Operator

About Katafract

A privacy platform, operated end-to-end

Katafract LLC operates Enclave — a privacy platform covering DNS, VPN, encrypted storage, and identity. We run the fleet ourselves: a continuously expanding global network of exit nodes and a replicated S3 storage cluster across multiple regions, provisioned programmatically across independent providers so no single host ever holds the whole stack. The iPhone apps we ship alongside Enclave solve adjacent privacy problems — photo metadata, link safety, document vaults. One conviction runs through all of it: your data is yours.

A cataphract was the heaviest cavalry in the ancient world — fully armored, unstoppable. We build apps that give your data the same protection.

Your phone already holds your most sensitive information: your location, your photos, your identity documents. We build around that fact — not by moving data to servers we control, but by keeping it on the device that already belongs to you.

Our Apps

Enclave Platform

Beyond the apps, we operate Enclave — a privacy platform for people who want to own their network, identity, and digital perimeter. Haven provides encrypted DNS that blocks ads and trackers. WraithVPN routes your traffic through global nodes with no logs and no identity required. Vaultyx provides zero-knowledge encrypted cloud storage. Sigil issues token-based identities so you never have to hand over an email address.

See Enclave plans →

Infrastructure

Enclave runs on a continuously expanding global fleet — WireGuard exit nodes across North America, Europe, and Asia, and a geographically replicated S3 storage cluster spanning US East, US Central, and Canada East. New regions come up on request: our provisioner spins new nodes across Hetzner, Vultr, OVH, and Contabo via API in minutes, so the fleet grows with demand rather than sitting on a fixed footprint. Every file in Vaultyx is encrypted client-side before it ever touches our servers. Standard S3 API means you own your data — export it anytime with any S3 client, no lock-in. The entire platform is WireGuard-meshed with zero-knowledge design: we encrypt everything we can and store only what we must.

How We Build

Our core principle: your data is never collected, retained, or sold. For ExifArmor, ParkArmor, and DocArmor, all processing happens entirely on your device — no servers, no network calls, nothing to breach. SafeOpen is different by necessity: inspecting a link requires fetching it, so we do that fetch through our own privacy proxy. We see the destination so you don't have to expose your device to it. We log nothing about you.

Our apps are free to try and fair to upgrade. ExifArmor and ParkArmor are free with core functionality — no accounts, no timers, no expiry. A single $0.99 one-time purchase unlocks the full experience permanently, tied to your Apple ID. SafeOpen is free — 10 scan credits included, refilled monthly. Additional credits available as one-time in-app purchases (100 for $0.99, 500 for $2.99, 2,500 for $9.99). No subscription, no dark patterns, no dark consent flows.

Katafract, by the numbers

Founded
2025
Fleet
Global · expanding
Providers
Hetzner · Vultr · OVH · Contabo
Data collected on users
Zero

Legal

Katafract, ExifArmor, ParkArmor, SafeOpen, DocArmor, WraithVPN, Vaultyx, and the Katafract shield mark are trademarks of Katafract LLC. All rights reserved.

Apple, iPhone, iOS, Face ID, and App Store are trademarks of Apple Inc., registered in the U.S. and other countries. Katafract LLC is an independent developer and is not affiliated with Apple Inc.

Contact

Get in Touch

Katafract LLC

hello@katafract.com

For general inquiries, press, or partnership questions. We typically respond within one business day.