How it works

Three parts: your device encrypts, the relay carries ciphertext, your Plug holds it.

How a photo travelsYour phone encrypts a photo, the Niji relay carries the encrypted bytes, and your Plug keeps them on your disk. The Plug's disk holds the one copy.Your phoneencrypts the photobefore it leavesNiji relaystores and movesciphertextYour Plugkeeps it onyour diskencryptedencryptedthe one copy
The only readable version of a photo is on your devices. The Plug's disk holds the one copy.

1. Your device encrypts

Files are encrypted on your device before they leave it. We never hold the keys. Signing in is the one moment your password reaches us, verified and discarded.

2. The relay carries ciphertext

The relay stores and moves ciphertext. It is what lets your phone reach your Plug from anywhere, without you setting up your home network.

3. Your Plug holds it

Your photos live on hardware you own — a Plug, a Box, or a computer you already have. You can share storage with family without sharing your library; each person's data is separate.

Note

One copy, not two. The disk in your Plug holds the one copy of each file. If that disk fails, what is on it is lost.

What we can and cannot see →