An open-source, native Android gallery with end-to-end encrypted Proton Drive sync, a built-in photo editor, and granular privacy controls. No telemetry. No tracking. Just your photos.

MIT
Open source
Android 8+
Minimum version
protoncore
Built on
01Gallery

The gallery you already know — without the spyware.

Albums, timeline, search, favourites, hidden vault. Everything a stock gallery does, in a fully native Android shell. Built with Jetpack Compose for instant, native feel.

  • Timeline grouped by day, month, year
  • Filter by sync status, media type, or capture date
  • Videos — full backup and playback support
  • Unified view: local and Proton Drive photos in one place
  • Favourite photos, save cloud-only photos to device
9:41
All 412 Favourites
A
January 2024
12 photos
Photos Albums Shared
02Sync

End-to-end encrypted backup, powered by Proton Drive.

Sign in with your Proton account and the app starts backing up your library. Every byte is encrypted on your device — using the official protoncore library — before it ever leaves.

  • Background sync, Wi-Fi only option configurable
  • Selective folder backup — choose which device folders sync
  • Auto free-up: delete local copies after backup on a schedule
  • Auto-include new device folders as they appear
  • Original quality, no re-compression
9:41
Sync
Synced
Last sync 2 min ago
416 / 418
Sync now
Auto-sync
Continuously back up new photos
Wi-Fi only
Pause on mobile data
Auto-include new folders
Add new device folders automatically
Backup folders
3 of 8 selected
03Privacy

Strip metadata, lock your vault, stay private end to end.

Control exactly what leaves your device. Remove GPS coordinates, camera model, and timestamps before any photo uploads. Sensitive photos live behind a biometric lock no one else can open.

  • Strip GPS, camera model & timestamps before upload
  • Hidden album locked behind fingerprint or face
  • App-wide biometric / PIN lock
  • 30-day cloud trash — restore before it's gone for good
9:41
Privacy & metadata
Strip metadata on upload
Apply to all uploads
GPS & location
Camera make & model
Timestamps
Software info
Hidden album
Biometric protected
04Edit

Built-in editor. Crop, adjust, redact — then save or upload.

Edit photos without leaving the app. Adjust exposure and colour, apply auto-enhance filters, censor sensitive areas with a brush tool, rotate and crop. Save locally or push the edit straight to Proton Drive.

  • Adjust brightness, contrast, saturation & exposure
  • Filter presets — Vivid, Warm, Cool, B&W, Sepia, Vintage
  • Redact / censor tool — black bar or pixelate over sensitive areas
  • Rotate, flip, crop — save locally or upload to Drive
9:41
Edit
Save
Brightness +18
Contrast −4
Adjust
Filter
Redact
Rotate
05 — Toolkit

More, built in.

Everything below is on by default. No upsells, no premium tier, no second app to install. A Proton account is required.

01 — UI

Native gallery

Built with Jetpack Compose and Material 3. Lightweight enough for older devices, native enough to feel instant on newer ones.

02 — Sync

End-to-end sync

Proton Drive backup. Keys never leave your device. Powered by protoncore.

03 — Privacy

Zero telemetry

No analytics, no crash reporters, no third-party SDKs. Audit the manifest.

04 — Security

Hidden vault

A second album, locked behind biometrics. Files stored encrypted on disk.

05 — Metadata

Metadata stripping

Strip GPS, camera model, timestamps, and software info before upload. Per-field granular control.

06 — Albums

Albums & sharing

Create Proton Drive cloud albums, share them by email. Merged view of local and cloud albums side by side.

07 — Editor

Built-in editor

Adjust, filter, redact, rotate, crop — then save locally or upload the edit to Drive. Undo & reset any time.

08 — Storage

Bulk free-up

Auto-delete local copies after backup on a schedule: immediately, 1 day, 1 week, or 1 month.

09 — Widget

Home screen widget

Photo widget with three display modes: all photos, selected set, or specific album. Refreshes on your schedule.

06 — About

A third-party app, fully in the open.

Proton Photos is built and maintained independently. It is not an official Proton product — but it speaks the Proton protocol natively, using protoncore_android as its foundation. Strictly functional — only what's needed for the gallery to work and to talk to Proton.

07 — FAQ

Questions, answered.

Still curious? Open a discussion on GitHub — I'm around.

Is this an official Proton app?
No. Proton Photos is an independent, third-party app built by aequus. It uses Proton's official open-source libraries (protoncore_android) to talk to Proton Drive, but it is not built, endorsed, or supported by Proton AG.
What is it built on?
Kotlin + Jetpack Compose for the gallery UI, and Proton's protoncore_android library — unmodified, pinned to released versions — for authentication, key management, and Drive sync. No proprietary SDKs.
Does it fit into the Proton ecosystem?
Yes. Because the app uses protoncore_android — the same library Proton's own apps are built on — your sign-in, account, encryption keys, and Drive storage all behave identically to the official clients. Your photos land in your Proton Drive Photos folder.
Does the app send any telemetry?
None. No analytics, no crash reporters, no third-party SDKs. The only network traffic the app makes is to Proton's own API to authenticate and sync your photos. Nothing extra. Strictly functional — only what's needed for the gallery to work and to talk to Proton.
Do I need a Proton account?
Yes — a Proton account is required. The app is designed around Proton Drive sync, so it signs in to Proton on first launch. Any account works, including free; cloud usage counts against your existing Proton Drive quota.
Where can I get it?
Signed APKs are published on the GitHub releases page. There is no Google Play release planned — the app deliberately avoids Play Services. See the Download section.
Does the app strip EXIF / metadata from my photos?
Yes — and with granular control. In Settings → Privacy & metadata you can toggle a master "strip on upload" switch, then individually control GPS & location, camera make & model, timestamps, and software info. Stripping happens on-device before any data is sent. Your original local file is never modified.
Can I trust a single-maintainer app?
Trust the code, not the maintainer. The repo is fully open-source under the MIT license. Clone the tag and build the APK yourself — the diff between the source you build and any future commit is auditable. If something ever shipped that shouldn't, the change would show in the git history.
Download

Sign in. Your photos walk back home.

Signed APK on GitHub. MIT license. Open source — clone the tag and build it yourself.

Kotlin Jetpack Compose protoncore_android MIT Android 8+ No Play Services required Not affiliated with Proton AG