Every code opens a different space. Keep a decoy code and a real one, and sort photos, files, notes, and links into separate vaults.
When you have to hand over your phone, open only the space you are fine showing.
Bulbul is a decoy folder and a vault in one: every code opens a different space, and every code opens a real one, so nothing looks hidden. Text codes, patterns, and numeric codes each open a separate space for photos, files, notes, links, and web research.
Decoy by design
- Keep a decoy code and a real code side by side.
- No list of spaces is shown anywhere in the app, not even how many exist.
- Nothing looks locked, so nobody asks you to unlock it.
Code-addressed spaces
- Text codes, patterns, and numeric codes can each open a different space.
- There is no exposed list of every space in the app.
- There is no master password that opens everything at once.
- Decoy spaces are natural: every code opens a real, separate space.
Capture into the right place
- Share files, photos, and links into Bulbul from other apps.
- Pick the code for the space where the item belongs.
- Save YouTube and web links as shortcuts inside the right project.
- Pin widgets to jump directly into a specific space and tab.
Work inside each space
- File manager for folders, documents, images, PDFs, and videos.
- Markdown editor for private notes and read mode.
- Camera that saves directly into the active space, not your camera roll.
- Built-in browser with a separate session per space.
- Per-space iCloud sync controls when you want a space to stay local.
Made for people who
- Keep work files, family photos, project notes, and receipts in separate contexts.
- Share a device but do not want one visible folder of private material.
- Prefer opening only the space they need, instead of unlocking everything.
Important
- Forgotten codes cannot be recovered.
- Bulbul stores data on your device and in the iCloud account you explicitly enable.
Requires iOS 26 or later. Universal app for iPhone and iPad.
The app works very well, but nothing is known about its security. The encryption algorithm is unknown. It is not clear whether the app actually encrypts data with a cryptographic algorithm such as AES‑256, or if it is only hiding the files. Because of this, I do not want to entrust the app with any critical files.
Developer Response
Thank you for the thoughtful feedback. You’re asking exactly the right question, and I want to be transparent about how the app currently protects your files.Today, the app uses two main layers of protection. First, all files are stored inside the app’s private container and protected by iOS Data Protection, which uses hardware-backed encryption for data stored on the device. Second, passcodes are used to keep spaces isolated from each other. Your passcode is never stored on the device or in iCloud, and the app cannot reveal or recover it. A passcode only opens its own space and cannot access files from another space.To be fully transparent, file contents are not yet re-encrypted with a key derived directly from your passcode. At the moment, the passcode provides access control and space isolation on top of iOS’s built-in at-rest encryption.I’m actively working on adding passcode-derived file encryption as an additional layer, so files will be cryptographically tied to the passcode itself. I really appreciate you holding the app to a high security standard — that’s exactly the right expectation for an app handling sensitive files.
This update adds ad and tracker blocking to the built-in browser and makes saving more reliable.
- The browser inside a space now blocks ads and trackers.
- Files never appear half-saved. Only fully written files show up in a space.
- When you share several items and one is not ready, nothing is partially saved and the error is shown clearly.
- Turning haptics off now applies to pattern lock, keypad entry, and opening a space.
- Regular downloads and saved streaming media appear in one list you can review and delete together.
Version 2.6.2
The developer, heewook shin, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Used to Track You
The following data may be used to track you across apps and websites owned by other companies:
Identifiers
Usage Data
Data Not Linked to You
The following data may be collected but it is not linked to your identity:
Identifiers
Usage Data
Diagnostics
Privacy practices may vary, for example, based on the features you use or your age. Learn More
The developer indicated that this app supports the following accessibility features. Learn More
