Security

Protected on the way in, encrypted after that.

Progress photos travel over SSL/TLS. After the service receives a photo, it encrypts the file for storage. Each file has its own key. That key is wrapped for your account and also wrapped with a master recovery key.

What the recovery key is for

The recovery key exists so a photo is not gone forever if you need help getting back into the account. It also means Sola is not a system where we are technically unable to open a file. Opening one still requires a stated reason: your request, account recovery, a credible illegal-content or abuse report, a security incident, or valid legal process.

On the phone

The app keeps the vault behind your PIN, separate from the ordinary camera roll. UV lookups send coordinates only to answer that request.

On this website

Signing in uses the same account as the app. The vault page can upload and delete photos in that account. Account deletion waits 5 days and can be cancelled from Settings until the scheduled time.