Privacy infrastructure for people who can't afford to be read

Two tools. One principle:
infrastructure they can't switch off.

Koldkit builds privacy-first infrastructure for communities and organisations working where surveillance is a threat — connectivity that can't be silenced, and records that no one but you can read.

An open-source initiative by Nyimuyar (NMY) · nyimuyar.org

Connectivity

Watershed

Community-owned mesh internet

A mesh internet owned and operated by the communities it connects — built from affordable radio nodes, with no ISP required and no central tower to shut down. Encrypted messaging and calls run free within the mesh, even when the wider internet is cut.

Mesh network LoRa + Wi-Fi HaLow Reticulum Open source
More details
Accounting

Trove

End-to-end encrypted accounting

Real double-entry accounting — journals, reports, invoicing, audit trail — encrypted on your device with a key only you hold. Not even the people who run Trove can read your books. Your numbers, your keys, your people protected.

Double-entry AES-256 / E2E IPFS storage Open source
More details Open Trove →
More details

Frequently asked questions

Everything below is open source. Adopt it, fork it, run it yourself.

Watershed

Connectivity for communities changing history
What is Watershed?+
A community-owned mesh internet for people on the frontlines of Myanmar's transition. It's built from affordable radio nodes — no ISP required, no central tower to shut down — so connectivity belongs to the communities that depend on it.
Who is it for?+
The 5 million+ displaced people in Myanmar's conflict-affected regions who live without safe, affordable, or reliable internet — where what connectivity exists is expensive, intermittent, and actively surveilled.
How does the network work?+
A two-tier mesh. Backbone nodes (Raspberry Pi 4 + Wi-Fi HaLow) link settlements over several kilometres and host local services. Leaf nodes (ESP32 + LoRa) reach individual households for under USD 30 each. All traffic is end-to-end encrypted by default at the Reticulum protocol layer.
What does it cost to use?+
Encrypted messaging and voice/video calls run free within the mesh, with no internet backhaul — so essential daily communication keeps working regardless of outside connectivity. Internet access beyond the local intranet is offered at market-rate pricing.
Who owns and runs it?+
Community micropreneurs — displaced people from the communities served — earn their node hardware through setup and training, then operate and maintain nodes as a livelihood. No single actor controls the network; no outside investor captures its value. It's infrastructure communities own, not a service they receive.
Is it open source?+
Yes. Hardware designs, node configurations, deployment guides, and training materials are released under a Creative Commons licence — a replicable toolkit any community facing connectivity exclusion can adopt, fork, and adapt.

Trove

Encrypted, decentralised accounting
What is Trove?+
Real double-entry accounting software — journals, chart of accounts, trial balance, P&L, balance sheet, invoicing, and an audit trail — built so that all data is encrypted on your device with a key only you hold.
Can the people who run Trove read my data?+
No. Data is not just encrypted in transit or on a server — it's encrypted with a key that never reaches us. This isn't a promise to trust; it's a property of the architecture.
How do I log in?+
Authentication uses MetaMask (personal_sign → PBKDF2 → AES-256-GCM vault key) or WebAuthn passkeys. The vault key is derived on-device and never transmitted.
Where is my data stored?+
Encrypted records are pinned to IPFS, a decentralised storage network — not a single company server. What's stored is locked ciphertext, useless to anyone without your key.
What if I lose my key — is there a backdoor?+
No backdoor. Recovery requires a threshold of your own trusted signatories (e.g. any two of four) plus a printed backup code, coming together. No single person can do it alone. We can help coordinate a recovery; we cannot perform one.
What does it cost?+
Self-hosted is free — it's a public tool you run yourself. Supported (source + support) and Managed (we operate it for you) tiers carry a fee. At every tier the same guarantee holds: we cannot read your data. Tiers differ only in operational custody, never cryptographic custody.
Who is it for?+
Anyone whose financial records should belong to them alone — privacy-focused individuals, Web3-native and self-custody users, DAOs and collectives, and civil-society groups, human-rights organisations, humanitarian responders, and independent media working in surveilled or fragile environments.
Where can I try it?+
Trove lives at its own home — open Trove. It's a single HTML file with no build step and no backend required for self-hosted use.
Get in touch

Contact us

Questions, deployments, partnerships, or press. Your message is encrypted in your browser before it's sent.

🔒 Your message is end-to-end encrypted with PGP in your browser before it leaves your device. Our server only ever relays the ciphertext — it cannot read what you write.