyond operating the service.

BackThen, Qeepsake and Cluster are the same arrangement, each in its own words: BackThen’s photos sit on “a series of secure servers” in AWS, where its “computer vision” organises them; Qeepsake says staff can open a journal for support or print checks; Cluster says photos are “only accessed over an encrypted connection” and compresses them on the way in. None makes an end-to-end claim.

How to check any app in one minute

Search its security or privacy page for “end-to-end”. If the phrase isn’t there, the company holds the key. Then search for “in transit” — that phrase is usually the honest version of the same fact. Then look for what the app does with the access: face grouping, search by what’s in the photo, Memories, shopping suggestions. Each of those is a feature, and each is also a confirmation.

Sources

  1. Kin Album — Kin Album — Security (updated 6 Oct 2026), checked 2026-10-14
    Photos and videos are end-to-end encrypted for everyone who uses Kin Album, in the app or on the website. They are encrypted on your iPhone before they are uploaded … Our servers store ciphertext and wrapped keys. We cannot decrypt your photos or videos … Captions, comments, and names are stored readably … While anyone in an album gets photos in their emails, a preview-size copy of every photo posted to that album, by every member, is made outside the encryption and stored with us, beside the encrypted originals, so the emails can show the photos. Each preview copy is deleted about 30 days after its photo was posted … An invitation emailed from the iPhone app carries, in its link, a secret made for that invitation, which unlocks a copy of the album key we store for it … So until the invitation ends, we could in principle recover the album key. The link stops working 14 days after it is sent … Push notifications never contain a photo, a caption, or the text of a comment … a photo or video you choose to attach when you use Contact us in the iPhone app goes to our support team as it is — it isn’t end-to-end encrypted
  2. FamilyAlbum — FamilyAlbum User Privacy Policy, checked 2026-09-12
    Data transferred between your device and our servers is encrypted using the latest encryption technology … We don't sell your data to any third parties … Authorized employees or affiliates to provide customer support, operate our services …
  3. WhatsApp — Meta Newsroom: Helping you find more channels and businesses on WhatsApp (16 Jun 2025), checked 2026-09-12
    You'll be able to find a new business and easily start a conversation with them about a product or service they're promoting in Status … Your personal messages, calls and statuses remain end-to-end encrypted, meaning no one can see or hear them.
  4. WhatsApp — App Store listing: WhatsApp Messenger — description and App Privacy, checked 2026-09-12
    Stay close to friends and family through end-to-end encrypted group chats and calls. Share messages, photos, videos and documents across mobile, tablet, and desktop … And no one, not even WhatsApp, can read or listen … In-App Purchases: No ads (1 account) $4.00 · No ads (4 accounts) $21.99 … Data Linked to You — Third-Party Advertising: Location, User ID, Product Interaction, Advertising Data.
  5. iCloud Shared Albums — Apple Support: Advanced Data Protection for iCloud, checked 2026-09-12
    iWork collaboration, the Shared Albums feature in Photos, and sharing content with "anyone with the link," do not support Advanced Data Protection.
  6. Keepr Circle — Keepr Circle — Pricing, checked 2026-09-12
    Start free. Your whole family joins free — you only pay for the storage you share. Free Vault 5 GB storage · Photo Vault $4.99/month 100 GB storage · Pro Vault $7.99/month 250 GB storage · Life Archive $12.99/month 500 GB storage, print-ready file archival · Annual: 2 months free … New uploads simply pause until you free up some space or choose a larger plan … Private by design · Encrypted in transit and at rest · No ads, no AI training on your photos.
  7. Keepr Circle — Keepr Circle — Security & Trust (reviewed 9 Sep 2026), checked 2026-09-12
    Keepr Circle runs its own image models on its own servers for search and duplicate detection — never a third-party AI service, and nothing is used to train any model. There is no face recognition. You can switch indexing off in Profile → Privacy and delete the index it built … Media is stored in object storage and delivered through controlled access paths … Keepr Circle does not currently claim a formal security certification or a published independent penetration test.
  8. Google Photos — Google Photos Help: Set up & manage your face groups, checked 2026-09-12
    You can start or stop grouping photos based on faces that appear in your photos. If you turn off "Face Groups," you delete: Your face groups · Face models used to create those face groups · Face labels you created.
  9. Google Photos — Google Photos Help: Gemini features in Photos privacy hub, checked 2026-09-12
    We don't train any generative AI models outside of Google Photos with your personal data in Google Photos … Your personal data in Photos is never used for ads.
  10. Amazon Photos — Amazon Help: Learn more about image recognition in Amazon Photos, checked 2026-09-12
