About
About Bunker and who builds it
Bunker is built by one person: the founder, an independent developer who designs, writes, tests and supports the app. There is no company behind it collecting your data, no investors asking for growth at any cost, and no account system, because Bunker was designed so that nobody at Bunker, including the founder, can open your vaults.
Who builds Bunker
Why Bunker exists
Most photo vault apps make one of two mistakes. Some lose people’s photos when they move to a new phone. Others call themselves secure while keeping a copy of the keys, or while showing anyone who looks that a hidden vault exists.
Bunker was built to avoid both, and to add something few apps think about: what happens to your private photos and papers if something happens to you. Legacy Vaults let a few people you trust open a read-only copy of one vault together, with printed Legacy Cards, without us, or any one of them, being able to open it alone (unless you choose a single contact).
What Bunker promises
These principles settle every design argument. The manifesto explains them in full.
- Your data stays safe even if we’re compromised. Nothing depends on trusting our servers, Apple or an analytics company with your files or keys.
- Never lose your data. Every step that could destroy data has a recovery path, a confirmation, or both.
- Deniable by default. A Pattern that opens nothing looks exactly like one that opens a vault, until the result appears.
- Calm, not scary. Security shown through clarity, not warnings.
- Honest limits. We say what Bunker doesn’t protect against, on every page.
How Bunker is built and checked
Bunker is a native Swift app for iPhone, iPad and Mac, with one codebase and very few dependencies: Apple’s own frameworks, plus the libsodium library for Argon2id key derivation. The founder builds it with the help of AI coding agents, under written rules that put security decisions in the founder’s hands alone: the agents can’t change the cryptography, the file formats, anything that deletes data, or anything that sends data off your device without the founder’s recorded approval.
The cryptography was reviewed by three independent AI review agents, each started fresh with only the code, the tests and the design: one looking for bugs, one attacking the design as an adversary, and one checking every claim on this site and in the App Store listing against the code. Every finding was fixed or answered in writing. That isn’t a paid external audit, and we don’t claim one. The full design, with its limits, is on the security page.
What we don’t do
- No account and nothing to sign in to.
- No ads and no tracking across apps.
- No copy of your keys, so no way for us to open or recover a vault.
- No selling or sharing of data, because we don’t have yours. Read the Privacy Policy.
Contact
- Help with the app: [email protected], or Send Feedback in the app. See Support.
- Security reports: [email protected].
- Press and everything else: [email protected].