What Does It Take to Sell Privacy as a Paid Product?

For two decades the default price of consumer software has been attention. Free email, search, and storage are paid for by advertising, and advertising pays more as the provider learns more about each user. A company that wants to sell privacy has to build its business on a different payer: the person using the product.

Proton, which grew out of a 2013 project by scientists who had met at CERN, is a useful case for how that works in practice. It sells encrypted mail, a VPN, a calendar, storage, a password manager, and an AI assistant directly to users, carries no advertising, and has been controlled by a non-profit foundation since 2024. Its record shows a pattern that applies to any values-led technology company: each decision that makes a privacy promise sellable also creates a dependency that another party can press on.

A business built on the paying reader

When the reader pays, the incentives of the business and the interests of the user line up. Ad-funded email earns from what it learns, which pulls product decisions toward scanning and tracking. A subscription business earns by keeping paying customers, so encrypted storage and the absence of tracking pixels become part of what is sold. This is incentive alignment, and it sits at the economic core of any privacy product.

Alignment carries a cost. A freemium model gives most accounts away to win sign-ups and word of mouth, and every free account still uses storage, bandwidth, and support. The paying minority funds everyone else.

Proton co-founder Andy Yen has said the company is profitable with roughly one user in ten paying. The company keeps its revenue, conversion, and churn figures private, so outside observers have that self-reported statement and little else. Privacy priced as a premium good also reaches those who can afford it first, which leaves an open question about whom the model serves.

Pre-payment as evidence

Demand for privacy is easy to claim and hard to measure. Proton measured it with money. Its public beta opened in May 2014 and passed 20,000 users within two days. A crowdfunding campaign that summer raised more than $500,000 from over 10,000 backers, by the company's count, for a product that was still unfinished.

Money committed in advance is stronger evidence of demand than sign-ups or surveys. Timing helped: the campaign followed the 2013 Snowden disclosures, which gave the founders' purpose a public audience at almost no acquisition cost. The transferable part is the method, a purpose clear enough to state in one sentence and a pre-sale that tests it. Founders launching in a quieter year have to buy the attention that the moment supplied.

Every intermediary is a lever

A privacy company still runs its money through processors, its traffic through networks, and its apps through stores. Each one is a point of intermediary risk. In June 2014 PayPal froze the account holding Proton's crowdfunding money and asked whether encrypted email was legal, then lifted the freeze a day later and called it a mistake.

In November 2015 a denial-of-service attack also took down Proton's data center and upstream providers. Under pressure from other affected companies, Proton agreed to pay a ransom of 15 bitcoin, and a second, unidentified group kept attacking. Proton later called paying "a wrong decision."

The response was to own more of the infrastructure. Owning the stack reduces exposure to outside parties and concentrates operational risk inside the company, as global outages in January 2025 and August 2026 showed. Resilience becomes a running cost that recurs every year.

What encryption covers, and what law can reach

End-to-end encryption keeps message content unreadable to the provider. Metadata, such as an IP address or device details, sits outside that protection and falls under local law. In 2021 a binding Swiss order, which followed a French police request routed through Europol, led Proton to log and hand over the IP address and device details of an account used by climate activists. Proton then removed a homepage line saying it kept no IP logs by default and rewrote its privacy policy.

Law also changes. In January 2025 the Swiss government proposed identification and six-month data-retention duties for online services with 5,000 or more users. Proton said it would leave Switzerland if the rules passed and placed its new AI assistant, Lumo, on servers in Germany, while keeping its headquarters in Geneva. In February 2026 the government ordered an impact study and a second consultation.

A jurisdiction is a dependency the company cannot control. The accurate product claim names exactly what the provider can be compelled to log, which makes it narrower and more durable than a slogan about a privacy-friendly country.

The bundle as an ecosystem

People stay with large email providers for the calendar, storage, and documents attached to the inbox. A privacy alternative competes on the same terms by offering an ecosystem of its own. Proton added a VPN in 2017, Drive in 2022, a password manager in 2023, and Lumo in 2025, and brought in the email-alias service SimpleLogin and the notes app Standard Notes.

Bundle economics follow from that choice: one account and one subscription raise switching costs and revenue per user, and an entry product such as the VPN can lead customers to the rest. Each product in the bundle also faces specialists that build one thing, which stretches a single engineering team across many contests at once.

Ownership as part of the promise

Venture investors usually need an exit, often a sale to a larger platform or a push toward monetizing data. Proton's only venture money was a $2 million round in 2015, and growth since then has been paid for mainly by subscriptions.

In June 2024 co-founders Andy Yen and Jason Stockman and early employee Dingchao Lu donated shares to the non-profit Proton Foundation. It became the largest voting shareholder, and any change of control now needs its consent. A mission lock is as strong as the governance of the body that holds it, which makes the foundation's board and rules part of what customers are trusting.

When the product is trust

Proton reaches mobile users through the Apple and Google app stores while competing with both companies' own products, and it has answered with policy work, including joining a 2025 antitrust class action against Apple. Positioning against the largest platforms builds identity quickly and turns the founder into a public voice. In January 2025 a political message by Yen on X drew user backlash, and Proton pledged that its official channels would share no political opinions.

Across these decisions the pattern holds. A privacy company sells a promise, and every party that can press on that promise becomes part of the product: a processor, a host, a court, a government, an investor, a platform, or the company's own leadership. The practical discipline is to list the promises, map who can press on each one, and decide in advance how much of that pressure the business will carry.