    We use image recognition technology to analyze and apply tags to your photos and videos … We may also scan your photos to show shopping recommendations based on the content of your images … Amazon will collect, store, and use records of individual faces to enable these and similar features … You may enable or disable the tagging features any time through your account settings.
  11. Tinybeans — Tinybeans: Introducing Tinybeans+ (27 Aug 2023), checked 2026-09-12
    Tinybeans+ subscribers won't be seeing any ads. No ads in albums, in-app, and no emails … 200GB of storage … Only the family and friends you invite … have access to viewing them.
  12. PhotoCircle — App Store listing: PhotoCircle — description and App Privacy, checked 2026-09-12
    Privacy First: Only invited members can access your albums and contribute content. Video Clips: Share video clips up to 1 minute long … Data Used to Track You: Contact Info, Identifiers, Usage Data … In-App Purchases: PhotoCircle Pro Monthly $1.29 · PhotoCircle Pro Yearly $9.99.
  13. 23snaps — 23snaps Help: Privacy & Security, checked 2026-09-12
    The posts you make to 23snaps are only ever visible to those you choose to share them with … The only staff who can access photo content are those who require access temporarily in order to perform their specific duties; primarily answering support requests … All of the content added to 23snaps is uploaded to our secure storage provided by Amazon and Microsoft … All communication is over secured connections … your data, and that of the people you invite to use 23snaps, is private and will not be exposed to advertising networks.
  14. TinyNest — TinyNest Privacy Policy (last updated 15 Jan 2025), checked 2026-09-12
    we secure its transmission using Secure Socket Layer (SSL) technology … Amazon S3 for storing some of your data (like your photos or files) … We do not sell your personal information to third parties … We will keep your information for as long as your account is active … backup copies might remain.
  15. BackThen — BackThen FAQ — Is BackThen safe?, checked 2026-09-13
    We store and backup your photos and videos on a series of secure servers, inaccessible directly from the outside world. Your timeline is then served up only to your account and those you share it with … Our servers are based in Amazon's cloud infrastructure (AWS), with all industry standard security measures enforced … Your timeline cannot be discovered, it can only be accessed via invites you send.
  16. BackThen — BackThen privacy policy, checked 2026-09-13
    With computer vision and analysis of photo metadata, we can help you more easily organize and enjoy your collection of photos on our online photo storage services … Device and platform identifiers let us know which device you are using to access our Services in order to customize and optimize them to your device … We do not share location information with third parties nor sell it to anyone … Unfortunately, no data transmission over the Internet or data storage system can be guaranteed to be 100% secure.
  17. Qeepsake — Qeepsake help — Is Qeepsake private and secure?, checked 2026-09-13
    Qeepsake uses 256-bit SSL encryption, which means your interaction with Qeepsake through texts, the app, or website is completely private and secure. Qeepsake does not sell, rent, license, or distribute the contents of anyone's journal for any reason … The only reasons a team member would access a family's journal is for troubleshooting an issue or to ensure the printed quality of Qeepsake Books.
  18. Qeepsake — Qeepsake privacy policy (Tinybeans USA Ltd), checked 2026-09-13
    The Service is provided to you by Tinybeans USA Ltd … We may process your information to develop and display personalized content and advertising tailored to your interests, location, and more … We do not sell or share your personal information for cross-context behavioral advertising purposes … Our application(s) may display a third-party hosted “offer wall.” … The Qeepsake website uses 256-bit SSL encryption … all Tinybeans staff members who have access to journal information have passed a criminal background check and sex-offender registry check … If you delete your account or request deletion, we will remove your personal information from our active systems within a reasonable timeframe, typically within 30 days.
  19. Cluster — Cluster support — How are my photos kept safe?, checked 2026-09-13
    Your photos are saved in high quality and stored in redundant locations in the cloud. Your photos are only accessed over an encrypted connection, so they cannot be located by anyone who does not have access to the group itself.
  20. Cluster — Cluster privacy policy, checked 2026-09-13
    We neither rent nor sell your Personal Information in personally identifiable form to anyone … We employ SSL to encrypt communications between our servers and client applications … We do not currently have any third-party advertising cookies, nor do we currently have any third-party data agreements that would share any of our customer's info … We provide a tool for downloading user data … You can also delete your account and all your data here: https://cluster.co/user/delete.
  21. Kin Album — kinalbum.com home page, checked 2026-10-14
