With The Flow — Taken then. Still true later.

The capture keeps a record.

The gallery stays closed. What you shoot is signed with the moment it was received, the place the phone reported, and the account that was signed in.

Time.

The proof uses the time our server received the capture. The clock on the phone is not the clock on the record.

Place.

Latitude and longitude, as the phone reported them at the shutter. If the phone marks that reading as simulated, the proof says so.

Signature.

The phone signs the file’s hash, the time, the place, the lens, and the account. The private key stays on the phone. Those fields stay as they were saved.

A sample record

Received2026-11-05T09:14:02.184000Z

Latitude22.319301

Longitude114.169403

LensBuilt-in camera

SignatureChecks against the phone’s public key

Share the picture. Send the proof.

The share sheet can hand the file to Instagram, X, Threads, Messages, or the web. The link is where the signature is checked, after the platform has made the picture its own.

The signature shows that the saved record still matches. A screen in front of the lens is still a picture of a screen. On iPhone, capture uses the built-in camera. On Android, it opens the system camera.

Questions.

Can I upload a photo?

The capture flow opens the camera. It does not offer the gallery.

What does someone else see?

A proof page for that capture. It checks the signature. When the file can be read, it hashes the file again. The page also shows the time, the coordinates, and a map link.

Is this a Content Credentials badge?

The proof is a signature and a link. A Content Credentials badge needs a certificate on the C2PA trust list, and the manifest embedded in the file. This version publishes the checkable record.

Does the signature include my face?

It includes the signed-in account and the phone’s key. It does not include a face scan.

Taken then.Still true later.