Your recovery stays on your phone.
We built GraftKeeper so that the most private photos you'll ever take never have to leave your hands.
- GraftKeeper
- Yksityisyys
- Puhelimesi
- Kuvat, merkinnät, aikajana
- Palvelimemme
- Vain salattu varmuuskopio
Puhelimesi
- Kuvat
- Leikkauskirjaus
- Oireet ja lääkkeet
- Pesut ja tarkistukset
- Todisteholvin alkuperäiset
Palvelimemme
- Salattu varmuuskopio (salateksti)
- Mitä jaat klinikan kanssa
- Yhteisön julkaisut
- Tiedoston SHA-256-sormenjälki
What stays on your device
Photos, your surgery record, symptoms, medication, notes, washes and check-ins. They live in GraftKeeper's own storage with complete file protection, behind Face ID if you like. They are never put in iCloud or your photo library unless you export them yourself.
What reaches our server, and only if you choose
Items you share with a clinic, posts you make in the community, and your encrypted backup. Each has its own consent, and each can be withdrawn with one tap.
Backups we can't open
The backup key is made on your phone from your passphrase, plus a printable recovery key. We store ciphertext. If you lose both, we can't recover it, and neither can anyone else.
Analytics without health data
We count which screens are used so we can make them better. We never record a symptom, a photo, a medication or a triage outcome. There are no advertising or marketing SDKs in the app.
AI that never sees a photo
Optional AI features in Pro work on text only, after a separate consent. Phone numbers and emails are removed on your phone before anything is sent.
Proof without exposure
When the vault timestamps a file, only its SHA-256 fingerprint goes to the time-stamping authority. The file itself stays with you.