    Kin Album is a private family photo album for the people you invite and no one else. Photos and videos are end-to-end encrypted, so Kin Album can't look at them … Free for 3 GB, about 1,000 photos, shared by every album you own · unlimited for $9.99 a month or $89.99 a year · relatives never have to pay … You are not the only one who can post — make someone else an admin and their photos land in the same album … There are no ads in Kin Album. It is paid for by subscriptions, and that is the whole business … No AI on your photos. Ever. … Stop paying and the album moves to the free plan; nothing is deleted for two years, and never without 90 days’ notice and a free export … Family can look in the app on an iPhone or iPad, or in any browser on a computer. Or just email them the photos, with no app and no account at all … If you invite her as a member, she signs in once. If you add her as an email recipient, the photos just arrive in her email. She needs no account … Albums are created in the iPhone app. Invited family on a computer or an Android phone join right here. On an iPhone or iPad, their invite link gets them the app. The app isn't in the App Store yet.
  22. FamilyAlbum — MIXI — The tech behind FamilyAlbum, checked 2026-10-17
    FamilyAlbum utilizes machine learning … all while protecting privacy … First, we utilize deep learning to identify faces/people in photos … This feature makes use of AI-based similarity search … AI is used to detect, filter, and rate the best photos for stickers … Detect faces in photos, determine pose and age … AI is also used in the creation of Personal Pages … automatically identify faces by getting the feature vectors for each face … use a machine learning technique called clustering to separate them into groups.
  23. FamilyAlbum — FamilyAlbum Privacy Policy (full text), checked 2026-10-18
    Last updated 10/02/2026 … Perceptual hashes of photographs and video clips, feature vectors representing visual content of photographs and video clips, feature vectors of users' faces, face detection results of each user (including face orientation data and face detection confidence scores), the estimated gender and age of each user's face, results of classifications of facial images of each user (used for album function for each user) … Certain information described above may be processed solely on the user's device and may not be transmitted to us … Biometric information … We use Anthropic's AI models to process only text data within AWS-managed infrastructure.
  24. iCloud Shared Albums — Apple: Photos & Privacy, checked 2026-09-12
    Photos uses on-device machine learning to deliver a personalized experience … Photos additionally uses on-device analysis to recognize the faces of people in photos … Apple does not access your photos or videos, and does not use them for research and development.
  25. Amazon Photos — Amazon Help: What is Amazon Photos?, checked 2026-09-12
    5 GB of free storage for all Amazon customers. Unlimited full-resolution photo storage, plus 5 GB of video storage, for Amazon Prime members … Image recognition for people, places, and things … Prints, photo books, and digital greeting cards.
  26. PhotoCircle — PhotoCircle Help: What is a PhotoCircle+ subscription?, checked 2026-09-12
    The price is $1.29 per month or $9.99 per year … An ad-free experience for the subscriber only · Longer videos (up to 4 minutes) · Search (based on Circle name and photo captions) · Larger upload limit (up to 200 photos at a time) · Option to download all media in a Circle at once · Slideshow (available on web).
  27. 23snaps — 23snaps Privacy Policy (effective June 2012), checked 2026-09-12
    23 Snaps Limited (Company Registration 07853831) … 160 City Road, Kemp House, London, EC1V 2NX, United Kingdom … We will not share your data with third parties for marketing purposes unless We have procured your express consent to do so.
  28. TinyNest — tinynestapp.com home page and FAQ, checked 2026-09-12
    Invite-only & private: Only people you invite can see your photos. No public profiles, no strangers, no ads … Unlimited storage: Never worry about running out of space … Is TinyNest free to use? TinyNest is free to download with unlimited photo storage … We also offer a Pro plan … They can join by downloading TinyNest and tapping the invite link. No account setup headaches … Your photos are never shared publicly, never used for ads, and never seen by anyone outside your family circle … Every person you invite has a "Can screenshot" permission that you can turn off … Every screenshot is logged too … TinyNest is available on both iOS (iPhone & iPad) and Android … Pro unlocks unlimited videos, unlimited memory generation, and many more features.
  29. BackThen — backthen.com home page, checked 2026-09-13
    Save photos of any size, videos of any length, plus unlimited milestones and stories. The original quality of your content is preserved (we don’t compress!) … 100% privacy - no ads and no data-sharing … Our timelapse tech shows you how their face changes over time … Enjoy 1GB of free storage … VIP Subscription £4.99 / $6.49 / €5.99 Storage limit: 200GB … Our pet-app is included for FREE. 1 account, 2 apps, working seamlessly together.
  30. BackThen — BackThen FAQ — Who can see my memories?, checked 2026-09-13
    The only people who can see your timelines are you, anyone you invite, and anyone another parent invites … BackThen does not autodetect a child in a photo, simply because doing so incorrectly may mean someone sees a photo you didn't want them to.
Across all fourteen apps

