Private by Design: Why Your Most Personal Data Shouldn't Live on a Server

Think about what your relationship notes contain. The conversation where your friend told you about their marriage problems. The health concern your parent mentioned in passing. The thing your colleague confided over coffee. The worry your child expressed. This is some of the most intimate data in your life — and almost every app designed to help you track relationships stores it on a server, in the cloud, accessible to the company that built it and anyone who hacks them.

The surveillance business model

Most digital tools that touch personal relationships are built on a data-extraction business model. Your contacts, your interactions, your notes — these are valuable to advertisers, data brokers, and anyone willing to pay for an intimate profile of your social life. The product is free because you are the product.

Whokin does not operate this way. The business model is simple: you pay for the app, and the app works for you. Not for advertisers. Not for data partners. For you.

What "on-device encrypted" actually means

Whokin stores all your kin data — names, notes, interaction history, voice transcriptions — in an encrypted SQLite database on your device. The encryption key is derived from your credentials and stored in your device's secure enclave. This means that even if someone physically accessed your phone, they cannot read your data without your authentication.

The Whokin server never holds your relationship data. The server handles authentication, subscription management, and features like SharedKin that require coordination between devices. It never holds the content of your kin notes.

What this means in practice

If Whokin were hacked, there is nothing to steal. If Whokin the company were acquired, the new owner would gain no access to your notes. If law enforcement requested user data, there would be no relationship content to hand over. The architecture of privacy is the protection.