Keep images encrypted or somehow scrambled.
Since the key must be in the APK, you can always crack a specific attacker, so do not worry about anything extra strong. A simple cipher with a key in the code is enough to stop an ordinary overly curious user.