I expected encryption to be the hard part of building Senvra. The harder decisions were the convenient features I left out.

Account recovery, cloud sync and remote access all sound helpful. They also create an account system, a server and another place where private files can exist. I decided the vault should work without an in-app networking layer or Local Network access. Photos, files and notes stay on the device. Recovery uses an access key and an encrypted backup kept by the owner.