Most companies comply by promising to protect what they collect. khėnsu.ñü collects nothing to protect. There is no field in the protocol for a name, a phone number, an email address, a location or a contact list. Data that doesn’t exist can’t be breached, sold, subpoenaed or misused.

data inventory

everything we could touch.
and what happens to it.

The complete list, for the app, the network and the sites. There is no advertising, no profiling, no data sale or sharing, and no data broker relationship of any kind.

Data	Where it exists	Who can read it	Kept
Messages, calls, media, files, payments	Your devices; sealed packets in transit and in mailboxes	Only the people in the conversation	On your devices until you delete them; mailbox copies expire after delivery or 30 days
Contacts, groups, search index, AI memory	Your devices only	You	Until you delete them
Handle (name.khensu.nu) and public keys	Key transparency log	Anyone, because you chose to publish a handle	Until you release the handle
IP address	The entry node your device connects to, while connected	That node’s software, in memory only	Never logged; gone when the connection closes
Push token	Sealed inside your wake capability; opened by the push gateway to send a wake	The gateway, in memory, for up to 20 seconds	Never stored
App Attest check	Sent once to the credential issuer when you join	The issuer, to check the app is genuine	Discarded after the check; only a commitment the issuer can’t link to you remains
Payment amounts and parties	Shielded notes	Only sender and recipient	Era trees and nullifiers are deleted 30 days after each era closes
Email you send us	Our mailbox	Elliott Wave LLC	Until your request is handled, or for reservations until your shield ships; deleted sooner on request
Website visits	Google Cloud’s content delivery network, to serve the page	Google Cloud, as our processor	We keep no logs

privacy laws

every major privacy law.
met by design, not by policy.

Data minimisation, purpose limitation and storage limitation are the architecture. Every server-side item is transient or deleted on a fixed schedule. No processing relies on consent, none involves special category data, and there is no automated decision-making or profiling.

Data protection by design and by default is the architecture: stealth and end-to-end encryption can’t be turned off. A data protection impact assessment covers the app, the network, the credential issuer and the push gateway, and is published with the specifications. Breaches of the little we hold are reported to the supervisory authority within 72 hours, and to the people affected without undue delay.

your rights

your rights, in your hands.
literally: the data is on your phone.

Access and portability: Everything is already on your device. Export it from the app in an open format, any time.
Erasure: Delete a message, a conversation or the whole app; your devices hold the only readable copies. Releasing a handle publishes a revocation, private lookup mirrors drop it within one epoch, and the log keeps only a hash that can’t be read back to the name.
Rectification: Edit your profile and handle record in the app.
Restriction and objection: There is no processing to restrict or object to beyond delivering what you send.
Email we hold: Write to hello@elliottwave.studio. We answer within 30 days, free of charge.

no sale, no sharing, no profiling

nothing to sell.
nobody to sell it to.

No accounts with names, numbers or emails. You are a key on your device, not a row in a database.
No advertising and no profiling. No cross-context behavioural advertising, no inferences, no data brokers.
No readable transfers. Content never leaves your devices readable, so nothing readable crosses a border. Packets cross the internet sealed.
Children. khėnsu.ñü is for people 13 and older, or the age of digital consent where it’s higher. It collects no personal information from anyone, so it collects none from children.

lawful access

we can’t decrypt.
there is no key, mode or update that could.

We answer valid legal process with what we hold, which is the inventory above. A breach of any node, mailbox, the credential issuer or the push gateway exposes sealed packets and nothing readable. Every request we receive is counted in our transparency report.

digital services act · online safety act

public spaces, moderated.
private messages, never scanned.

EU digital services act

Public feeds, forums and sites have notice and action through signed label lists and an illegal-content hash list. Private messages are interpersonal communications, outside content moderation duties. Points of contact and transparency reports are published.

UK online safety act 2023

Public content is handled the same way. Private messages stay end-to-end encrypted. We never scan private content.

child abuse material

Known material is blocked from public content by hash list. Reports go to NCMEC in the US and to the relevant national hotline.

app Store

Apple privacy label: Data Not Collected. Required-reason APIs are declared in the privacy manifest.

standards

the CNSA 2.0 suite.
exactly, with no classical fallback.

