Your camera roll is personal.
Keep it that way.
A private, on-device review of your iPhone photo library. Private Roll flags potentially sensitive photos, keeps them blurred until you unlock with Face ID, and helps you move the ones you choose into protected Private Spaces before you share, sell, repair, or lend your iPhone.
Opens your email app with a message to support@halonso.dev. Nothing is collected by this page.
The On-Device Review Workflow.
Try it here.
Tap Run Scan to see a simulated on-device scan, then tap Face ID to Reveal on a flagged photo and decide what to do with it. This simulation runs in your browser with sample images.
Simulation with sample images. In the app, detection uses Apple's on-device Sensitive Content Analysis, which flags potentially sensitive images (nudity) only when Sensitive Content Warning is turned on in iOS Settings. It can miss photos or flag ones that aren't sensitive. Documents, IDs and medical photos are never detected; you can move any photo into a Private Space yourself.
Four Pillars of
On-Device Privacy
Private Roll isn't another photo vault. It's a review workflow built on Apple's on-device frameworks, with no account and nothing sent to us.
On-Device Sensitive Photo Detection
Private Roll uses Apple's SensitiveContentAnalysis framework to check your library on your iPhone and flag potentially sensitive images (nudity). iOS only runs this analysis when Sensitive Content Warning is turned on in Settings › Privacy & Security, and Private Roll walks you through turning it on. It doesn't look for documents, faces, or locations, and like any detector it can miss photos or flag ones that aren't sensitive.
Face ID–Locked Private Spaces
Apple's Hidden album is a single album with no way to find or review what belongs there. Private Roll gives you Face ID–locked folders for protected copies of the photos you choose, and you decide what goes where: Private Review, Personal, Medical, Documents, Work, and Archive.
Before-You-Hand-Over Checklists
Handing your iPhone to a repair shop, selling it, or passing it around the table? Step-by-step checklists remind you to review flagged photos, move what you want to keep into Private Spaces, delete originals, and empty Recently Deleted.
No Private Roll Servers • One-Time Purchase
Many photo vault apps rely on weekly or annual subscriptions and third-party analytics. Private Roll has no account, no backend, and no analytics, ads, or tracking. Scanning is free, and Pro is a single one-time in-app purchase. The only network activity comes from Apple: the App Store when you buy or restore Pro, and iCloud Photos when it downloads a photo so it can be analyzed on your iPhone.
The High-Stakes Moments.
Review before you hand over.
Whether you're leaving your iPhone at a repair shop, trading it in, or passing it around the dinner table, Private Roll walks you through a step-by-step checklist. Before Showing Camera Roll is free; the repair and resale checklists are part of Pro.
Don't Just Take Our Word.
Check It Yourself.
Private Roll has no servers, so there is nowhere for your photos to be sent. Below is an illustration of what happens to a photo during a scan. You can review any app's network activity yourself with App Privacy Report in Settings › Privacy & Security.
The only network activity involved comes from Apple system services: the App Store when you buy or restore Pro, and iCloud Photos when it downloads a photo's data so it can be analyzed on your iPhone.
Why Existing Options Fall Short
Apple's Hidden album is a single album with no way to find what belongs there. Many vault apps need you to import photos by hand and charge recurring subscriptions. Private Roll pairs on-device detection with Face ID–locked folders you organize.
| Feature & Capability | Private RollOur App | Apple Photos 'Hidden' | Generic Photo Vaults | Storage Cleaners |
|---|---|---|---|---|
| Automatic DetectionScans your library on-device for potentially sensitive photos (nudity) | ✓ Apple Sensitive Content Analysis | ✕ You find photos yourself | ✕ Usually manual import | ~ Duplicates & similar shots |
| Organized Private SpacesSeparate Face ID–locked folders you organize, such as Personal, Medical, Documents, Work | ✓ Yes, you choose what goes where | ✕ One Hidden album | ~ Folders vary by app | ✕ No spaces |
| Before-You-Hand-Over ChecklistsGuides for device repair, selling or trade-in, and showing photos | ✓ Step-by-step checklists | ✕ None | ✕ None | ✕ None |
| No Developer ServersYour photos are never uploaded to the app's developer | ✓ No Private Roll servers | ~ Syncs with iCloud Photos if on | ~ Varies; some sync to their own cloud | ~ Varies; analytics SDKs are common |
| Blurred Until UnlockedFlagged photos stay blurred until Face ID, Touch ID or passcode confirms | ✓ Blur + Face ID reveal | ✓ Album Face ID lock | ✓ Passcode / Face ID | ✕ None |
| Clear Copy TrackingShows whether the original is still in Apple Photos | ✓ Original status per photo | ~ Photo stays in your library | ~ Varies by app | ✕ None |
| PricingHow you pay | ✓ Free scan + one-time Pro unlock | ✓ Free with iOS | ✕ Often weekly or annual subscriptions | ✕ Often weekly or annual subscriptions |
The On-Device Security Architecture
Private Roll has no account and no servers, so there is nowhere for your photos to be sent. Analysis runs on your iPhone, and everything the app stores stays in its sandbox on your device.
