Hey HN, I built SaecretHeaven because I was frustrated that every cloud photo service can see my images. Google scans for content, Apple has master keys, and most services store unencrypted. SaecretHeaven is different: • *True zero-knowledge*: Photos are encrypted client-side with XSalsa20-Poly1305 before upload. The server only sees encrypted blobs. • *Decentralized storage*: Encrypted files go to IPFS with Pinata pinning across multiple EU nodes. No single point of failure. • *Key anchoring*: Your 12-word recovery phrase derives your encryption key via Argon2id. We never see it. • *Works offline*: Full PWA with local-first architecture. Desktop apps via Tauri. Tech: Next.js 14, Better Auth, Supabase (metadata only), IPFS/Pinata The beta opens Feb 3rd with 30 spots. Would love feedback from the HN community on the security model. Site: https://saecretheaven.com Happy to answer any questions about the architecture!