Every key exchange is ML-KEM-1024 and every signature is ML-DSA-87, the algorithms the US National Security Agency requires for national security systems. Anyone can rebuild every release and check it against the logged hash.

Standard	How khėnsu.ñü uses it
FIPS 203	ML-KEM-1024 for every key exchange
FIPS 204	ML-DSA-87 for every signature
FIPS 197 and SP 800-38D	AES-256-GCM
FIPS 180-4	SHA-512
NSA CNSA 2.0	The khėnsu.ñü suite is the CNSA 2.0 suite, exactly: ML-KEM-1024, ML-DSA-87, AES-256, SHA-384/512
RFC 9420 (MLS)	Group messaging with MLS_256_MLKEM1024_AES256GCM_SHA512_MLDSA87
EU Cyber Resilience Act	Coordinated vulnerability disclosure with a 3-day acknowledgement, security updates for each product’s supported life, a software bill of materials for every release, exploited vulnerabilities reported to ENISA within 24 hours
Reproducible builds	Node, firmware and Raspberry Pi image builds are reproducible; every release hash is in the transparency log and the network archive

Security reports: security@elliottwave.studio and /.well-known/security.txt. Details on dev.khensu.nu/security.

for developers on webË

build on it.
inherit all of it.

No server-side API for user data. Content is end-to-end encrypted on the device.
Stealth can’t be turned off. A webe app can’t leak who talks to whom.
No third-party tracking. Sites reach the ordinary web or third parties only if their policy lists them.
Data Not Collected. The App Store label for an app built only on khensu-core, and buyers stay anonymous to sellers.

accessibility

for everyone.
WCAG 2.2 AA, in the app and on the sites.

WCAG 2.2 level AA

The app and every site.

European accessibility act

Messaging and commerce meet EN 301 549.

ADA and section 508

Met through WCAG 2.2 AA.

Apple accessibility

VoiceOver, Dynamic Type, Voice Control, Switch Control, Reduce Motion and Increase Contrast throughout, with Apple’s standard controls.

export

mass-market encryption.
classified and filed.

khėnsu.ñü’s encryption is mass-market software under the US Export Administration Regulations: ECCN 5D992.c under License Exception ENC, section 740.17(b)(1), with the annual self-classification report filed with BIS and the NSA. Open-source repositories are published under section 734.3(b)(3) with notice to BIS, and App Store export documentation is filed with Apple. The app isn’t offered in countries under comprehensive US embargo.

payments

your money, your keys.
no card data, anywhere.

Self-custody. khėnsu.ñü never holds your funds or your keys.
PCI DSS scope: nil. No card data touches khėnsu.ñü, its nodes or its sites.
Licensed partners. Where a licensed third party provides card payments or on-ramps, it meets its own licensing, anti-money-laundering and sanctions obligations.

suñůlink.shield

suñůlink.shield ships certified.
radio, safety, battery, materials and recycling.

Area	Ships with
Radio, US and Canada	FCC Part 15 (15.247 for Wi-Fi HaLow at 902–928 MHz; 15.247 and 15.407 for Wi-Fi and Bluetooth), ISED RSS-247
Radio, EU and UK	Radio Equipment Directive 2014/53/EU (CE) and Radio Equipment Regulations 2017 (UKCA), with the RED cybersecurity requirements (EN 18031-1)
Product safety	IEC 62368-1
Battery	IEC 62133-2, UN 38.3, EU Battery Regulation 2023/1542
Materials	RoHS, REACH, California Proposition 65
Recycling	WEEE take-back
Security	EU Cyber Resilience Act requirements; open firmware with post-quantum secure boot

suñůlink.shield Full specifications

contact

ask us anything.
a person answers.

Privacy, data protection and legal process:hello@elliottwave.studio. Security: security@elliottwave.studio. Elliott Wave LLC is established in the United States and is the controller for the website, the email you send us, the credential issuer and the push gateway.

The full compliance document Security and privacy law

compliant by having nothing to give.your data never leaves your devices readable.

everything we could touch.and what happens to it.

every major privacy law.met by design, not by policy.

your rights, in your hands.literally: the data is on your phone.

nothing to sell.nobody to sell it to.

we can’t decrypt.there is no key, mode or update that could.

public spaces, moderated.private messages, never scanned.