PrivateMark — Trace any photo leak back to the person who leaked it

How it works

Three steps between you and never wondering again.

01 / PROTECT🛡️

Pick a photo, name the recipient

Choose any photo and tell PrivateMark who it's for — "Maria", "Ex", "Landlord". A watermark unique to that copy is woven invisibly into the pixels, entirely on your device.

02 / SHARE💬

Send it anywhere

WhatsApp, iMessage, Mail, AirDrop — share the protected copy like any photo. It looks identical. Only your private registry knows which copy went to whom.

03 / INVESTIGATE🔎

Found it somewhere? Get the name

If the photo surfaces where it shouldn't, import the copy you found. PrivateMark reads the invisible mark and tells you — with statistical confidence — whose copy leaked.

Built to survive the real world

Leaked photos get recompressed, screenshotted and cropped. The mark survives.

The watermark isn't metadata — it lives in the pixels themselves. Measured in our lab across real messaging pipelines:

99%

survives WhatsApp & iMessage recompression

97%

survives screenshots

99%

survives crops

~41 dB

PSNR — invisible to the eye

Lab-measured attribution rates on our test corpus; real-world results depend on how badly a copy is degraded. When the mark can't be read, PrivateMark still recognises it's your photo via perceptual fingerprint.

Zero-trust by design

Private things should stay private. Including from us.

✓No servers. There is no PrivateMark backend. Watermarking and attribution run entirely on your device.
✓No accounts. Nothing to sign up for, nothing to breach.
✓Encrypted registry. Recipient names are encrypted at rest with a key that never leaves your Keychain, syncing only through your own private iCloud.
✓Covert by default. The shared file is a plain IMG_4127.jpg — no app name, no labels, no traces.

$ privatemark --audit-dataflow

✓ watermark engine ······ on-device

✓ photo registry ········ on-device, encrypted

✓ attribution ··········· on-device

✗ photo uploads ········ none

✗ user accounts ········ none

✗ tracking / ads ······· none

→ outbound traffic: anonymous crash-free analytics only

Pricing

Try the whole loop free. Go unlimited when it clicks.

Every plan includes the full engine — same watermark, same attribution. Investigating leaks is free forever, even if you never pay.

Monthly

$2.99

per month · after 3 free protected shares

✓Unlimited protected shares
✓Unlimited investigations
✓iPhone, iPad & Mac

Get the app

Best value

Yearly

$9.99

per year · under $1 a month

✓Unlimited protected shares
✓Unlimited investigations
✓iPhone, iPad & Mac

Get the app

Lifetime

$29.99$19.99

one-time purchase · launch offer until Aug 31

✓Everything in Pro
✓Pay once, never again
✓All future updates

Get the app

Billed through the App Store. Prices in USD; local pricing may vary. Subscriptions renew unless cancelled at least 24 h before the period ends.

FAQ

Fair questions, straight answers.

Can people see the watermark?

No. The mark is spread across the pixels at an imperceptible level (~41 dB PSNR — well past the threshold of visibility). The shared file has a generic filename and clean metadata, so nothing reveals a photo is protected.

Do my photos get uploaded anywhere?

Never. There is no server — embedding and reading watermarks are done by a neural engine that runs on your device. The only outbound traffic in the entire app is anonymous, content-free analytics (which feature was used, never what it was used on).

What if the leaker screenshots the photo instead of forwarding it?

Screenshots are one of the channels we engineered for: 97% of screenshots still attribute correctly in our lab tests. Recompression by WhatsApp or iMessage and cropping survive at ~99%.

What happens if the watermark can't be read?

PrivateMark is honest about confidence. If a copy is too degraded, it falls back to a perceptual fingerprint — telling you "this is your photo" even when it can't name the recipient, and it will never guess: attributions come with statistical confidence, or not at all.

Is this legal to use?

Watermarking your own photos before you share them is generally lawful — you're marking your own property. What you do with an attribution is up to you; PrivateMark just gives you the fact of whose copy it was.

Which devices does it run on?

iPhone and iPad (iOS 17+), plus a native Mac app. One purchase covers all of them, and your registry syncs privately through your own iCloud.

Available now

Your photos deserve a paper trail.

iPhone · iPad · Mac — one purchase, all devices.