[dns_snek]

That's easy, just store all the user-generated data in an encrypted file. You might be able to copy the blob but the vast majority of users won't be able to extract the files within.

[fsflover]

This is much harder and can't be done accidentally, unlike on Android.