The camera roll is the actual problem
Client work rarely leaks through anything sophisticated. It leaks because unreleased frames live in the same roll as everything else, and phones get handed to people. "Just look at this one" is a full-library invitation, and the Hidden album does not change that: it's one tap away and it's still inside your photo library.
Vaultine keeps client work in a separate encrypted container instead. It doesn't appear in Photos, and opening it takes your pattern or PIN rather than the phone unlock someone just watched you enter.
A shoot is a folder, so import it as one
The reason people abandon vault apps is friction. If protecting a shoot means selecting four hundred files by hand at the end of a long day, it stops happening by the second week.
Folder import brings the whole directory in with its structure intact, and bulk operations are hardware-accelerated for exactly this: large files, a lot of them, in one pass. Getting work into the vault should take about as long as copying it anywhere else.
Review without decrypting to disk
Encryption that only holds until you open something isn't much use in this job, because opening things is the job. Vaultine's built-in viewer opens photos, video and PDFs inside the vault, so a decrypted copy never lands in a temp folder where a cloud backup, an indexer or another app could quietly pick it up.
One vault, the laptop and the phone
Scouting and behind-the-scenes shots happen on a phone. Editing and delivery happen on a laptop. Vaultine runs natively on Windows, macOS, iOS and Android, so both ends of that workflow use the same vault rather than one protected device and one that isn't.



