Privacy shouldn't be a premium feature

Why we exist

Almost every service you use today can read what you keep in it. That isn't malice — it's simply the easiest architecture to build. The problem is what it implies: your privacy becomes a promise the company makes, and a promise lasts exactly until the next policy change, the next breach, or the next acquisition.

We would rather not have that promise to make. Every Nyo module encrypts data on your device before it leaves, with a key derived from your master password that is never sent to us. It isn't that we chose not to read it: it's that we can't. That costs us things — we can't add up your transactions on the server, and we can't recover your account if you lose both the master password and the recovery phrase — and we accept that cost, because it's what makes the guarantee real instead of rhetorical.

We started with passwords and finances because they're the most sensitive everyday data there is. From there the suite grows module by module, always on the same principle, always in the same account.