We can't profit from your data. By design.
Trust pillars
Subscriptions, not surveillance
We make money when you pay for privacy protection. That's it. No ads, no data sales, no affiliate data sharing, no investor data access. Ever.
Minimal data, maximum deletion
We collect only what removals and monitoring require, and delete it when we're done. No profiles, no behavior analysis, no data kept 'just in case.'
No adtech investors
Privately held by NCRYPTO Labs (semiconductors, autonomous systems) — no Meta, no Google, no Surfshark parent, no VC board pressuring us to monetize your data.
Our own infrastructure
Processed and stored on our own servers, built to GDPR standards, encrypted at rest and in transit. Not on a third-party cloud.
Security-first architecture
Built by a team that pen-tests enterprises for a living. Annual third-party audits, SOC 2 Type II in progress. We engineer security, not promise it.
Radical transparency
What we collect, how long we keep it, and why. Each legal page opens with a plain-language summary, so you can grasp it without parsing 40 pages of legalese.
Why most privacy promises are worthless
When Meta says “your privacy is important to us,” they mean it the way the fox cares about the henhouse. Meta made $134 billion in 2023, almost entirely from advertising powered by surveillance of 3 billion users. Their business requires your data. Their privacy policy is damage control, not a commitment.
This isn’t unique to Meta. Google, Amazon, TikTok, and thousands of smaller companies operate the same model: offer a free product, harvest behavioral data, sell targeted attention to advertisers. Your data isn’t the byproduct — it’s the product.
Every one of these companies has a privacy policy that says they “protect” your data. Every one of them has been caught violating that promise. Because the promise conflicts with the business model.
Why KnytX is structurally different
KnytX is not an advertising company. We are not funded by advertising companies. We have no advertising business, no data brokerage, no adtech partnerships, and no investors who profit from surveillance.
We’re a division of NCRYPTO Labs, a company that designs semiconductor chips and builds autonomous drones. Engineering is the parent company’s business, not data exploitation. Our own revenue comes from people who choose to pay us for privacy protection. If we betray that trust, we lose our customers. No alternative revenue stream cushions the blow.
This is what we mean by structural alignment: it is not in our interest to harm you. Not because we are virtuous, but because our business model makes harming you unprofitable.
The incentive test
Ask any company this question: “If you secretly sold my data tomorrow, would you make more money or less money?”
2023 total revenue: Google ~77% from advertising, Meta ~98% (Alphabet and Meta 2023 10-K filings). KnytX ad revenue: $0 by design.
Their privacy policy constrains their real business. Selling data IS the business model.
Surveillance is embedded in every product — Search, Gmail, Maps, Android, Chrome. Privacy is a constraint, not the goal.
Privacy protection IS the product. Betraying trust destroys the entire business. No fallback revenue. No cushion.
When the incentives are aligned, the privacy promise is credible. When they’re not, it’s marketing.
Security & infrastructure
Our own infrastructure
All KnytX user data is processed and stored on our own infrastructure — not on a third-party cloud. We build to GDPR standards because it is the strongest data protection framework in the world. Your data stays on our servers unless you explicitly configure it otherwise. Custom data-residency options are available for business customers on request.
This isn’t a premium add-on. It’s the default for every user, every plan, including the free tier.
Encryption
Data at rest is encrypted with AES-256. Data in transit is encrypted with TLS 1.3. API communications use certificate pinning. Database backups are encrypted with separate key management. We follow a zero-trust internal architecture. Our own engineers can’t access your data without audited access controls.
Security audits
Our parent company, NCRYPTO Labs, conducts penetration testing for enterprises. We apply the same adversarial rigor to our own systems. KnytX undergoes annual third-party security audits. SOC 2 Type II certification is in progress. We will publish audit summaries in our transparency reports.
Compliance
KnytX is built for multi-jurisdictional compliance:
- GDPR — EU/EEA data protection regulation
- UK GDPR — United Kingdom post-Brexit data protection
- CCPA/CPRA — California consumer privacy law
- DPDPA — India's Digital Personal Data Protection Act, 2023
- Swiss FADP — Swiss Federal Act on Data Protection
We maintain Data Processing Agreements (DPAs) with every sub-processor. The full list is published at /transparency/sub-processors/. We conduct Data Protection Impact Assessments (DPIAs) for new processing of personal data. A redacted DPIA summary covering Executive-tier biometric processing is available on request at legal@knytx.com. We support data subject access requests across every jurisdiction we operate in. See the Removal Legal Basis by Region matrix for the statute citations we file under in each region.
For legal documents, see /legal/privacy/, /legal/biometric-policy/, /legal/mobile-permissions/, /legal/authorised-agent/, and /legal/impersonation-takedowns/.
What we’re building differently
No dark patterns
We will never use dark patterns. That means no tricks to make you share more data, keep a subscription you want to cancel, or accept privacy-eroding defaults. Cancellation will be as easy as signup. Privacy settings will default to maximum protection, not minimum.
No silent policy changes
If we ever change our privacy policy in a way that affects how your data is handled, we will notify you by email. The email will explain, in plain language, what changed and why. We will give you 30 days to cancel and have your data deleted before the new policy takes effect.
No data hostage
Your data is yours. You can export everything we have about you at any time. You can delete your account and all associated data at any time. We will never make it difficult to leave. If a competitor builds a better privacy tool, you should use it. We’ll make it easy to take your data with you.
Open accountability
We are committed to publishing annual transparency reports. Each report will disclose exactly what data we hold, how many government requests we received, and any security incidents that affected user data. Accountability requires sunlight.
The bottom line
We don’t ask you to trust us because we say nice things about privacy. We ask you to look at the structure:
- A subscription business model with no advertising revenue.
- A parent company with no adtech connections.
- A commitment to data minimization and deletion.
- Public accountability through transparency reports.
If that structure ever changes — if we take advertising money, sell data, or compromise these commitments — you should leave immediately and tell everyone you know. We will have earned it.
Until then, we’re building the privacy tools that people deserve and companies like Meta will never provide. Because they can’t. It would destroy their business.
We’re glad that protecting you IS our business.
Take the next step. Ready to see the structure for yourself? Join the waitlist for early access, explore our products, or read the legal framework that backs every removal request we file.
Legal
Operational
Technical
Frequently asked questions
Why should I believe these promises?
#What if NCRYPTO gets acquired by a company that wants to monetize data?
#How is this different from what every other company says?
#What data do you actually collect?
#What happens to my data if I cancel?
#No questions match your search. Ask us directly →