Share private photos with a phrase, not a link

Shared albums and chats keep copies on servers and on every device that received them, with no end date. A VaultCube share is encrypted end to end, opens only with the phrase, and stops opening when it expires or you revoke it. Copies already received stay with the recipient.

1. In a vault: Vault settings → Share this vault (or a folder's menu → Share this folder).
2. Choose what to share, then set:
   • Opens: 1, 3, 5, 10 or unlimited
   • Expires: after 1 hour, 1 day, 7 days or 30 days
   • View only: on by default. VaultCube won't let the recipient share or export them
3. Send the 4 words any way you like: in person, by message or by phone.
4. They set up VaultCube if they haven't, then tap Join shared vault on the unlock screen, type the words and draw their own pattern. The photos land in a new vault on their iPhone, encrypted under their own key.
5. Active shares show "opened n of N" and the time left. Revoke deletes the share from iCloud, so nobody new can open it; copies already opened stay with the recipient.

• Your vault key never leaves your iPhone. Each shared file is encrypted again under a new key that only the phrase unlocks.
• The share is stored encrypted in VaultCube's public iCloud database, readable only with the phrase. Expired shares can't be opened and are deleted from iCloud the next time you open the vault.
• Notifications name nothing: "A share was opened" and "A share expired", because your lock screen can be seen.

• Anyone with the phrase can open the share until it's used up, expires or is revoked. Send it only to the right person. Short-lived shares are safest: the 4 words protect it, not a password.
• Expiry and open limits are enforced by the app. Revoking is the hard stop.
• Both people need an iCloud account and VaultCube. Opening the share uses one of its opens, even if the recipient cancels halfway.
• The recipient has a copy. View-only stops sharing it on from VaultCube; it can't stop a camera pointed at the screen.