Clear information. Real limits.
Privacy, terms
& safety.
Launch is not authorized by these drafts. Poland is the intended operator jurisdiction, with Poland and Norway initial target markets. No registered operator or public service address has been supplied. Worldwide availability, children's eligibility and parental authorization require assessment before public registration opens. A messaging app is not automatically exempt from these rules.
Draft updated 4 November 2026. These summaries need legal and native-language review. They do not replace mandatory consumer or data-protection rights.
Privacy overview
The website
This preview has no analytics, advertising, third-party fonts or payment scripts. Recipient usernames stay in page memory and are not submitted or saved by this site. Selecting cryptocurrency on the Ken+ preview contacts CoinGecko for a EUR market rate; CoinGecko can process the visitor's IP address and connection information, but the request contains no recipient username. Estimates expire after eight minutes and are not guaranteed payment quotes. GitHub Pages or another hosting provider can process IP addresses, request headers and connection logs to serve the site. Email links open your chosen email service; the correspondence is handled by that service and Proton Mail, not Ken's end-to-end encryption.
The app
Ken processes usernames, password-verification data, account/session information, public encryption keys, encrypted payloads, delivery metadata and enabled account settings. Optional verified contact details are processed only when those features are used. Support/report metadata, staff handling and backups have separate retention and access requirements. We do not claim “no data collection.”
Supported private messages and attachments use end-to-end encryption. Public community names, descriptions and membership identities are visible to signed-in users. Your identity is not anonymous simply because content is encrypted. Recipients can copy messages; screenshots and independently saved files cannot be recalled.
Optional Tor routing is not device-wide anonymity. Apple push, Maps, email and external payment/browser apps are outside Ken's Tor route. A production push service sends Apple a generic alert and an opaque short-lived reference, not message text; Apple still processes device tokens and connection metadata. Physical-device validation is pending.
Recovery, retention and deletion
Account recovery does not restore lost device keys or history. Encrypted Ken Cloud backup is planned, not live. Account deletion in the app requires current-password confirmation and network access. Other users' copies and shared signed community history may remain. Backup expiry, deletion-journal reconciliation, applicable legal holds and provider retention must be accurately documented before launch; no instant deletion of every copy is promised.
Final controller identity, legal bases, provider locations, international transfers, exact retention, supervisory-authority details and applicable rights notices remain pending. Send privacy requests to Kenmessaging@proton.me. Include only necessary account context. Do not send passwords, PINs, keys or identity documents. Responses and any justified extensions must comply with applicable deadlines; email is not an emergency service.
Terms overview
Ken is in development, not a guaranteed or emergency communications service. No public release date or worldwide availability is promised. Keep your credentials and device keys safe. Do not impersonate others or use the service for unlawful exploitation, abuse, threats, harassment, fraud, spam, malware or interference.
You retain your content rights and must have permission to share content. Only the permissions necessary to provide the service are intended; recipients may retain their own copies. Reports do not automatically prove wrongdoing. Restrictions and appeals require a staffed, lawful process.
Ken+ is not on sale
Proposed pricing is €8/month or €48/year, with 30 GB media storage plus planned Ken Cloud, bound to one account and not transferable. Billing, storage and entitlements are not live. The proposed two-year unpaid media-retention period is not an operational guarantee. Taxes, automatic renewal, cancellation, withdrawal rights, refunds and region-specific purchase rules must be confirmed before any payment is accepted. No statutory consumer rights are waived here.
Final operator details, contractual eligibility, complaints procedure and jurisdiction-specific terms require review before launch. Draft text is not presented for acceptance.
Safety & support
The operator has designated Kenmessaging@proton.me for support, privacy and abuse intake. Staff coverage, response commitments and production handling still require verification. This is not a 24-hour emergency channel.
- Immediate danger: contact local emergency services. In Poland and Norway, call 112 for emergencies where applicable. Do not wait for an email response.
- Unwanted contact: use Block and Report spam in Ken. Reporting does not automatically transmit encrypted chat history or notify the reported person.
- Abuse: send necessary usernames or community identifiers, approximate dates/time zone and non-sensitive context. Share only information you are entitled to provide.
- Child safety: never attach, forward, download or request suspected child sexual abuse material. Give non-graphic identifiers only. Contact police or an appropriate child-protection reporting service for your location.
- Appeals: include a case reference, decision date and brief explanation. Do not resend sensitive evidence. Your rights to contact authorities are unaffected.
- Encrypted tickets: in-app support requires an initialized inbox and independently verified support fingerprint. These keys and staff access must be operationally validated before launch. Email remains a separate channel outside Ken's end-to-end encryption.
Children & eligibility
No “all ages, no conditions” eligibility is asserted. Children's data-protection consent, contractual capacity, parental authorization and store age ratings are distinct issues and vary by jurisdiction. Poland, Norway and any additional launch markets need specific review. The signup puzzle is not age verification. Until arrangements are finalized, these drafts do not authorize a children's launch.