All the power of cloud photos, without cloud custody.

Browse, search, recognize faces, and share directly with trusted people while your photos stay on devices and folders you control.

Direct device-to-device sharing. Fast, private, no platform limits.

direct sharing + private intelligence + no cloud custody
Direct sharing

Share photos directly, not through platform albums.

Families and trusted groups should send photos to known people without public links, central cloud albums, or somebody else's storage meter standing between them and their memories.

1

People, not links

Share a gallery, collection, person, or cluster directly with trusted contacts instead of creating public URLs.

2

Fast when devices are ready

Sharing is bounded by your devices, bandwidth, and trust choices, not by a provider's album rules.

3

No artificial ceiling

fotos should not monetize by becoming the storage choke point for family history.

Product promise

Keep the originals. Carry the intelligence.

fotos treats local folders as the source of truth. It adds modern photo intelligence beside the archive, not hidden cloud custody above it.

1

No cloud custody

Core gallery use should not require cloud storage or server-side media processing.

2

Search privately

Face grouping and semantic analysis are optional, user controlled, and designed to run on device.

3

Portable one/ metadata

Gallery state, indexes, collections, and fallback pages travel beside the media so the archive remains readable.

Portable system

A photo library that can travel.

The browser/PWA is the primary client, while a portable fotos.html viewer keeps a local one/ folder useful when the hosted app is unavailable.

1. AttachGrant browser access to a folder you already control.
2. IndexRead EXIF, dates, folders, hashes, and existing one/ metadata.
3. EnrichRun face and semantic work locally when the device is ready.
4. ShareMove photos and metadata directly between trusted devices through ONE.core CHUM.
5. PreserveCarry a readable fallback viewer with the archive.

Your photos, shared directly, without cloud custody.

fotos id is the ecosystem side note, not the thing you must understand first.
Identity

fotos id belongs in the same trust model.

Private photo-derived recovery factors can help users prove or recover identity without uploading recovery photos to a provider.

Passkeys for daily useConvenient authentication can sit beside local recovery, not replace it.
Private recovery factorsPhoto-derived secrets stay local and reproducible by the person who owns the archive.
ONE ecosystem continuityThe same certified identity can connect fotos with glue.one, vger, reaktor, and related apps.

A photo network can be direct, private, and still feel modern.

fotos.refinio.one is the static product story. fotos.one is the PWA where direct sharing, private intelligence, and local folders meet.