End-to-End Encrypted

Your most important files.
Protected. Searchable.
Always yours.

Infolio is an encrypted personal archive for iOS and Android. Scan paper documents, import files, and search everything — server-side zero knowledge.

AES-256
File encryption
Zero
Server knowledge
100%
Local search
Infolio App

Everything you need to archive
with confidence

From scanning a receipt to restoring a new device — Infolio handles your entire document lifecycle, privately.

End-to-End Encryption

Every file is encrypted on-device with AES-256-GCM before it ever leaves your phone. Your vault password never touches our servers.

Instant Local Search

Full-text search runs entirely on your device using SQLCipher FTS5. Find any document in milliseconds — no server round-trip, no metadata leak.

AI-Powered Organization

Let multimodal LLMs read and structure your documents into clean Markdown. Works with your own API key, our platform quota, or fully local with Ollama.

Smart Document Scanner

Use the built-in camera to scan paper documents with automatic edge detection, perspective correction, and image enhancement on iOS and Android.

Share Extension

Receive files directly from any app — email, browser, or cloud storage. Infolio captures and archives them automatically through the standard share sheet.

Biometric Unlock

Face ID, Touch ID, or fingerprint — unlock your vault instantly without re-entering your vault password. Vault auto-locks after 15 minutes in the background.

Cross-Device Sync

Register an account to sync encrypted blobs across all your devices. Switch phones without losing anything — your vault password restores everything.

Offline-First Mode

No account required. Use Infolio completely offline — local-only storage with zero network requests. Upgrade to a registered account whenever you're ready.

Export My Data

Download all your original files as a ZIP archive at any time, organized by month. Your data is always yours — no lock-in, no ransom.

How it works

From scan to searchable in seconds.

1

Capture or Import

Scan paper documents with the built-in scanner, tap to select files, or share from any other app via the system share sheet.

2

AI Organizes

A multimodal LLM reads your document and produces structured Markdown — title, summary, and clean body text ready for search.

3

Encrypted & Indexed

The original file is encrypted with AES-256-GCM on-device. The extracted text is indexed locally in SQLCipher FTS5 for instant search.

4

Find in Seconds

Type any keyword and get highlighted results instantly. Everything stays on-device. No servers are consulted during a search.

AI that respects
your privacy

Infolio supports three processing modes. By default, only structured text is ever sent to LLMs — never your original files unless you explicitly choose multimodal mode.

🔒
Mode A — Multimodal Direct
File sent directly to LLM (image/PDF). Fastest, richest results.
🛡️
Mode B — OCR then LLM
On-device OCR extracts text first; only extracted text is sent to LLM. Original file never leaves your device.
📴
Mode C — Fully Offline
On-device OCR + local LLM (Ollama / Qwen2.5). Zero network traffic. Complete privacy.
Document Processing Pipeline
Camera Scan / Import
JPEG, PDF, PNG, DOCX, TXT…
INPUT
ContentExtractor
ML Kit OCR · PDF text layer · XML parse
ON-DEVICE
LLM Enrichment
Structured Markdown · Title · Tags
AI
AES-256-GCM Encrypt
DEK ← SK ← MK ← KEK(VaultPassword)
CRYPTO
FTS5 Index + Cloud Sync
SQLCipher local · Cloudflare R2 mirror
DONE

Zero knowledge.
By design.

Our servers store only encrypted blobs and encrypted keys. We are mathematically unable to read your files.

Cryptographic
Specifications

Every security primitive is chosen for its proven resistance to attack and its suitability for envelope encryption across multiple devices.

File encryptionAES-256-GCM
Key derivationArgon2id (3 iter · 64 MB)
Key hierarchyKEK → MK → SK → DEK
Auth JWT signingRS256
Local databaseSQLCipher (AES-256)
TransportTLS 1.3
Object storageCloudflare R2 (encrypted blobs only)

Vault Password Separation

Your Vault Password is never transmitted. It derives the KEK locally with Argon2id. Only an encrypted version of your Master Key (EMK) lives on the server.

Auto-Lock & Biometric

Vault locks automatically after 15 minutes in the background. Face ID or Touch ID retrieves the Master Key from your device's secure enclave — no password re-entry.

Device Recovery

Replace your phone? Just sign in and enter your Vault Password. The encrypted Master Key (EMK) is retrieved from the server and decrypted locally — full restore with no recovery codes.

Search Without Exposure

Full-text search runs on your device against the local SQLCipher FTS5 index. No keyword or query ever reaches the server.

Start archiving.
No account needed.

Download Infolio free. Use offline forever, or sign in with Apple / Google to enable encrypted cloud sync across all your devices.