Launch offer Lifetime Premium, 90% off $3.99 $39.99 Redeem

For everything that matters most.

Sealed in your phone. Yours alone.

Passports, IDs, health cards, wills, deeds, photos. Encrypted by your phone's hardware. Recoverable on your terms. Even we can't open it. That's the point.

Download on the App Store See how it works
See it in action

Watch it work.

A run through Kinship Vault the way you'd actually use it, scanning documents, organizing them, and sealing everything behind Face ID. Every bit of it happens on the phone.

What it does

Built for the things you can't afford to lose.

Reads them, watches their dates, and seals them behind hardware encryption. No byte ever leaves your phone.

📄

It reads what you already carry.

Passports, driver's licences, health cards, tax forms, wills, all automatically recognized across 100+ document types worldwide. Photos and personal scans come along too, encrypted the same way. Nothing leaves your phone.

🔑

Recovery, on terms you decide.

A passphrase you write down once. A circle of people you'd trust with your life. A quiet safety net for the people who'd need it most. Choose what fits, pick any, all, or none.

⏰

It watches the dates so you don't have to.

Calm reminders 90, 30, 7, and 1 day before any document expires. Renewals never sneak up on you, and no third party ever sees the dates.

🤐

Quiet by design. Even from us.

No analytics. No telemetry. No "we collect anonymized data." Your decryption stays on your phone, always. We don't know who you are, and we couldn't read your vault if we wanted to.

"Recovery is cryptographic, not corporate."

There's no "email reset" link, because there's no company holding your key. Your decryption stays on your device, sealed by Secure Enclave. We literally cannot unlock your vault, and we built it that way on purpose.

How the keys work

The key is yours. Literally.

Most apps protect your data with a password they can help you reset. Kinship Vault's root secret is not a password at all. It's a hardware-sealed random key that only your phone can produce.

1

The key is born on your device.

A 256-bit master key, either 32 random bytes from your device's secure random generator, or rebuilt from your BIP39 recovery phrase. That's 256 bits of real entropy, not a password someone could guess. There is nothing to brute-force.

2

It's sealed in hardware.

The master key is wrapped by your iPhone's Secure Enclave using ECIES, a hardware key that physically cannot leave the chip. It's unwrapped only after Face ID or Touch ID. At rest, the key is hardware-sealed.

3

Every document gets its own key.

From that master key, Kinship Vault derives a separate key for each document using HKDF (HMAC-SHA-256). Each file is then encrypted on its own with AES-256-GCM.

4

No key ever leaves the phone.

None of these keys are sent to a server, ours or anyone else's. A data breach or a legal request on our side turns up nothing, because there is no key on our side to hand over.

A closer look

Quietly serious about the things you keep.

From the first time you open it, to the moment someone you trust steps in.

Kinship Vault biometric unlock screen with Face ID and PIN keypad

Opening it

The only person who can open it is you.

Face ID, Touch ID, or a 6-digit PIN. Authentication happens entirely on your device. There's no Kinship Vault account, no password reset, no email recovery link.

If your phone is in your hand and your face is in front of it, the vault opens. Anything less, it stays sealed.

Document scanner extracting fields from a driver's license

Filling it

It reads the documents you already carry.

Point the camera at a passport, driver's licence, health card, or tax form. The app recognizes the structured fields automatically across 100+ document schemas worldwide, and encrypts everything before it touches storage. Photos and personal scans come along too.

Nothing is sent to a server. Nothing leaves your phone.

Trusted contacts list with recovery holders

The people you'd choose

Your inner circle, where it belongs.

The people you'd want to step in if your phone disappeared, or if something happened to you. Each holds an encrypted recovery piece, a sealed envelope they can return only when you ask for it.

They never see what's inside the vault. Just a fragment of a key that, on its own, opens nothing.

Recovery network screen showing four trusted contacts holding shards

Getting back in

Recovery, written by you. Held by them.

If you lose your phone, three of your trusted people can hand back their pieces and you're in. No cloud download. No support ticket. No password-reset email that could be intercepted.

Recovery happens entirely between you and the people you've already chosen, exactly the way you set it up.

Emergency mode showing blood type, allergies, and ICE contacts

When seconds count

Calm and ready, without unlocking everything.

Blood type, allergies, ICE contacts, travel ID. Readable in one tap, even when the vault is locked. Available the moment you (or someone helping you) needs them.

The rest of what you're keeping safe stays exactly where it is. Sealed.

Across your devices

Bring it with you. Without breaking the seal.

Open the same vault on your iPhone and iPad. The key passes between your two devices in person, sealed in their Secure Enclaves, never through us.

Bring My Vault
Open the same vault on another device, with no server in the loop
Step 1 of 4
8:37
iPhone
8:37
iPad
Questions

The things people ask first.

Can Kinship Vault read my documents?
No. Your documents are encrypted with a key that is generated and sealed on your device and never sent to us. We hold no copy of your key, so there is nothing on our side that could decrypt your vault, even if someone asked us to.
What encryption do you actually use?
Your root secret is not a password, it's a hardware-sealed random key. A 256-bit master key is created on your device, either 32 random bytes from the operating system's secure random generator or rebuilt from your BIP39 recovery phrase, which is 256 bits of real entropy and not something that can be brute-forced. That master key is wrapped by your iPhone's Secure Enclave (ECIES, a hardware key) and unwrapped only after Face ID or Touch ID. From it, Kinship Vault derives a separate key for every document using HKDF (HMAC-SHA-256), then encrypts each file with AES-256-GCM. There is no master password, so there is nothing for anyone to guess or for us to reset.
What happens if I lose my phone?
You set recovery up in advance. Write down a recovery passphrase, or split a recovery key across people you trust so a few of them together can help you back in. Recovery happens between you and the people you chose, with no cloud download and no reset email.
Can I use the same vault on my iPhone and iPad?
Yes. On the device that already has your vault, open Settings and tap "Link a New Device." A QR appears on screen for 60 seconds, and iOS blocks it from screenshots and screen recording so it can't leak. On your other iPhone or iPad, open Kinship Vault, tap "Bring My Vault," and point the camera at the first device. The key passes directly between the two devices through that on-screen code, and your documents come down from your own encrypted iCloud backup and are decrypted only on the second device. Nothing about the handoff routes through our servers. See the four-step walkthrough.
Do my documents get uploaded anywhere?
Not unless you choose to. Kinship Vault works fully offline. If you turn on backup, it is encrypted with your key and stored in your own iCloud, on your terms.
Is there an account or password to create?
No account, no password, no email. The app is tied to your device and your biometrics, which also means there is no account for anyone to phish or breach.

Yours alone. By design.

No middleman. No analytics. No password-reset email that could compromise everything you cared about protecting. Just the documents you keep close, the people you trust, and the phone in your pocket.

Download on the App Store