# fotos.refinio.one

> fotos is direct, unlimited, private device-to-device photo sharing with modern photo intelligence built in.

Canonical URL: https://fotos.refinio.one
Primary app: https://fotos.one
Refinio downloads: https://refinio.one/downloads

## Product principle

All the power of cloud photos, without cloud custody.

Direct device-to-device sharing. Fast, private, no platform limits.

## Summary

fotos helps people browse, search, recognize faces, and share directly with trusted people while their photos stay on devices and folders they control. It gives people the power they expect from cloud photo products without cloud custody, public-link defaults, platform-owned albums, or artificial storage ceilings imposed by someone else's photo service. It attaches to local folders, writes portable `one/` metadata beside the user's files, performs optional face and semantic analysis on device, and shares photos and metadata between trusted devices through ONE.core CHUM. A portable `fotos.html` viewer is the fallback surface for local `one/` folders when the hosted app is unavailable.

## Core requirements

- Local-first folder attachment without reorganizing originals.
- Portable `one/` sidecar metadata.
- Optional on-device face grouping and semantic search.
- Direct trusted device-to-device photo sharing and metadata sync.
- PWA mobile capture and share target.
- Selective sharing with named trusted contacts rather than public links.
- No fotos-imposed storage quota or platform album ceiling.
- fotos id recovery using private photo-derived recovery factors.
- Transparent trust, sync, identity, passkey, recovery, and analysis status.

## Non-goals

- Cloud custody as a requirement for core gallery use.
- Server-side face recognition or semantic indexing.
- Public social feeds or public-link-first sharing.
- Ad-based monetization.