Short answer: ask where the photos are stored, who can open them, what you must sign up for, what leaves the phone and what the app does not tell you. The answers are on the store page, or they are missing — which is also an answer.
1. Where are the photos stored?
On a company's servers, or on the members' phones? Neither is automatically wrong, but they carry different risks: servers can be breached, retained, subpoenaed and shut down; phones can be lost. Halation keeps photos on the phones in the album and has no server that stores them.
2. Who can open them?
Ask whether the operator can read your photos, and whether "locked until a date" is a rule or a fact about the cryptography. In Halation, a sealed album is encrypted to a future moment; there is no key to hand over early. For an open album, the rule is plain: anyone who has the link is in.
3. What do you have to sign up for?
Account, email, phone number, subscription? Each one is a step guests will drop out at, and a record that exists somewhere. Halation has no account, no sign-up, no subscription, no ads and no watermark.
4. What leaves the phone?
This is the question apps most often answer with a slogan. Look for the privacy label on the store page, then check the claim against how the app works. If photos are shared with other people, an app cannot honestly say nothing leaves the phone.
| Claim | Is it credible for a shared album? |
|---|---|
| "Nothing ever leaves your device." | Not if photos are shared with other members. |
| "No data collected." | Plausible when there is no account and no analytics, provided the other members' sharing is described. |
| "End-to-end encrypted." | Ask: what encrypts it, and who holds the keys? |
| "Secure." | Means nothing on its own. |
Halation's own answer: photos leave your phone for the other members' phones, encrypted; a public relay forwards encrypted traffic when two phones cannot connect directly; editing works with no connection at all. The App Store lists "Data Not Collected" for the app. The app never asks to read your whole library: iPhone grants only write access to save, and Android's picker hands over only what you choose.
5. What does it not tell you?
Every design has a cost, and honest apps state theirs. Halation's: photos only move when two phones are online around the same time, and anyone who holds the link is in the album.
A quick score
- Can you say where the photos live in one sentence?
- Can the operator read them?
- Can a guest join without registering?
- Does the privacy claim survive the sharing it enables?
- Does the app name one trade-off of its own?
Five yes answers is rare. Four with the fifth explained is a good app.
Sources
An album that answers the five questions
Free, no account, no ads. iPhone and Android.