I’m a bit confused on why you’re seeking additional encryption while also wanting the app to be local-only. The OS already handles disk encryption doesn’t it? I think you can just use your native gallery app with any sync features disabled.