Privacy is not a feature. It is the foundation.

DREJ was built from the ground up around privacy. You control what you share, how much detail, and who can buy it.

5 Privacy Levels

1

None

Full data, no transformations. Use when you want buyers to see every detail.

2

Low

Identifiers cryptographically hashed using HMAC-SHA256. All other data remains unchanged.

3

Medium

Identifiers hashed. Emails anonymized. Phone numbers masked. Amounts rounded to nearest 10. GPS generalized to neighborhood level.

4

High

Identifiers hashed. All text fields removed entirely. Numbers rounded to nearest 100. Only category and type fields kept.

5

Maximum

No individual records shared. Only aggregate statistics: total count, data types present, and date range.

Extra Protection for Pool Data

When your data goes into a data pool, it receives an additional layer of privacy protection — k-anonymity (k=5). Every record is indistinguishable from at least 4 other records. Records that don't meet this threshold are suppressed.

Each of the 11 categories has a defined output schema. Pool data is transformed to match before export.

Encrypted at Every Step

On device

AES-256-GCM before data leaves your phone

In transit

TLS (HTTPS) for all communication

At rest

Encrypted AWS infrastructure with strict access controls

Privacy hashing

HMAC-SHA256 one-way function — originals cannot be recovered

Your Rights

Right to deletion (GDPR Art. 17)

Full account and data deletion

Right to data portability (GDPR Art. 20)

Export all your data

Consent management

View, modify, or withdraw consent anytime

EU Data Act compliance

Fair compensation, purpose limitation, data product passport

Have a privacy question? privacy@drej.io