Hidden is not the same as locked.
Most phones offer two different features that sound alike and behave differently. A hidden album moves selected photos out of the main camera roll into a separate folder, tucked away but usually reachable by anyone who knows where to look and has the phone unlocked in hand. A locked album goes further, sitting behind its own fingerprint or face check even once the phone itself is open, closer to the chat lock feature covered elsewhere on this site than to simple hiding.
Knowing the difference matters before choosing either. A hidden album suits photos you would rather not scroll past by accident yourself; a locked album suits photos you would rather someone else, briefly holding an unlocked phone, could not find at all.
Setting up a locked album.
On an iPhone, the photos app includes a Hidden album by default, and a further Locked setting sits under the app's own settings, requiring Face ID or a passcode before the album opens even inside an otherwise unlocked phone. On Android, Google Photos offers a comparable Locked Folder, moving selected photos out of the main library into a space that needs its own biometric check.
Either way, moving a photo into the locked space is usually a simple long-press and a menu option, quick enough to do in the moment a photo is taken rather than remembered as a separate chore later.
What still slips through.
Hiding or locking a photo where it lives is only half the job, since a phone's own search and memory features can surface the same image from an entirely different door. Facial recognition search, the feature that groups photos by the people in them, sometimes continues to index a hidden photo unless it is moved to the fully locked space specifically. Automatically generated memories, the slideshow a phone builds on its own from old photos, have historically pulled from albums that were only hidden rather than locked, resurfacing exactly the image the hiding was meant to avoid.
The safest habit is treating the hidden album as a waiting room and the locked one as the actual destination, moving anything genuinely private the extra step rather than assuming hidden already means unsearchable.
Cloud sync and shared albums.
A locked album on the phone does not automatically mean the same photo is excluded from a cloud backup, and a photo synced before it was ever moved into a locked space can already exist in a backup that predates the change. Check the cloud service's own settings for whether locked or hidden content is included in sync, since the two platforms handle this slightly differently and the setting is easy to miss on a first pass.
Shared family albums raise a separate risk again, the subject of our guide to shared devices: a photo added to a shared album before being moved to a locked one may already have reached every other device in that family group, an outcome no lock applied afterwards can undo.
A dedicated vault app, the stronger alternative.
For anything that genuinely warrants more than the phone's own locked album, a dedicated vault app goes a step further, typically storing photos in an encrypted form separate from the main photo library entirely, sometimes with a decoy passcode that opens an empty or unrelated vault if entered under duress. This is a real step up in strength, and also a real trade in trust, since it means relying on a third party developer's own security practices rather than the phone manufacturer's.
Read a vault app's privacy policy and recent reviews before choosing one, favour an app with a long track record over a new arrival with a striking icon, and remember that a photo moved into a third party vault still passed through the regular camera roll briefly on its way there, worth clearing from the original location afterwards if the app does not do so automatically.
A quick audit worth doing once.
Open the hidden album, if the phone has one, and check what has actually accumulated there over time, since it is easy to forget what was tucked away months ago. Move anything genuinely sensitive into the fully locked space, confirm the cloud sync setting for that space, and repeat the check every so often rather than treating it as a one time job.
What this has to do with a booking.
A night out through De Pijp keeps its own record on our side of exactly nothing, no venue, no timestamp and no photograph, since companions on the roster never appear in your pictures and never take their own. Whatever you photograph on an evening with a companion filed under blonde or tall, the settings above are simply how that photo stays yours to manage, on your own terms, on your own phone. The booking page covers the rest of the evening's arrangement.