Does Grandma need an app? · Video limits in family photo apps · Which family photo apps compress your photos?

Each app’s safety guide

Is the Kin Album app safe and private? · Is FamilyAlbum safe? · Is Tinybeans safe? · Is Google Photos safe for family sharing? · Are iCloud Shared Albums safe? · Is Amazon Photos safe? · Is WhatsApp safe for family photos? · Is PhotoCircle safe? · Is Keepr Circle safe? · Is 23snaps safe? · Is TinyNest safe? · Is BackThen safe? · Is Qeepsake safe? · Is Cluster safe?

Also

Best private family photo app → Best family photo app with no AI on your photos →

Questions people ask

What does 'encrypted in transit and at rest' mean?

The photo is scrambled while it travels to the server and while it sits on the disk — but the company holds the key, so its own systems can read the photo whenever they need to. That is what lets an app search your photos, group faces, make previews or show shopping suggestions. Google Photos, Amazon Photos, iCloud Shared Albums and Keepr Circle all work this way, and Keepr says so in those words.

What does 'end-to-end encrypted' mean?

The photo is scrambled on your phone with a key the company never receives, so the company cannot read it even if it wants to or is ordered to. Kin Album says this of its album; WhatsApp says it of chats. The cost is that the company can’t do anything with the photos — no server-side search, no face grouping, and if you lose your keys the company can’t recover the photos for you.

Are iCloud Shared Albums end-to-end encrypted?

No. Apple’s Advanced Data Protection page says ‘the Shared Albums feature in Photos’ does ‘not support Advanced Data Protection’. Your own library can be end to end encrypted with ADP on; shared albums stay under standard encryption with keys Apple holds.

Every question on the site, on one page →