VaultStream

VaultStream is an ultra-secure, privacy-hardened, cross-platform local-first vault application built with Flutter. It combines seamless cloud/local synchronization with military-grade local encryption, proactive anti-leakage guards, a fully functional decoy scientific calculator interface, and recovery capabilities.

Key Features 🚀 1. Stealth Mode & Decoy Interface 🧮 Decoy Calculator: Disguise your entry screen as a fully functioning Scientific Calculator. Entering your custom stealth PIN instantly unlocks your actual vault files. Dynamic Privacy: When locked in stealth decoy mode, system-level screenshot guards are lifted so the calculator functions like any normal utility app. 2. Immediate Session Invalidation & Session Hardening ⏰ Background Invalidation: WidgetsBinding observers listen to the platform lifecycle. The moment the app transitions to the background (paused, hidden, or minimized), your session is destroyed instantly. Biometric Gatekeeping: On relaunch, access is guarded behind biometric authentication (fingerprint/face unlock) or standard PIN/password check. Session Timeout: Custom inactivity lockouts (e.g., locking after 1, 3, 5, or 10 minutes of idleness). 3. Native Screen Protection & Anti-Leakage 🛡️ Dynamic Capture Block: Screenshots and screen recordings are strictly blocked via native platform layers (FLAG_SECURE on Android) only when the vault is unlocked. App Switcher Blur Masking: Automatically applies an active blur overlay in multitasking drawers on iOS/Android to prevent shoulder surfing or thumbnail caching. 4. Break-In Alert & Intrusion Captures 📸 Intruder Photo Capture: Automatically triggers the front camera to capture a photo of anyone trying to unlock the vault with an incorrect PIN. Custom Thresholds: Configure the failed attempts threshold (1, 3, 5, or 10 attempts) in settings before a capture is initiated. Zero-Knowledge Logs: Captured images are encrypted with AES-GCM and stored securely in local app storage. Viewing/clearing them requires entering your vault PIN twice for verification. 5. Emergency Panic Wipe PIN 🚨 Emergency Invalidation: Set up a secondary "Emergency Wipe PIN". Instant Wipe Queue: Entering the panic PIN on the calculator entry screen instantly purges all local keys, decrypted files, credentials, local databases, and logs out the user immediately to prevent physical coercion data access. Countdown Delay: Configure a customizable countdown delay (e.g. 5, 10, or 30 seconds) with visual cues before executing the purge. 6. Recoverable Recycle Bin 🗑️ Soft Deletions: Trashing a file doesn't destroy it immediately. It marks it as isDeleted with a deletedAt timestamp, cataloged in the local audit trail. Bin Management: Retrieve deleted assets easily via the settings panel. Restore them with original metadata intact, or execute a permanent purge with PIN confirmation. Schema Safety: Uses custom Drift migrations (Schema Version 2) to upgrade existing database instances on devices seamlessly. 7. Folder-Based Compression & Deep Archive 📁 Recursive Zipping: Drag or select entire directories from your device. VaultStream compresses them recursively in secure background isolates queue. Deep Archive Strategy: Enable deep archive mode in settings to apply maximum compression algorithms for large files, saving storage space at the cost of processing time. WiFi-Only Sync: Optional toggle to restrict vault sync uploads to active Wi-Fi connections, conserving mobile bandwidth. 8. Auto-Backup & Watched Albums 🔄 Gallery Album Watching: Select and watch specific device photo/video albums/folders (utilizing native photo_manager permission layers). Auto-Sync: Monitor changes in watched folders and sync new local media into the encrypted vault automatically.