The family's photos: local-first, shared on purpose

Consider what actually sits in a family's camera roll after a decade: the children at every age, the inside of the home from every angle, the simcha guests, the documents photographed in a hurry, the recuperations and the private moments nobody framed for an audience. Now consider the mainstream default: all of it, uploaded automatically, to infrastructure owned by companies whose business models the community has learned to read — indexed by faces, mined by machine sight, retained on schedules written in someone else's terms of service. The default was never malicious; it was convenient. But convenience is not a custody arrangement, and a family's visual archive deserves an actual decision.

Local-first, defined plainly

The architecture the KolBo Gallery anchors inverts the default at every layer:

• The photo's home is the device — and the household. Captured locally, stored locally, organized locally; the family's own storage (the home base station, the household's encrypted vault) as the archive's permanent address. No automatic third-party upload, ever — the mainstream's step one simply does not exist.
• Sharing is an act, not a state. The chosen photos travel to chosen people — the grandmother's weekly picture, the simcha set to the mechutanim — each send deliberate, per the same audience-scoping discipline the family applies to every broadcast. What never happens: the album existing, by default, on infrastructure the family cannot see.
• The faces stay unindexed by strangers. Machine features that serve the family (finding the baby's photos among ten thousand) run within the household's walls where offered at all — the privacy-by-architecture covenant applied to the most identifying data a family owns: its children's faces at every age.
• Tznius-aware defaults ride along. The family's photo norms — what gets captured, what gets shared, what shidduch season requires — are policy the household sets once, with the gallery's sharing defaults built to honor rather than fight them.

“A stranger's server does not love your children. Custody of their whole visual childhood should require more than a pre-ticked box at phone setup.”

kolbo.life

The backup question, answered honestly

"But the cloud is my backup" is the objection that keeps families on the default, and it deserves a real answer rather than a slogan. Local-first does not mean single-copy — it means the family runs its own redundancy: the device syncs to the household base (automatic, on the home network), the base carries versioned copies, and the truly irreplaceable (the simcha albums, the year's best) gets the third copy offsite — encrypted, family-held, whether at a relative's base station or in encrypted cold storage the family controls the keys to. That is the same 3-2-1 discipline professionals use, minus the part where a platform reads the photos. The honest trade: the family owns a small maintenance habit (the base station exists; the yearly archive ritual happens — attach it to the Elul housekeeping) in exchange for custody. Families that have run both report the surprise is how little the habit costs — sync is automatic; only the decisions stayed human.

The household patterns

1. One gallery, per-person views. The family archive as shared infrastructure — the parents' full view, the children's tiers seeing their own and the family's public shelf — the same per-person architecture as everything else on the platform.
2. The document photos get filed out. The photographed form is a document wearing a photo costume — it moves to the document shelf the day it lands, keeping the album an album.
3. The simcha ingestion ritual. The chasunah's thousand photos from four sources get one sitting: culled, the keepers albumed, the set shared to the families — the simcha-thread patterns closing their photo loop while memory is fresh.
4. The kids' camera tier. The child's first camera is capture-and-family-share only — no outward sharing surface at all — because the photo norms, like every norm, are taught by graduation, not by exposure.

Frequently asked questions