Support

Your PIN syncs through your iCloud Keychain, so any of your own devices that unlocks Sanctum uses the same 6 digits. For security there is no recovery back door — that's a feature: nobody, including us, can open your vault without the PIN. If Face ID is enabled, unlock with Face ID and change your PIN in Settings.

Sanctum syncs through your own iCloud. Check that both devices are signed into the same Apple Account and that iCloud Drive is enabled in System Settings. First syncs download metadata before full images — cells showing a cloud icon are still downloading; keep the app open for a few minutes.

No. Everything is encrypted on your device and stored in your own iCloud private database. We operate no servers and have no access to your content. Read the privacy policy — it's short.

It moves to Recently Deleted for 30 days, then is removed permanently. You can recover or permanently delete it any time from Recently Deleted.

Only if you say yes. After importing, Sanctum offers to delete the originals; the deletion is confirmed through Apple's own dialog, and deleted originals stay in the Photos app's own Recently Deleted for 30 days.

Subscriptions are handled by the App Store: Settings → your name → Subscriptions on iPhone, or App Store → Account on Mac. Apple manages billing; we never see your payment details.