Photos Access
Works with Full Access or Limited Access. Private Roll only reads the photos you allow. If a photo is stored in iCloud, iOS may download it so it can be analyzed on your iPhone.
SensitiveContentAnalysis
Apple's on-device framework flags potentially sensitive images (nudity). It only runs when Sensitive Content Warning is on in Settings › Privacy & Security. No cloud analysis.
App Sandbox Storage
Protected copies you save are written with FileProtectionComplete, so iOS keeps them inaccessible while your iPhone is locked. They're excluded from backups, as are scan results.
Take Control of Your
Private Camera Roll
Private Roll is a free download for iPhone. Scan your whole library for free, then unlock Pro with a one-time purchase if you want to privately review every flagged photo.
This opens your email app with a message to support@halonso.dev. There's no sign-up form or mailing list; the developer will reply to let you know when Private Roll is available.
- Scan your whole library on-device
- See how many photos were flagged
- 5 free private reviews
- Default Private Spaces
- Before Showing Camera Roll checklist
- Privately review every flagged photo
- Create your own Private Spaces
- Before Device Repair checklist
- Before Selling/Trading Device checklist
- No subscription; restore any time
Answers to Your Privacy Questions
How Private Roll processes photos on your iPhone, what it can and can't detect, and how pricing works.
Does Private Roll ever upload my photos or thumbnails to a server?
No. Private Roll has no backend server, no account, and no analytics, advertising, or tracking. Photos are analyzed on your iPhone using Apple's SensitiveContentAnalysis framework, and nothing is sent to the developer. The only network activity comes from Apple system services: the App Store when you buy or restore Pro, and iCloud Photos when a photo stored in iCloud has to be downloaded to your iPhone so it can be analyzed. You can review app network activity in Settings › Privacy & Security › App Privacy Report.
Why do I need to turn on Sensitive Content Warning?
Private Roll relies on Apple's on-device Sensitive Content Analysis, and iOS only runs it when Sensitive Content Warning is turned on. It's off by default for adults, and until it's on, scans can't flag anything. To turn it on:
- Open Settings › Privacy & Security.
- Tap Sensitive Content Warning.
- Turn it on, then come back to Private Roll.
Private Roll walks you through this when you first open it and shows whether the setting is on in its own Settings screen. Turning it on also enables Apple's blur warnings for sensitive content in some other apps.
What kinds of photos can Private Roll detect?
Only one kind: images that Apple's Sensitive Content Analysis considers potentially sensitive, which means nudity. Private Roll does not detect documents, IDs or passports, medical photos, financial screenshots, faces, or location data.
You can still move any photo into a Private Space yourself. The Medical and Documents folders are there for you to organize, not categories the app finds for you.
How accurate is detection?
Detection is done by Apple's framework and isn't perfect. It can miss sensitive photos, and it can flag photos that aren't sensitive (you can mark those as safe). Treat the review queue as a starting point rather than a guarantee, and check anything you're unsure about yourself, especially before selling your iPhone or sending it for repair. Private Roll can only check the photos you've given it access to.
How does Private Roll differ from Apple Photos' built-in Hidden album?
Apple's Hidden album is a single album: you find and hide photos yourself, and there's no discovery or review workflow. Private Roll adds on-device detection of potentially sensitive photos, a private review queue, Face ID–locked folders you organize (Private Review, Personal, Medical, Documents, Work, and Archive), and checklists for moments like device repair or resale. You can use both together.
What actually happens when I move a photo into a Private Space?
Private Roll saves a protected copy inside its app sandbox, using iOS Data Protection (FileProtectionComplete) and excluded from backups. The original stays in Apple Photos, and in iCloud Photos if you use it, until you delete it. Private Roll shows whether each original is still in Photos and offers to delete it. iOS asks you to confirm every deletion, and deleted photos stay in Recently Deleted for 30 days unless you empty it.
Because protected copies are excluded from backups, once you delete the original the copy in Private Roll may be your only one. Deleting the app or using Wipe All Local Data removes it permanently, and it isn't restored to a new iPhone from an iCloud or computer backup.
What does Private Roll store, and how do I delete it?
Scan results are stored only on your iPhone, in a database excluded from backups, along with any protected copies you saved. In Private Roll's Settings, Clear Scan Cache removes scan results, and Wipe All Local Data removes scan results, Private Spaces, and protected copies. Deleting the app removes everything too.
What does it cost? Is there a subscription?
There's no subscription. Private Roll is a free download. For free you can scan your whole library, see how many photos were flagged, privately review 5 flagged photos, use the default Private Spaces, and use the Before Showing Camera Roll checklist.
Pro is a one-time in-app purchase that lets you review every flagged photo, create your own Private Spaces, and use the Before Device Repair and Before Selling/Trading Device checklists. Purchases are handled by Apple; to restore Pro on a new iPhone, tap Restore Purchase in Settings or on the upgrade screen.
Is Private Roll available for iPad or Mac?
Not at launch. Private Roll is for iPhone and requires iOS 26.5 or later. Questions? Email support@halonso.dev or visit the support page.