Choose by your work and circumstances

Private archives for activists and organizers

Keep selected photos, notes and documents separate while accounting for participant consent, shared copies and the limits of a personal device.

· September 7, 2026

Keep selected photos, notes and documents separate while accounting for participant consent, shared copies and the limits of a personal device.

Decide whether the record should exist on this phone

An event photograph can identify people through faces, clothing, location or the surrounding scene. Encryption at rest cannot resolve whether keeping or sharing that record is appropriate. Consider the people represented, your reason for retaining it, and the consequences if someone sees an unlocked copy.

A smaller necessary archive can be easier to manage than a large collection of everything captured. This is a retention decision, not a promise that deleting one copy removes every other copy.

Useful NullVault boundaries

Encrypted photos, files and notes provide app-managed storage. Pattern-addressed vaults separate ordinary access. Secure export makes it important to choose which items leave that boundary and where they go.

If you publish a copy, review visible identifiers as well as metadata. The photo-metadata tool cannot remove information visible in the image. A recipient can also save material after viewing it.

Prepare for device loss and pressure

Use a tested backup where retention is appropriate, and keep its credential separate. Read the unlock-pressure scenario before treating a decoy or destructive control as a safety measure. NullVault does not guarantee protection from coercion or a compromised device.

The private-photo threat model helps identify the actual exposure. For broader account and device planning, consult the CPJ digital safety kit, recognizing that your own circumstances may require specialist advice.