Your memories are protected the moment you create them.
Most apps can open your photos whenever they like. Gabyly is built so we simply can't, your memories are end-to-end encrypted, and only you decide who sees them and for how long.
Protected from every angle
End-to-end encrypted
Every photo and video is locked on your device before it's uploaded. We only ever store unreadable data.
We can't see your memories
Only you and the people you choose can open a shared memory. We hold none of what's needed to view it, by design.
Tamper-proof watermark
A discreet watermark is part of every image, so it travels with your photo and can't be quietly removed.
You decide how long
Set a lifetime and the memory disappears automatically. When it's gone, it's gone, for everyone.
You control access
Protect memories with a password, limit who can view, and let a link expire whenever you choose.
European, GDPR-first
Your data stays on servers in Europe, handled to the strictest privacy standards. We never sell or analyse your content.
If we can't read your family's photos, no one else can either. That's the difference.
Privacy you can count on
Security isn't abstract, it's built into every memory you share. Here's what that means in practice.
10 min–∞
you choose how long every link lives, from 10 minutes to forever
You set the lifetime
AES-256
every photo and video is encrypted end-to-end before it leaves your device
End-to-end encryption
EU
your files are stored on servers in Europe
European data residency
0
third-party trackers or advertising cookies on the links you share
On the links you share
1-tap
erase any memory whenever you want, with a single tap
Instant delete
GDPR
your privacy rights respected, by design
Privacy by design
Expiring links, end-to-end encryption and European servers work together so that your memories stay private, temporary and fully under your control.
Privacy-first by design: end-to-end encryption, European hosting and GDPR-aligned data protection.
Architecture & key management
Full transparency on how Gabyly protects your memories. Every step below happens in your browser, the keys that can read your files never reach our servers.
Keys are born on your device
When you create a memory, your browser generates a random 256-bit AES-GCM content key. It is never sent to us in readable form.
Files are encrypted before upload
Each photo or video is encrypted with AES-256-GCM in your browser. We only ever receive an opaque, encrypted blob, never the original.
Your personal key-vault
A per-account master key wraps each memory's content key. The master key itself is wrapped twice with PBKDF2 (200k iterations): once under your password, once under a one-time recovery key. We store only these wrapped blobs.
Zero-knowledge by design
Our servers hold encrypted files plus wrapped keys we cannot open. Recipients get the content key only inside the private link fragment (#k=…), which never leaves the browser or reaches our logs.
Recovery & starting over
Forgot your password? Restore previews with your recovery key. Lost both? Because we genuinely can't read your data, the only option is to wipe the old vault and start fresh, your account stays usable for new memories.
This is what "zero-knowledge" really means: the trade-off for true privacy is that nobody, not even Gabyly, can recover your encrypted memories if you lose both your password and recovery key.
Security, transparency and control
Everything we do to keep your memories private, available and under your control, and how to reach our security team.
GDPR & data protection
We collect the minimum data needed, store it on servers in the EU, and let you export or permanently delete your account and memories at any time. Consent is recorded and versioned at sign-up.
Backups & business continuity
Your memories are end-to-end encrypted, so backups only ever contain unreadable ciphertext. We keep documented backup and disaster-recovery procedures and can restore the service from versioned, rollback-ready deployments.
Availability & monitoring
The platform runs on managed cloud infrastructure with continuous logging and an append-only admin audit trail. Suspicious activity, failed logins and rate-limit breaches are tracked and throttled automatically.
Incident response
We follow a defined incident-response process: detect, contain, assess, notify and recover. In the unlikely event of a personal-data breach, affected users and the relevant authority are notified in line with the GDPR (within 72 hours where required).
Responsible Disclosure
We welcome security researchers. If you believe you've found a vulnerability, please report it privately to our security team and give us reasonable time to fix it before any public disclosure.
- Do not access, modify or delete data that isn't yours, and avoid privacy violations or service disruption.
- Provide enough detail to reproduce the issue; we'll acknowledge your report and keep you updated.
- Act in good faith and we won't pursue legal action for testing that respects this policy.
Encryption FAQ
Can Gabyly see my photos?
No. Your files are end-to-end encrypted on your device, and we only ever store unreadable data. We have no way to view them.
What if someone intercepts the link?
Anyone with the full link can open the memory, so share it privately. You can also add a password and a short lifetime so it disappears.
What if I forget my password?
Your shared links keep working. To restore previews in your own albums on a new device, use your Recovery Key, a one-time code shown at sign-up. Keep it safe: without it and without your password, previews can't be recovered. That irrecoverability is exactly what makes it truly private.
Do you keep a copy of my files?
Only the encrypted blob, and only for the memory's lifetime. When it expires or you delete it, it's removed. We never sell or analyse your content.
Do shared albums stay encrypted too?
Yes. When you invite people into an album, each person's photos and videos are encrypted on their own device, and the album key is shared securely so only members can open it. Gabyly never sees the contents: collaboration stays zero-knowledge.
Your family's memories deserve a safe home.
Join the parents who share without fear, with a calm mind.
Start sharing privately