Couples share a lot of photos that aren’t meant for anyone else. Sleepy mornings, bad hair days, the inside of a messy apartment. It’s reasonable to want to know where those pictures go once you hit send. This note explains what private photo sharing actually involves, what iCloud sharing does and doesn’t protect, and a few habits that matter more than any app setting.
What “private” usually means
When an app calls photo sharing private, it can mean several different things. It helps to separate them:
- Who can see the photo. Only the person you shared it with, or anyone with a link, or a list of followers?
- Where the photo is stored. On the app company’s servers, in your own cloud account, or only on the devices involved?
- Who else can read it. Is it encrypted so that only you and the recipient hold the keys, or can the storage provider technically access it?
- What else is collected. Does the app gather analytics, contacts, location or ad identifiers alongside your photos?
- What happens when you stop sharing. Does access end, and what about copies already made?
An app can be strong on one of these and weak on another. Reading a privacy policy with these five questions in mind makes it much easier to understand.
How iCloud sharing works, in plain terms
Apple’s iCloud lets apps store data in your own iCloud account and share specific items with other people. When something is shared this way, the data stays in the owner’s iCloud storage, and the people it’s shared with are given access to read it. Their devices fetch it from iCloud.
A few things follow from that design:
- The app maker doesn’t need its own server to hold your photos. The storage is yours, and it counts against your iCloud storage plan.
- Access is tied to Apple accounts. The people you share with are identified through iCloud, so you don’t need a separate login for the app.
- The owner controls access. Stopping the share removes the other person’s access to that data going forward.
What iCloud sharing doesn’t do
iCloud sharing is a sound foundation, but it isn’t magic. It’s worth being clear about its limits.
It doesn’t stop screenshots or saving
Once a photo is on someone’s screen, they can take a screenshot or photograph it with another device. No sharing system can fully prevent that. Removing access stops new viewing through the app. It can’t recall a copy someone already made.
It doesn’t make Apple blind by default
iCloud data is encrypted in transit and on Apple’s servers. With iCloud’s standard data protection, Apple holds the keys for many data categories. Apple’s optional Advanced Data Protection extends end-to-end encryption to more categories, though some sharing features fall outside it. Apple publishes an overview of which data is covered under each setting. If this matters to you, read it directly rather than relying on any app’s summary, including ours.
It doesn’t protect a lost or shared phone
If someone can unlock your phone, they can usually see what’s on it, including widgets on the home screen. A passcode and Face ID matter more than any sharing setting.
It doesn’t decide what’s in the photo
Photos can carry extra information, such as where they were taken. When you share from Apple’s Photos app, the share sheet has an Options menu where you can turn off location. Other apps handle this in their own ways, so check if location matters to you.
How Photo Tape handles it
We built Photo Tape, an iPhone app for sharing one photo a day with your person, on iCloud sharing so that there would be no Photo Tape server holding your pictures. Here is what that looks like in practice.
- No server and no account. There is no Photo Tape account to create, and we don’t run a server that stores your photos.
- Your photos stay in your iCloud. They’re kept in your private iCloud database and shared with the other person through iCloud sharing. Their phone reads them from your iCloud.
- Club photos live in the owner’s iCloud. If you use a club, a shared photo wall for a group, its photos are kept in the iCloud of whoever started the club.
- Nothing else is collected. No ads, no analytics, no tracking.
- Removing someone ends their access. If you stop sharing with a person, they can no longer read your photos through the app.
The few things that use Apple’s public database
A small number of features need a place that other people can read without being invited, and for those Photo Tape uses Apple’s public iCloud database:
- The sticker shelf, and stickers a Pro member chooses to publish.
- Follow requests. A request holds two anonymous IDs, a first name and an emoji, and it expires after 30 days. A decline is silent, so nobody is told they were turned down.
- Reports, which can only be made about a published sticker.
Your daily photos are never in that list. You can read the short version in the privacy section of the home page, or the full privacy policy.
Habits that matter more than settings
Whatever app you use, a few simple practices protect a relationship’s photos better than any feature:
- Talk about expectations. Agree on what’s okay to save, screenshot or show friends. A lot of trouble starts with two different sets of assumptions.
- Keep sharing narrow. Share with the specific person, not with “anyone with the link,” when the app offers the choice.
- Lock your phone. Use a passcode and keep it to yourself.
- Review who has access. Every so often, check your shared albums and apps for people you no longer want there.
- Know how to remove someone. Find the option before you need it. After a breakup is a hard time to start learning menus.
When to choose something else
If you need guarantees that no cloud provider could ever access a photo, a cloud-based sharing app may not be the right fit, whichever provider it uses. Look at tools that are end-to-end encrypted by design, and check that the feature you’ll actually use is covered. For most couples, the more practical risks are the human ones above, and a setup with no extra company in the middle keeps things simple.
If keeping your daily photos in your own iCloud sounds right to you, you can join the Photo Tape beta. It runs on iPhone with iOS 17 or later and is free during the beta, Pro included.